Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
File: NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft (raw, json)
Hash identifier: 0AtXiyhYeIM2SIVMvQxvpMwh5pZl2IBAbIV3PYPo3QM=
Subject key identifier: DC:79:69:2D:80:AC:DF:8C:4A:00:7F:AE:D1:D1:47:F0:CA:58:0E:23
Authority key identifier: 34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF
Certificate issuer: /CN=34012343a62f3f09b55cdbc01e75c38212a235df
Certificate serial: 019D270435F16E933DDFE55344BB2960E4A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
Manifest number: 108B
Signing time: Wed 25 Mar 2026 22:01:20 +0000
Manifest this update: Wed 25 Mar 2026 22:01:20 +0000
Manifest next update: Thu 26 Mar 2026 22:01:20 +0000
Files and hashes: 1: NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl (hash: lS3Q/yIdlz6qg768l74d2ZIQ37azuuPoyDytZwrxHjQ=)
2: SYOUieKR_QV6weJnpGp0PwQqP8M.roa (hash: rJyUI3FjwjJFeXbvOOvKbgCn4Z66P2GsnFdxLTdu4tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:35:f1:6e:93:3d:df:e5:53:44:bb:29:60:e4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34012343a62f3f09b55cdbc01e75c38212a235df
Validity
Not Before: Mar 25 22:01:20 2026 GMT
Not After : Mar 26 22:01:20 2026 GMT
Subject: CN=dc79692d80acdf8c4a007faed1d147f0ca580e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:4c:52:01:ca:1d:46:fb:76:4c:05:b8:34:
08:e9:34:fb:6f:d8:e7:bc:01:d9:55:8a:dc:cf:0e:
8e:6c:0d:30:a8:b7:86:31:eb:ff:fa:5b:41:72:4a:
6b:77:32:d4:f7:a9:11:da:4e:e2:ac:d8:55:a6:aa:
7b:01:b8:e4:3a:63:99:dd:09:a2:2b:94:e1:08:9f:
97:bb:f9:d5:ba:30:d3:af:a9:de:ca:1d:4d:0d:d4:
16:cb:b3:2b:97:91:3b:cc:d0:2e:5b:c9:43:9e:3a:
ca:16:b1:a1:de:05:4d:27:1c:f5:82:7e:b2:7a:6f:
8c:67:df:80:66:0e:3e:86:db:fd:c1:39:c9:ab:ba:
3e:20:43:2e:39:74:fb:fa:3b:60:a7:43:f5:46:f1:
df:c9:58:82:01:8b:24:b1:86:9a:1c:99:b5:6d:68:
f1:ce:34:b7:61:1c:8d:26:9a:02:cb:52:92:45:96:
1c:53:70:aa:6f:16:30:07:a1:43:69:f4:4f:54:43:
b1:cd:57:36:5e:da:d1:e3:76:60:a7:c4:3d:4c:3c:
17:02:1c:df:07:55:19:40:95:d2:17:a0:74:77:5c:
8c:e0:43:fb:2e:bb:d4:0e:72:60:30:79:13:35:90:
93:79:a1:86:e0:2b:f5:20:c0:a0:51:8d:75:3c:c4:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:79:69:2D:80:AC:DF:8C:4A:00:7F:AE:D1:D1:47:F0:CA:58:0E:23
X509v3 Authority Key Identifier:
keyid:34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b9:f3:c7:df:39:f9:84:8f:c2:46:08:c4:91:9c:d4:73:46:
c0:42:cc:5a:b4:48:f9:b9:30:f8:50:f8:93:f4:df:04:0f:2f:
34:07:0a:60:75:39:4f:01:4e:27:ae:96:e4:d5:8a:bf:e0:be:
82:10:33:42:1a:6a:2f:05:d4:18:65:a1:8e:d6:3d:18:97:51:
d4:bb:0d:08:d6:3f:6c:54:df:51:79:a1:20:6d:a9:46:81:a0:
f7:bf:98:81:c9:13:e2:7d:76:e7:9b:f4:01:65:ac:32:5b:59:
06:87:14:8e:c5:85:0f:6a:3d:f7:21:01:40:a4:b1:9d:4b:5d:
14:ac:ed:65:66:ec:64:3c:b3:6c:45:c7:ff:db:c3:d0:5c:df:
47:e7:b3:d6:74:ee:7a:15:2c:15:b4:e7:46:3f:18:99:61:c1:
e8:d1:b2:e0:77:5c:2b:bf:4c:0f:36:e6:d6:2b:ca:9f:34:4c:
f0:44:4b:61:53:6e:bf:46:17:a0:dd:04:57:f8:5c:db:f9:0f:
2e:24:3f:df:b4:4a:32:86:7c:f3:d8:79:13:ae:07:aa:1b:24:
9d:37:ba:22:dc:b2:75:55:12:04:6a:a4:ed:8e:4d:09:32:19:
76:93:cf:62:48:ae:17:be:06:80:3d:e9:98:d2:ac:a7:49:68:
6d:b0:6d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:38 2026 by rpki-client