Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json)
Hash identifier: Mh20AMAAHrNPZmaTOsDRXou+ZXLRu+bczwckiDIfuOI=
Subject key identifier: 6A:5E:0A:22:42:46:6C:AD:16:56:E0:68:E5:CA:27:06:97:F8:E0:58
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 019D25F1BA41AAA0C98E22A53622C9B25CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:01:31 +0000
Manifest this update: Wed 25 Mar 2026 17:01:31 +0000
Manifest next update: Thu 26 Mar 2026 17:01:31 +0000
Files and hashes: 1: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: GBjfR86bQEeocZ3sUMI1CUb0njnAXUwujOhTrdXYZyc=)
2: e4_7yaHSmot34MoxfI-dfeOUQj8.roa (hash: Zla4V4TUPhBrvQzIH/3cu0Byr6xg7FZryKfovqeNwz4=)
3: wVHWp3M4ey0oV4Vvt4IVxUGWwHU.roa (hash: bGvl7Pnh00VzisoVUojSHZYeOEdkkKp2OdrZk5Xs+9U=)
4: z8_dgT6WuAsyinggiWah1gloyzI.roa (hash: Ux7iykUwWC0VnspPLqSHuMbius4UJKLHe67ofj8JFYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ba:41:aa:a0:c9:8e:22:a5:36:22:c9:b2:5c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: Mar 25 17:01:31 2026 GMT
Not After : Mar 26 17:01:31 2026 GMT
Subject: CN=6a5e0a2242466cad1656e068e5ca270697f8e058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:92:a6:44:c4:06:e7:6f:1a:50:ff:af:ab:6f:
7d:a2:8a:04:8f:9e:8b:95:1d:f6:c8:81:11:6d:1c:
c1:8a:87:d8:62:04:dd:49:0e:d5:ab:cc:bd:dd:ea:
d9:4c:78:cc:58:26:72:3b:47:f4:7b:07:96:2e:56:
dc:c1:13:22:dc:69:19:41:3f:e4:e3:56:7f:2d:50:
b6:8f:32:8e:fd:d4:06:7d:e8:29:e8:11:f0:94:2d:
f3:1e:92:a6:07:f7:a4:da:59:b8:3a:96:a8:7a:6f:
f1:1a:69:fd:f5:7c:8e:27:72:75:5a:de:d9:4f:43:
1a:d7:b6:9e:c2:b5:59:d2:92:85:02:0d:46:6b:0a:
22:72:c2:28:fc:d0:9f:bc:de:a4:b6:24:fe:73:a2:
72:c6:30:2b:1b:e7:74:d1:f8:07:23:c0:ce:6e:6e:
c4:a3:79:7e:7d:c6:17:4f:e2:26:89:53:e1:89:bf:
16:97:7c:91:09:0c:7c:25:1f:41:14:08:8a:ca:de:
db:05:bc:7a:7f:91:1f:d8:05:ed:12:5e:12:e8:dc:
7d:5b:0f:43:28:d1:17:6b:91:c6:20:4e:0e:68:d0:
08:f7:29:5d:ca:70:00:70:23:1d:c4:43:e6:8c:c2:
4f:c2:ac:93:fe:02:0b:b9:d1:1c:45:8a:b0:f9:88:
18:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5E:0A:22:42:46:6C:AD:16:56:E0:68:E5:CA:27:06:97:F8:E0:58
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8c:1e:31:85:e2:fd:2a:2d:8e:aa:d9:7c:e0:02:32:8a:3f:
68:b2:35:c7:5c:11:c9:82:84:c0:2b:61:9c:72:77:05:91:10:
a5:14:c1:85:19:12:75:c0:3a:cc:d2:f7:84:c6:98:43:6f:f7:
ae:19:af:e2:86:59:7f:2e:9d:46:be:f7:c7:91:df:f7:59:47:
9a:2a:65:37:cb:eb:ac:ea:86:d5:c8:71:e4:f9:78:96:a6:00:
80:10:c3:ba:a0:db:91:12:22:8f:b8:19:68:6f:ef:b7:cc:13:
fd:41:eb:2e:6b:c2:8d:c1:d1:03:b5:90:21:eb:c6:80:59:65:
3f:06:76:78:66:47:bd:71:77:c3:79:da:78:66:03:5f:80:4a:
62:5b:19:c4:ba:ae:58:3f:09:70:a0:a4:c4:e6:0c:a3:0f:8b:
86:82:77:84:5a:3c:71:90:4a:af:07:75:84:b3:1f:82:81:c3:
5b:6b:20:87:0d:e2:a9:c8:e1:19:f0:22:24:3a:77:c4:1a:dc:
a0:e7:75:72:0a:6b:09:d9:d9:17:7f:df:4d:8e:0c:49:51:ee:
d6:95:71:4a:9f:d9:3b:af:4a:54:56:c6:6e:6f:38:2f:3d:d4:
66:ec:c8:9d:94:8c:66:f9:e6:31:3f:4b:c8:bc:32:d4:0d:04:
89:97:88:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:55 2026 by rpki-client