Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
File: NXAXpX-ccN-vZpOjJLumhne4ePM.mft (raw, json)
Hash identifier: 14mDuGW/qawfcXCK9VXOIyn1IaG4YhAaKGKIomI5kPE=
Subject key identifier: 56:1B:03:8D:3B:49:60:0D:53:50:10:1B:63:D6:21:E9:4A:E6:54:71
Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3
Certificate serial: 019D265F4509E3AEE369D682D95563652B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:10 +0000
Manifest this update: Wed 25 Mar 2026 19:01:10 +0000
Manifest next update: Thu 26 Mar 2026 19:01:10 +0000
Files and hashes: 1: 1-sDBo1h39Efa-H3ly5K8_3PMd8E.roa (hash: nnHWf61PhBu5tpbkXsvcIaf2sAJomeNe4RjS/qDyEu8=)
2: NXAXpX-ccN-vZpOjJLumhne4ePM.crl (hash: xmZFVN9XQc/Xy2ap/Bs0bfzEYa37GwUB1FHOJoOTEJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:45:09:e3:ae:e3:69:d6:82:d9:55:63:65:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3
Validity
Not Before: Mar 25 19:01:10 2026 GMT
Not After : Mar 26 19:01:10 2026 GMT
Subject: CN=561b038d3b49600d5350101b63d621e94ae65471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:2e:e0:5c:42:9b:a3:06:75:ca:09:9c:b4:
97:e9:b1:f4:fc:58:49:19:4d:67:79:11:71:0b:7b:
cb:df:40:7b:ea:20:6e:25:ac:e1:22:cb:7b:1c:d8:
2c:52:0c:45:88:3a:04:67:09:0c:24:d7:ac:91:25:
9c:25:71:44:34:b3:8c:16:e2:74:b7:4a:db:02:3d:
94:2d:92:73:98:88:dc:c0:e0:8c:b0:36:de:d2:e5:
c7:ee:11:06:2d:f1:ce:0b:72:94:83:c5:e9:f4:ba:
a3:7c:37:36:a1:17:97:27:ab:85:24:8e:bc:b7:7e:
dd:1d:66:0d:3a:67:6b:66:e6:52:92:14:d5:04:9b:
9f:d5:f9:c6:b2:7c:6e:82:0a:67:f6:95:36:96:21:
4d:91:2a:b0:a7:f3:69:5a:b4:d4:85:20:a6:fd:00:
e5:59:26:f4:e4:92:10:d1:b1:50:fb:f1:bc:9c:91:
2d:72:a1:10:85:2b:38:45:98:2d:04:ed:c5:aa:26:
65:23:34:57:18:d7:66:74:53:4a:e1:90:e1:6a:00:
70:7c:ad:71:db:95:e3:9e:4c:f6:df:14:52:8b:98:
a5:4b:76:1e:c4:4f:94:09:e0:b1:9e:e5:36:27:f9:
d4:d5:f7:3d:a9:ab:71:4e:3d:cd:a9:28:79:8b:1f:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1B:03:8D:3B:49:60:0D:53:50:10:1B:63:D6:21:E9:4A:E6:54:71
X509v3 Authority Key Identifier:
keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:0c:97:61:05:32:8c:5c:c8:ed:8f:f9:b8:4b:79:76:c5:fa:
a9:06:28:e2:61:c2:82:82:cf:43:54:07:4e:e6:81:81:b8:07:
fa:4c:00:88:27:97:85:17:b0:51:7d:11:e0:c4:4d:66:24:28:
c9:0d:e8:b1:77:53:11:61:d3:15:ec:21:d5:79:8e:f9:ec:b0:
43:16:95:d4:1b:30:f4:b6:8c:27:f0:e1:b7:99:cd:da:84:84:
1a:ce:db:64:6e:58:8f:2e:c2:5d:9c:a0:82:b6:08:3c:ac:e1:
e2:29:a2:1c:b2:58:6a:3d:81:1e:f3:ad:ae:35:77:9c:dd:61:
ab:ab:3a:b5:b1:9c:45:bb:82:aa:4d:d0:84:4f:34:19:42:b3:
d2:9d:bd:64:63:67:bc:44:5e:1e:21:e1:15:66:68:a2:cd:59:
29:ad:5c:9d:25:ae:2f:6d:a9:5f:9e:b8:b1:99:ba:67:1d:19:
79:4c:9f:33:18:04:ef:1c:f7:17:38:52:2c:32:a3:19:26:52:
9a:09:e6:af:98:39:82:08:94:41:e4:dd:d1:0c:45:ec:4a:e3:
88:78:fe:20:d6:ac:6c:c1:d7:66:0e:d4:b3:08:be:8c:1f:d7:
ba:a1:e0:47:50:c9:34:aa:45:ff:ea:69:50:4c:08:3d:2d:b7:
ed:12:50:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:59 2026 by rpki-client