Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
File: NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft (raw, json)
Hash identifier: tdYJbGmnjUvpx0OXqX2K8/F/X2y8UhQ3j81DU9ODOc4=
Subject key identifier: E3:B6:9E:48:1D:29:66:4C:00:76:21:1F:7B:B7:67:A3:DD:4F:D9:18
Authority key identifier: 35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
Certificate issuer: /CN=35f1a573915153de82890eae1303067fa68b2877
Certificate serial: 019D27A8681F5A963E9C7600D71C038F9668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
Manifest number: 1389
Signing time: Thu 26 Mar 2026 01:00:41 +0000
Manifest this update: Thu 26 Mar 2026 01:00:41 +0000
Manifest next update: Fri 27 Mar 2026 01:00:41 +0000
Files and hashes: 1: D3wlgMGE5QwdxwsJ-l6YOVrMLsM.roa (hash: 8VoNb/7A+xDcEz+hMFU7CsCAQw+ePCtKqSmXmX3INLs=)
2: NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl (hash: xuulmm1hkDZKlMv/kVrRHwWhG2Y7BMVdQD4YO8a5KxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:68:1f:5a:96:3e:9c:76:00:d7:1c:03:8f:96:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1a573915153de82890eae1303067fa68b2877
Validity
Not Before: Mar 26 01:00:41 2026 GMT
Not After : Mar 27 01:00:41 2026 GMT
Subject: CN=e3b69e481d29664c0076211f7bb767a3dd4fd918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c4:ef:eb:07:4c:41:ed:8d:0b:82:de:f1:ec:
0e:f7:c5:48:7a:da:f7:a2:3c:b4:ed:7f:11:62:29:
57:a5:1d:cf:16:a8:80:7b:5c:96:60:22:bf:bc:c8:
5a:2f:a8:0b:50:de:cb:c9:bf:8e:77:02:85:5f:7d:
fc:c2:f6:93:a4:37:0a:1a:8f:88:84:b0:89:b8:17:
81:47:77:2d:aa:8f:18:51:28:51:c7:1a:c0:d7:c1:
cb:83:1e:9e:4b:18:a4:32:a3:39:fa:62:81:40:f0:
5e:1a:b2:bc:49:c3:de:4d:e5:2b:e7:23:6d:7a:08:
01:ec:93:01:89:ac:42:5b:5a:56:a7:a2:e5:da:f2:
cc:8e:33:ee:ba:55:62:c9:db:da:59:46:5e:f2:78:
e7:2e:66:20:35:bc:09:e7:9a:9f:25:5d:f0:9c:22:
50:56:10:74:aa:5c:90:ed:9c:75:42:12:b7:74:67:
d9:86:34:af:53:f2:9b:47:9f:b1:4b:c3:83:08:42:
ec:ef:28:66:31:51:16:66:4e:dd:7e:96:db:4d:05:
df:7d:65:94:5d:a7:8f:57:8f:18:1d:12:93:b0:e6:
f8:e5:21:34:d8:51:6a:fe:c6:bb:16:ac:6b:c6:92:
7c:dd:ef:3d:08:ff:0e:2d:78:ff:55:64:e0:51:ed:
03:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B6:9E:48:1D:29:66:4C:00:76:21:1F:7B:B7:67:A3:DD:4F:D9:18
X509v3 Authority Key Identifier:
keyid:35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:aa:77:35:d4:78:99:da:7b:2e:3a:66:4b:2f:9b:eb:0a:d3:
34:54:29:bb:06:9f:e3:6c:9d:61:99:11:9b:0e:0e:d3:76:cf:
ba:e5:81:e1:ac:59:e2:04:6c:8e:66:39:73:9c:d7:46:9b:ff:
d2:d5:22:2c:82:52:77:ab:93:ac:68:2a:a7:45:e1:98:ee:59:
a6:55:4d:36:e0:62:a9:cd:58:70:92:29:88:32:ed:52:f1:a4:
a7:18:e3:c4:11:25:5e:5d:86:d2:27:4d:ee:8f:41:18:76:26:
00:55:64:3f:2e:bf:50:05:1a:d5:9c:11:74:e3:5e:c6:26:df:
4c:07:23:fd:7f:e6:c3:78:d1:35:b6:af:c1:9c:08:da:ef:c4:
f0:70:60:90:83:14:f1:c8:ea:a7:fa:7f:80:b4:38:4c:23:60:
38:e0:cd:82:2e:c3:a4:23:25:04:b4:c3:5e:4d:84:3d:69:b2:
0a:c8:4c:29:a2:18:59:98:43:2d:bd:b0:a8:df:d6:69:0a:c5:
96:24:13:38:4d:7e:75:d9:4c:61:3b:5d:c6:7e:2f:23:f0:07:
15:ad:e2:fa:26:d5:f5:65:be:a4:4c:95:4c:9e:f5:7d:32:e0:
38:5c:a6:e7:f5:06:b3:00:12:1c:dc:a3:80:f6:80:91:bf:5f:
7a:02:9f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:29 2026 by rpki-client