Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json)
Hash identifier: e2WUBSrBA8HXHh9nKAJ3+n2I/ST4jnuF9+xeSzBNOiY=
Subject key identifier: 03:98:E8:6A:10:72:85:BA:34:0C:B7:6D:82:DC:DA:4B:00:13:DC:CB
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 019D29CE98AED2D1AEDC14BACEB680C6B4D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
Manifest number: 132C
Signing time: Thu 26 Mar 2026 11:01:38 +0000
Manifest this update: Thu 26 Mar 2026 11:01:38 +0000
Manifest next update: Fri 27 Mar 2026 11:01:38 +0000
Files and hashes: 1: 4l82aU37AqmgAJlyCPGwmnooDcg.roa (hash: IgTUPhE8nSCBnJ2HPZrElAawWv50u6q/sojixDH5raQ=)
2: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: /FWK6d0Tnk/hOC7caFylgDFiKODoEG484lbkjM8SiqU=)
3: hZf5u0QbS1XG7PsEyRnhTDo6HjI.roa (hash: 3UtzjBeSVvMSTFyNhnUR4ZuKLONPZvV6PMClfmnPEuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:98:ae:d2:d1:ae:dc:14:ba:ce:b6:80:c6:b4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: Mar 26 11:01:38 2026 GMT
Not After : Mar 27 11:01:38 2026 GMT
Subject: CN=0398e86a107285ba340cb76d82dcda4b0013dccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:07:de:f7:be:67:1c:c5:4c:17:34:19:e9:
65:52:c2:7b:77:78:d3:8f:91:2f:9a:12:23:56:12:
55:13:70:20:3b:35:e2:9a:6b:7d:22:bd:ba:16:02:
12:1a:5f:1d:41:e8:8b:8e:9c:05:fd:93:4e:33:34:
df:9e:9a:77:85:0b:e8:bc:c4:57:3b:aa:35:80:32:
31:36:d7:03:b9:ec:a9:45:e2:c7:df:44:11:f3:fd:
e7:77:37:ad:3a:9f:7f:76:8d:b9:d7:ef:52:3e:c6:
23:f3:d7:b5:31:e2:fc:2c:34:67:ea:1c:94:97:81:
79:f8:2c:32:71:62:5b:a6:b6:98:da:19:65:55:bb:
00:b2:c7:76:36:68:e2:d4:e7:f8:c4:a7:e1:39:ea:
00:60:be:6c:6d:7a:6c:3e:8e:67:02:cd:36:51:22:
18:05:0c:0b:1d:ff:aa:21:70:44:50:49:a4:ef:fb:
39:60:1b:69:ba:12:40:85:fc:6e:bb:49:47:2a:ca:
9b:aa:5f:5e:da:f6:4c:16:0d:9b:f3:4e:83:ed:66:
d9:39:b3:ac:61:6e:b5:d3:60:82:d6:b0:00:00:67:
b6:5a:36:f6:a9:b3:97:e6:43:22:96:2f:a9:0a:d9:
bf:10:63:14:b7:23:20:11:fc:d9:f0:c2:f2:08:29:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:98:E8:6A:10:72:85:BA:34:0C:B7:6D:82:DC:DA:4B:00:13:DC:CB
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b7:a0:91:d5:29:d9:80:67:a4:8b:fa:f1:45:9b:f9:a5:8a:
0b:aa:96:ff:64:9c:0e:dd:06:1b:19:3a:b6:f4:7a:17:4f:57:
14:68:77:98:d1:a8:fe:78:ba:d4:3e:f6:3e:72:fa:03:2e:82:
32:d6:0a:ab:55:73:0b:66:cb:62:d7:20:86:d5:ce:cb:7c:54:
3c:41:cb:7f:70:e4:14:f2:b8:ec:47:ad:2c:be:1a:19:ec:fc:
b3:6c:0c:15:c7:67:1e:06:fe:87:4c:a1:0f:b0:bf:5a:d2:e0:
1c:78:0f:ea:4b:0a:e1:28:cc:bf:f2:83:4f:40:44:e3:63:72:
c4:19:42:e6:15:69:f4:e0:d2:9c:ff:a5:0f:4e:c1:4b:76:8c:
f9:d7:c5:73:75:1b:ca:b1:15:c4:3f:d5:9b:85:41:78:e8:72:
8b:25:f1:b9:f3:7c:a0:bb:52:b1:ab:ea:da:97:83:d0:c4:1c:
15:0d:57:59:06:94:fd:ce:67:e8:ef:74:56:44:26:a0:08:79:
89:a8:00:c7:86:a4:b3:a4:d0:17:93:db:cf:09:c2:51:a5:da:
99:1a:01:36:fc:b4:1a:dd:38:0e:da:fc:a6:38:24:a7:c3:87:
25:d6:e6:d9:04:56:27:8b:67:23:b2:c2:9f:f9:fc:0b:5c:b5:
57:b2:a8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:24:00 2026 by rpki-client