Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
File: NA5TAUvwOK3g13rmeP9t80ylPcA.mft (raw, json)
Hash identifier: sCBpvJI7GW2uA8prtcpGSFvTHPLRENBueC4rCngj86U=
Subject key identifier: 2C:6B:E4:8D:69:83:12:36:F9:17:81:18:5A:DB:2D:55:75:08:C1:BD
Authority key identifier: 34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
Certificate issuer: /CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Certificate serial: 019D27E078CDBFC09AE623790B4DE4CC0001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
Manifest number: 082D
Signing time: Thu 26 Mar 2026 02:01:55 +0000
Manifest this update: Thu 26 Mar 2026 02:01:55 +0000
Manifest next update: Fri 27 Mar 2026 02:01:55 +0000
Files and hashes: 1: NA5TAUvwOK3g13rmeP9t80ylPcA.crl (hash: vfTU+GdYyojMjcDk0OjGX2aXeztjVKIPi6vDGDRDFCs=)
2: y0EXH7ROarOi9kpgsz591gLVxK4.roa (hash: k4u5/XxA6Sf9mSKxl8oxoWnS212/XxShJpEKu6orXMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:78:cd:bf:c0:9a:e6:23:79:0b:4d:e4:cc:00:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Validity
Not Before: Mar 26 02:01:55 2026 GMT
Not After : Mar 27 02:01:55 2026 GMT
Subject: CN=2c6be48d69831236f91781185adb2d557508c1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:fa:49:ea:3c:58:80:64:5f:81:10:6f:e4:
d1:65:0e:ef:e2:46:28:ee:b2:f3:d6:86:90:b6:9e:
e9:99:36:64:5a:bc:c4:d8:51:04:62:af:60:2a:be:
38:07:ed:05:a8:16:0f:3d:07:be:28:15:5b:96:84:
58:7b:37:fc:d4:03:cd:d3:8a:11:a4:d8:ed:7a:0c:
87:c2:45:ae:1f:ed:a6:fb:c7:3e:f4:57:7d:a7:ca:
10:cb:50:f9:26:fd:ee:1d:26:df:0f:83:f7:5a:78:
34:70:3b:44:66:63:7f:41:c8:f9:c4:18:9d:93:32:
a9:d2:da:1c:ea:18:74:84:8c:58:f2:c1:ee:df:17:
2a:13:f3:45:30:05:4e:b1:bc:c4:69:05:17:a6:6a:
c3:23:df:b3:69:b3:f6:24:bc:1a:38:7b:d3:68:48:
1f:ea:61:09:16:9d:6b:ed:c4:1f:af:2e:1c:75:7e:
a6:b8:75:0d:ac:5c:52:b3:fc:59:74:2b:04:83:de:
90:fa:0a:ad:2d:28:84:7e:bd:b5:9f:d7:6f:62:76:
50:f1:93:0d:12:85:a3:f6:14:b7:56:e6:c7:8a:dc:
fa:54:d4:49:8a:2f:d0:0e:96:38:3e:7e:0f:b4:ef:
9d:c5:18:f3:e8:ac:7d:24:06:f5:7d:5a:fa:5f:c9:
6d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6B:E4:8D:69:83:12:36:F9:17:81:18:5A:DB:2D:55:75:08:C1:BD
X509v3 Authority Key Identifier:
keyid:34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:82:12:00:89:41:8e:d3:2a:7c:c0:84:84:41:40:2e:39:76:
4e:f8:e3:37:b9:96:d1:76:e3:17:96:ab:03:9e:b8:fd:48:6a:
c2:31:08:7c:3f:3d:99:52:35:0e:6e:2d:73:bd:59:77:11:30:
d9:9b:05:75:d4:ed:59:b7:6a:a2:02:73:66:3f:53:a1:b0:82:
08:8c:6e:a0:c9:cb:d7:ef:d0:e1:e6:d6:40:97:73:a6:5a:22:
08:63:da:94:70:a2:9b:f0:66:21:9b:d0:8e:b2:0b:35:ee:71:
86:ba:03:af:df:e2:11:c3:c2:87:5c:3a:6c:82:8d:c4:e7:d5:
50:7b:8a:9f:11:e6:6b:f6:0f:c6:86:22:09:41:92:32:1f:c4:
57:66:92:bb:00:06:30:1d:fc:07:4a:2c:48:60:91:11:93:d2:
1b:47:3a:e6:2b:82:98:74:25:a7:6a:d1:5d:af:e7:15:08:df:
3e:1e:64:01:b2:e1:05:73:c9:7b:e1:8a:12:94:44:2e:1e:2c:
08:35:26:23:11:da:a3:46:13:3a:02:9b:cd:1b:35:16:2e:8a:
7d:b6:d6:d2:46:37:13:e0:41:17:6d:4c:64:bb:6c:39:18:f8:
ff:ab:0e:43:7f:77:d3:2f:c2:81:0a:66:81:7b:37:59:59:c9:
1d:3c:0d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:40 2026 by rpki-client