Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
File: NAd7QemIc-fwb7HfP105xyGxND8.mft (raw, json)
Hash identifier: CyMmv531ZCV4YjMQHXtBIILuQiZJLfYdnr5m9SKa/EM=
Subject key identifier: D6:50:9F:33:56:CF:3D:97:0F:2C:A5:F7:0B:54:7C:54:E7:E6:8E:CD
Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Certificate serial: 019D27040754A8E159F2478B06B7D3BFFBED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
Manifest number: 188F
Signing time: Wed 25 Mar 2026 22:01:08 +0000
Manifest this update: Wed 25 Mar 2026 22:01:08 +0000
Manifest next update: Thu 26 Mar 2026 22:01:08 +0000
Files and hashes: 1: 1-V8x_3FzosbTSoBrUqHkMLV-44Q.roa (hash: RPgG1SJlqfEsV732+LedUmH+jks8p7lo8I/jwtQGL9I=)
2: NAd7QemIc-fwb7HfP105xyGxND8.crl (hash: aMAtPU10yuuukW+5/rTCcZwfAW99Fy1ipzak6BGlNvE=)
3: crwkgLLFi1G5PStFW-NTuVWRboI.roa (hash: DbnKu1FnYU/F077cUpyCX4xEr0gw1CrOBRGG+CxkZak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:07:54:a8:e1:59:f2:47:8b:06:b7:d3:bf:fb:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Validity
Not Before: Mar 25 22:01:08 2026 GMT
Not After : Mar 26 22:01:08 2026 GMT
Subject: CN=d6509f3356cf3d970f2ca5f70b547c54e7e68ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:bd:7a:17:8d:75:ae:23:b0:20:be:48:e2:
57:00:4b:9e:9c:b9:5c:31:75:7b:f7:f6:6d:a1:cb:
c6:fc:ee:ca:50:09:f2:7e:fa:4e:a8:9a:85:ce:46:
0b:e5:3c:20:37:5e:7d:c9:ba:7a:cf:85:94:94:40:
c5:3e:4d:1b:0b:24:4a:44:96:39:02:1f:1b:f2:18:
5a:2c:27:87:76:f3:e1:df:b1:4b:12:30:d9:76:0d:
01:f8:bf:44:58:f9:c5:ea:af:66:73:36:bc:e7:ab:
1f:ea:5b:dc:9e:8b:58:ba:70:84:9c:7f:68:78:c3:
89:51:16:52:a9:d9:2c:51:d8:ad:c7:2a:70:65:d7:
29:82:2f:56:62:d1:77:92:2c:25:cb:44:f8:66:62:
fb:03:b0:f2:7c:36:1d:a0:86:fe:4d:83:26:39:06:
e7:33:a1:af:b2:6c:f7:8a:ae:f2:3e:29:ec:12:63:
5a:59:f1:da:f1:a8:62:9b:c9:d8:ec:22:48:76:90:
0a:d1:9c:a1:8a:4c:cd:96:46:b6:d5:42:7c:c1:98:
4b:fa:ca:9a:46:02:86:26:63:35:f9:7e:6b:34:92:
28:96:e6:a1:6f:56:9b:c1:06:db:af:98:d1:74:59:
7b:79:93:40:04:d4:9c:d2:ad:3b:67:39:d5:16:ec:
c3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:50:9F:33:56:CF:3D:97:0F:2C:A5:F7:0B:54:7C:54:E7:E6:8E:CD
X509v3 Authority Key Identifier:
keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:93:ef:a3:33:67:75:6f:60:d8:34:9a:c1:d2:32:0e:be:93:
e8:df:23:73:72:95:bd:57:b0:e9:b1:43:1d:2e:43:fd:d4:ca:
d8:5c:45:5d:f0:25:b5:a7:7d:c7:d4:19:73:27:00:4f:a7:f8:
cb:9f:14:74:c3:1a:08:1d:48:a6:ae:f7:32:65:57:56:4a:03:
67:47:fd:7e:0d:1c:31:5f:42:a2:7d:68:1a:f3:d7:e1:ac:03:
a1:e4:e3:0e:11:30:47:5d:d5:ad:8a:61:82:13:2b:cb:d7:ad:
17:d4:e2:5d:b8:e8:f3:00:36:b8:70:6f:09:a9:1c:49:50:cd:
a7:55:01:e6:da:7e:6a:f2:a3:5b:37:43:c9:95:d7:ca:4e:95:
97:d7:e9:5e:2a:12:d9:87:5c:7b:c1:37:21:ae:20:38:2f:1e:
1c:09:b7:6b:5a:89:bf:60:5e:be:2e:0e:b7:e1:d4:7a:a8:3b:
3a:5e:10:14:07:f0:5b:fc:12:42:10:fb:d4:0d:9f:dc:c0:dc:
8f:28:71:91:b5:88:15:f7:a7:33:f1:8f:bb:fb:e5:19:78:db:
62:ed:9b:b0:36:4f:d8:57:81:3c:af:1f:57:65:67:98:8e:37:
b3:24:dc:c6:08:8b:a6:cf:68:4b:47:76:51:1b:09:03:e4:d6:
b7:ab:12:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:14 2026 by rpki-client