Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File: NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier: P1TmMhkkrmceZ7fBC/9CnIqcR1EdjJVJknb2Y6mWABc=
Subject key identifier: 34:E5:AC:0B:7B:F8:80:47:2C:71:53:24:30:AD:8B:83:6B:42:EB:06
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial: 019E1D2308EBD2078EC21D4500D771A830F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number: 0631
Signing time: Tue 12 May 2026 17:01:35 +0000
Manifest this update: Tue 12 May 2026 17:01:35 +0000
Manifest next update: Wed 13 May 2026 17:01:35 +0000
Files and hashes: 1: 0oG7Wuq3ZAAXzg6P-qV_HWGeUWE.roa (hash: tl6rHSJSg3BOoepWWn4g5EPuRgVKzjqvlpZ/rZDE8k0=)
2: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: 8h7eO0qk7AxUVZubuHFjnxks4bB+sbVyuDoRhVvF6Mg=)
3: wC11yeUerTWiyRWDCng4spCl8qM.roa (hash: /IMrg/w5VKSBqu/JYOwX3ZqxJnQBurW+kq0gnHVnWjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:08:eb:d2:07:8e:c2:1d:45:00:d7:71:a8:30:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Validity
Not Before: May 12 17:01:35 2026 GMT
Not After : May 13 17:01:35 2026 GMT
Subject: CN=34e5ac0b7bf880472c71532430ad8b836b42eb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:04:a9:fc:e4:c5:f9:42:9c:9c:08:1d:9e:
76:87:b8:f0:43:9c:e1:bc:6d:da:a0:9d:d2:9b:d7:
4a:41:6c:47:88:1e:1e:93:17:97:33:93:73:b6:22:
b1:7d:d3:9d:79:a8:24:9d:8e:8d:3a:a9:29:ea:98:
19:48:9e:9b:6f:0f:8f:1a:86:ed:81:a6:9d:96:ba:
59:4c:8b:f0:4c:8e:2e:95:45:1a:ce:cd:7d:58:41:
f7:95:4e:60:69:a0:f8:7e:30:58:5f:06:5f:04:d2:
a7:25:2e:3a:37:58:ee:ce:7d:80:7e:47:6a:2d:83:
a5:16:66:b3:1b:6a:d1:0a:60:e8:b4:36:b5:34:e4:
32:65:e9:65:fa:e2:b5:96:15:b2:7e:b5:67:6f:e5:
46:3c:84:f0:0e:e8:e8:e5:27:0d:57:da:13:85:63:
71:eb:b8:c7:bc:cc:7f:83:b1:97:a0:40:86:c8:6e:
60:ea:f4:cd:5d:9e:55:6a:1e:23:c2:f9:be:6c:35:
4f:61:8b:9d:df:8f:0d:52:69:5a:42:a2:21:73:e0:
3b:d0:c2:f1:c5:bd:31:68:91:9c:89:c7:93:04:e2:
49:47:25:1e:81:d2:56:6f:cc:8d:06:28:5c:4e:60:
47:0f:3a:f3:00:bb:a8:a3:ff:eb:c9:03:2e:93:e8:
98:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E5:AC:0B:7B:F8:80:47:2C:71:53:24:30:AD:8B:83:6B:42:EB:06
X509v3 Authority Key Identifier:
keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ec:e8:bd:2b:8a:63:ca:2d:b9:56:fe:7b:b3:25:64:00:e1:
bc:69:01:03:1c:d6:20:43:2f:b7:cf:f3:9c:b5:dc:b0:6d:26:
d0:5f:db:5a:c6:ee:69:93:b5:16:91:de:a1:b7:5c:f7:23:c2:
2c:7f:f7:fa:f5:ec:3c:41:b2:c1:34:57:0f:1e:56:b1:89:dd:
5e:28:6e:fb:5d:e8:7a:2c:7e:83:b4:b8:9b:21:5c:8b:72:34:
71:27:ab:91:f6:1f:40:fa:54:5a:11:96:0d:e0:a6:4e:33:48:
54:ee:c9:15:f5:c2:33:65:7d:91:fb:bd:81:b5:a3:42:17:0f:
e6:78:77:d4:e4:9c:b5:6a:82:24:9b:b7:91:f2:38:16:5a:dd:
53:3e:68:89:6b:f1:fe:37:d9:ec:9b:81:2c:68:40:23:14:c6:
9b:d4:b9:ec:01:55:66:84:75:d0:ab:0a:6a:16:6f:53:25:db:
16:41:c9:9f:28:32:9f:92:c5:44:fa:06:ce:2d:ea:71:39:27:
6b:e7:14:f8:98:ec:1b:2e:ff:a6:44:46:18:6d:7b:55:f8:b7:
49:e3:a3:52:4f:5c:15:45:a9:55:e9:e1:9f:62:9b:3a:22:76:
5b:b0:57:10:58:2c:06:3a:2b:c1:35:e9:01:af:7d:c1:4f:36:
e3:43:18:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:02:12 2026 by rpki-client