Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json)
Hash identifier: 4aJOyWL//8A/nYhFFtg91gzGEdm94MKwsF+3rPEFNY0=
Subject key identifier: 32:DA:F3:5E:33:2C:13:4F:02:34:36:72:E7:0E:BA:AD:F9:37:9C:90
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 019E1F10B304E2600AD7F9A324A73C14F623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
Manifest number: 13AB
Signing time: Wed 13 May 2026 02:00:48 +0000
Manifest this update: Wed 13 May 2026 02:00:48 +0000
Manifest next update: Thu 14 May 2026 02:00:48 +0000
Files and hashes: 1: 4l82aU37AqmgAJlyCPGwmnooDcg.roa (hash: IgTUPhE8nSCBnJ2HPZrElAawWv50u6q/sojixDH5raQ=)
2: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: Y0RSkYj77S03hw9SSLkIljpPnaJdR0ZrktBaAs8P9KA=)
3: hZf5u0QbS1XG7PsEyRnhTDo6HjI.roa (hash: 3UtzjBeSVvMSTFyNhnUR4ZuKLONPZvV6PMClfmnPEuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:b3:04:e2:60:0a:d7:f9:a3:24:a7:3c:14:f6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: May 13 02:00:48 2026 GMT
Not After : May 14 02:00:48 2026 GMT
Subject: CN=32daf35e332c134f02343672e70ebaadf9379c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:07:4f:c1:16:6c:68:7c:ff:0a:d9:1c:76:f3:
07:20:0f:a6:6a:32:b1:1e:95:b5:1d:ee:8f:fe:bc:
a1:66:5d:07:fe:9a:21:f4:14:2a:3d:f4:7c:3f:6e:
8c:24:f1:9c:25:43:52:b7:b4:d6:03:bb:6e:40:5d:
e7:6d:f1:57:fa:c5:be:d2:d5:24:bd:a7:84:05:2b:
49:98:df:89:c9:1c:8f:05:86:a8:ed:e5:f9:f9:15:
b3:4f:01:23:34:dd:db:1d:20:de:8d:38:83:33:38:
9a:0a:99:3b:35:db:77:a2:27:e4:1a:d7:b7:56:ac:
dc:25:54:72:af:ad:34:30:ce:97:64:74:bf:fc:fa:
5f:40:14:2a:5a:8f:31:d7:16:5a:c2:4d:61:74:21:
14:3f:92:7e:74:81:9d:7a:18:15:d8:13:83:d7:81:
d8:57:1a:37:68:e7:e2:81:2d:b0:3a:98:53:1b:bb:
4c:5f:a8:7f:0c:10:e0:26:32:86:f6:79:54:e3:ca:
d9:31:77:1f:00:d9:12:72:b3:af:51:2d:d6:68:8a:
50:9d:df:86:85:2f:6f:ec:39:04:fc:8d:c7:f1:cc:
4f:ab:11:f5:50:b9:96:fc:fb:d1:0f:c5:f7:35:e2:
a1:55:8f:eb:7c:af:25:52:8b:b0:03:a7:95:a9:10:
8b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DA:F3:5E:33:2C:13:4F:02:34:36:72:E7:0E:BA:AD:F9:37:9C:90
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0a:3c:6c:5d:59:ba:62:01:29:ea:24:65:8f:a3:67:05:b5:
7d:1e:fc:9b:43:ae:b9:b4:17:54:e6:3f:99:8f:91:01:d2:d4:
8d:17:b6:3b:96:da:8e:91:d2:15:de:ff:26:e3:10:06:94:d9:
5b:0f:19:8b:84:3e:0e:0b:a2:f4:cf:b7:b6:38:68:08:7d:78:
c3:bf:40:b9:bc:c5:f7:19:13:8f:50:eb:6a:3a:ba:c6:ed:7a:
ba:90:4b:8b:2e:d6:3b:28:44:3b:ef:b0:87:0c:df:8f:aa:7e:
ab:33:ba:c0:26:09:fd:20:df:bc:20:bc:78:fb:1e:b9:57:8f:
5c:38:67:38:34:d3:7b:b0:d3:75:51:70:c2:88:c1:75:08:30:
08:d1:f1:ea:58:47:55:80:63:40:2a:1b:44:e6:9c:56:d4:7d:
94:b4:bb:0d:4c:03:cf:66:b6:3b:70:f4:9e:f9:ac:bf:7c:a8:
c9:f5:bc:de:76:42:48:d8:23:a6:ae:c1:ae:ec:d6:ca:45:a8:
f2:d2:e8:0d:6e:97:06:de:40:57:20:54:0f:cd:0c:20:b0:6f:
3a:4c:06:ce:46:65:44:6e:00:e9:22:db:42:79:5e:22:60:3d:
5b:fc:e8:4e:54:e6:7c:67:a6:11:53:17:f4:0b:ef:de:73:4f:
67:e2:bf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:06 2026 by rpki-client