Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier: nb3LcK+0LAqKiC2LcB9h92HfieF+CPY/DQjSaxT4nYs=
Subject key identifier: 21:57:A0:4F:01:4B:8B:A2:A9:D3:56:39:78:8D:90:E7:EB:F7:5A:9A
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 019D273A862DE87CAE2BFA98FCD705226E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 23:00:39 +0000
Manifest this update: Wed 25 Mar 2026 23:00:39 +0000
Manifest next update: Thu 26 Mar 2026 23:00:39 +0000
Files and hashes: 1: BJqDDKUUwP-6T-FY6LGOmkQgBFc.roa (hash: Bg8fNp2XsW4hkEUUtvGIjHCnW3BOOuyGWwHhwTGlcFU=)
2: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: ILpF39D3RWHfy2ZxUt4+/Jm2wIjOE742OJoXaUL42HQ=)
3: SUsmu5Ag-4xHGcfy7I-KypJxpsc.roa (hash: n8HW5vZsZRNckM8pkS3Nq4aPiFnPsCjT5rOGpbkWTrc=)
4: VXXJGd4FEOBiTRuvKylQZSh5MPc.roa (hash: 9Lce4m09pJL6B9nHSj0pDfxmZ/8/J6ec+N4whDnZ0b8=)
5: ZuK1S3Ghc42zA0OJKwC9zhMPjd8.roa (hash: qj8u0n4HOzKDi6033J2/YLNKzCyWyCiJX2ywZI9NyUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:86:2d:e8:7c:ae:2b:fa:98:fc:d7:05:22:6e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Mar 25 23:00:39 2026 GMT
Not After : Mar 26 23:00:39 2026 GMT
Subject: CN=2157a04f014b8ba2a9d35639788d90e7ebf75a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ee:02:27:6f:09:0c:c7:6d:f0:32:9c:df:81:
a2:cc:65:9e:6d:16:4a:87:4f:0b:3d:8f:92:4f:21:
a1:18:51:26:bf:85:35:8c:3a:94:a7:51:aa:e4:90:
93:65:65:11:4f:39:bf:c9:51:70:55:3e:a8:14:79:
b5:e9:1f:a3:17:52:b2:51:dc:cc:60:cc:89:57:5e:
c8:ff:1a:72:31:96:96:ac:cc:ee:44:8a:b3:40:0e:
77:11:0f:6c:7c:0a:d2:6f:93:b2:f0:3d:36:f0:ae:
2b:0a:da:dc:bc:6b:52:a4:51:f9:48:e6:24:04:51:
44:66:c1:90:43:8d:b2:80:68:1b:d8:96:e2:e1:d5:
fd:93:fd:af:8b:28:56:be:a7:dc:62:2b:88:08:fb:
f1:fe:23:cb:3b:ca:ee:f0:e0:88:78:85:9c:ac:32:
51:1d:ba:d0:fc:d6:95:68:a9:49:69:d4:6d:26:eb:
7f:da:99:96:fd:19:22:e9:fa:fe:4d:fa:d5:d8:aa:
02:a9:08:9b:f8:a0:f4:18:40:22:ac:53:b1:1f:ea:
5e:14:89:c9:6d:7e:63:29:a0:af:d3:1b:83:96:11:
7f:d2:1a:94:f7:e1:33:3c:a0:55:d1:9d:20:dc:f9:
f1:95:68:6a:7f:ef:ec:28:62:6d:56:cc:5b:f6:5b:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:57:A0:4F:01:4B:8B:A2:A9:D3:56:39:78:8D:90:E7:EB:F7:5A:9A
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:28:8f:81:bb:b7:72:69:c8:68:71:c8:73:8d:05:22:85:8e:
26:9f:b8:91:68:93:07:fe:ff:ed:6d:b1:df:58:7e:d4:8a:d9:
61:1e:da:e1:b3:fb:f5:26:99:88:c6:ec:b3:cb:56:93:e1:0f:
73:c8:28:70:00:25:f3:a6:0f:d7:74:cc:c1:39:87:56:4a:8c:
8c:42:9c:1a:e7:f3:bc:3e:b1:33:17:0d:8d:68:4e:fd:91:b0:
ae:5c:d1:04:0f:4b:0c:04:fa:5a:e0:67:da:33:be:68:84:44:
26:9f:75:45:be:a1:33:75:c5:2f:5a:d9:64:0a:4c:35:1e:73:
e3:c0:42:32:e2:c3:5b:32:64:dc:f4:34:89:2b:d3:7c:50:47:
de:07:1d:ba:28:51:4b:e7:56:b2:35:22:24:4a:ba:3f:7a:00:
73:1a:de:3b:b5:5c:49:8b:45:ad:06:48:b4:8c:b8:33:53:e7:
ff:ab:07:74:19:ac:b2:8b:62:3c:65:84:e7:b1:30:15:24:fe:
7a:06:19:68:77:ae:e9:f7:36:0c:9e:70:3e:93:68:b2:aa:92:
0e:ba:e6:59:80:36:86:4b:5e:c1:b3:1e:5b:e7:88:fb:a0:64:
7f:5a:92:33:b5:5b:1f:86:2d:28:aa:2f:fd:50:09:a8:7b:45:
cc:f6:48:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:26 2026 by rpki-client