Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File: NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier: 1Qja2RRtElolK//W7MW+MAVJHDs60VzOhCU51fsobuQ=
Subject key identifier: 6F:13:6E:15:5E:1F:55:72:BA:02:F1:F2:BF:5D:0E:14:86:82:5B:C4
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial: 019D33763AD1A154B1BD8E955C0972A91233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number: 05B8
Signing time: Sat 28 Mar 2026 08:01:19 +0000
Manifest this update: Sat 28 Mar 2026 08:01:19 +0000
Manifest next update: Sun 29 Mar 2026 08:01:19 +0000
Files and hashes: 1: 0oG7Wuq3ZAAXzg6P-qV_HWGeUWE.roa (hash: tl6rHSJSg3BOoepWWn4g5EPuRgVKzjqvlpZ/rZDE8k0=)
2: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: yukT8BwmA7w6ARKTCfk6NyQGZf7gzmzTxyDFY38w/NA=)
3: wC11yeUerTWiyRWDCng4spCl8qM.roa (hash: /IMrg/w5VKSBqu/JYOwX3ZqxJnQBurW+kq0gnHVnWjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:3a:d1:a1:54:b1:bd:8e:95:5c:09:72:a9:12:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Validity
Not Before: Mar 28 08:01:19 2026 GMT
Not After : Mar 29 08:01:19 2026 GMT
Subject: CN=6f136e155e1f5572ba02f1f2bf5d0e1486825bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:6d:f8:ce:d7:2a:c0:f1:da:3e:d5:f9:55:
49:d6:a2:07:f4:2d:d4:c5:13:a0:98:bf:18:59:6c:
25:aa:88:94:2f:09:30:12:53:2d:32:eb:9b:46:c6:
5c:a4:9a:ee:c6:1c:f7:cc:cc:7c:d5:34:4d:30:0b:
c8:30:b6:14:94:5e:a7:68:a0:af:4e:03:4a:e1:32:
8e:93:49:41:56:9e:86:a5:38:b8:31:97:44:c3:82:
c0:f2:3a:b6:2f:8f:82:01:e1:44:35:c8:5c:d5:b8:
43:93:67:ea:53:83:b4:f5:45:a5:75:32:02:19:93:
f7:84:d8:44:58:9f:a8:7a:29:58:5f:ab:ad:18:0a:
5a:9c:1d:b0:58:d2:a4:be:5d:b8:78:1b:38:43:31:
a7:5b:4b:dc:12:0c:2d:0f:b4:cc:7b:71:16:6a:c4:
bc:d9:5b:d9:90:38:72:30:27:78:e3:1a:c3:57:4e:
a9:43:35:b1:a5:55:b5:d3:ca:25:9b:5c:45:e6:c1:
d2:1b:8f:51:7a:9c:31:d8:16:fc:c6:6f:a6:1e:4d:
c6:eb:34:0a:e1:a0:1f:1e:2a:e7:98:f5:d9:da:c7:
ae:01:ea:17:26:a2:08:4a:a6:82:c7:7b:11:57:51:
5d:ff:37:14:30:a8:5d:f6:c1:3d:c1:64:16:69:f4:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:13:6E:15:5E:1F:55:72:BA:02:F1:F2:BF:5D:0E:14:86:82:5B:C4
X509v3 Authority Key Identifier:
keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ac:1c:75:2b:b1:9d:58:cc:fa:0b:be:d6:48:46:58:04:73:
7c:b2:b2:b4:29:8b:d3:8c:b2:4d:8f:87:fd:97:74:f6:d0:81:
1c:54:77:6c:c3:36:b5:87:fa:40:5b:75:b3:f6:56:5f:ff:77:
b4:4a:c0:6c:03:64:82:22:0a:7d:15:3e:9a:31:5b:5b:2d:03:
dd:9b:37:71:e4:4c:d2:bb:38:86:49:c1:9d:16:b1:5f:68:e9:
db:8a:3b:82:f4:13:75:4b:99:ca:78:a9:16:a7:a8:18:3c:b2:
e4:01:0c:93:67:0d:d1:31:d7:d6:ef:f0:47:fc:7d:2b:6b:d1:
b6:96:84:e0:db:24:50:34:7b:62:6a:71:0a:aa:51:3e:ff:03:
30:b0:07:ab:bc:87:8f:e0:d3:61:88:7a:07:97:0d:9c:c8:89:
29:40:e4:53:87:28:db:46:f2:41:bd:44:e7:71:27:ab:f0:73:
96:a9:fe:47:62:a4:9d:b7:30:58:1d:ba:26:16:6d:9d:7d:55:
c9:8b:48:01:03:4b:0d:51:81:c0:26:b4:f0:09:a8:f8:a6:61:
10:c7:05:06:24:de:44:87:dc:e4:e4:1a:dd:1f:69:3a:f0:eb:
7b:a3:3d:ce:ee:d0:a1:af:9b:11:df:86:1e:b4:c8:54:cc:87:
48:3a:48:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:23:46 2026 by rpki-client