Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
File: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft (raw, json)
Hash identifier: Yp/RznU08tfpwW6CG3pK1JXEjcA3wGqRsDDLftFYmvY=
Subject key identifier: 90:BA:4D:13:B9:9C:26:56:67:22:6B:EE:93:1C:42:4F:92:55:FB:B3
Authority key identifier: 34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
Certificate issuer: /CN=34380cfba34b61f5db4565145928d9e4add930eb
Certificate serial: 019D27DFCC69557175740E46ADF6F07DBD28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
Manifest number: 033C
Signing time: Thu 26 Mar 2026 02:01:11 +0000
Manifest this update: Thu 26 Mar 2026 02:01:11 +0000
Manifest next update: Fri 27 Mar 2026 02:01:11 +0000
Files and hashes: 1: 4MiAJwzR0PPxr-dliGFjke8_QaQ.roa (hash: ZxnOdzgWsAp09tFBm2XqBvLkxANnIjozT0brrxAIWL4=)
2: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl (hash: E1HphxoVLCUVBsKiaQ35otUb2UmLto/mByj1XFC47z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:cc:69:55:71:75:74:0e:46:ad:f6:f0:7d:bd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34380cfba34b61f5db4565145928d9e4add930eb
Validity
Not Before: Mar 26 02:01:11 2026 GMT
Not After : Mar 27 02:01:11 2026 GMT
Subject: CN=90ba4d13b99c265667226bee931c424f9255fbb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:27:9c:d4:46:c9:86:a5:e2:97:2c:f4:30:fe:
c3:34:5e:e8:08:8a:31:76:19:39:81:aa:65:34:94:
ff:05:c9:80:99:6b:8c:9d:7a:b1:65:8a:dd:3b:75:
be:a8:8d:d1:d3:8d:52:bf:74:86:ce:9d:0c:c7:ae:
ed:92:02:cd:03:44:65:2a:ea:24:6f:af:79:31:82:
b7:e3:02:65:92:1c:54:c8:06:54:9f:fb:36:0f:a2:
63:81:28:b5:d9:b3:1c:b5:f3:e9:ef:d8:74:73:8c:
73:4f:f0:e2:1d:f7:d1:b6:7b:93:30:d0:c8:05:7c:
3b:ab:58:1a:b4:23:9a:6d:2c:10:40:bc:89:5c:35:
51:45:ed:cb:75:67:bc:99:f8:84:4d:07:0b:70:e5:
b3:14:66:36:97:c2:27:cc:4d:92:49:a6:64:fc:4d:
7a:63:83:e4:4a:8a:a3:f5:da:49:7f:b4:06:b6:99:
4e:72:06:15:60:c9:eb:b4:24:71:33:10:3d:3b:a2:
01:9d:79:c0:08:49:41:a8:bd:6e:d5:17:d4:ab:50:
c8:b8:9f:e8:45:07:82:a2:dc:fc:4a:60:b4:54:36:
6d:c4:b7:1d:2e:55:98:0a:49:58:af:cf:be:7d:47:
93:63:2d:63:26:78:6e:d9:18:c5:88:01:a4:31:d9:
68:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BA:4D:13:B9:9C:26:56:67:22:6B:EE:93:1C:42:4F:92:55:FB:B3
X509v3 Authority Key Identifier:
keyid:34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:56:b0:d0:98:a3:55:2c:19:be:b2:44:19:fa:ff:8e:04:8a:
3c:7c:a3:a2:dd:88:c2:19:eb:62:40:fc:65:10:8c:e7:f1:51:
f0:07:c0:af:29:45:16:c8:43:23:38:a6:b3:c7:6d:3e:85:03:
9c:9f:31:0f:44:19:fd:06:ce:f4:1b:d8:03:b5:65:09:27:14:
c3:85:34:57:b4:6d:65:03:6c:72:1b:8b:40:e0:e3:e8:20:40:
dd:93:6d:74:d7:59:c6:4b:ac:46:ab:c1:ad:a5:78:ec:c4:f3:
40:48:29:f3:58:07:c8:6c:7e:20:02:75:fd:cb:e9:ba:11:98:
37:fd:bf:44:68:d1:2f:61:0c:0a:1b:52:bc:aa:ec:be:91:d3:
d2:e3:2c:40:65:f3:aa:aa:94:ff:42:99:03:c6:a0:b3:fc:f3:
41:e1:68:5e:59:c9:54:4a:be:fd:58:87:68:94:86:3a:e3:19:
e6:08:f4:7f:4d:78:b5:64:7b:22:b8:0c:6a:76:a9:1d:14:71:
88:b1:7a:5a:fe:cf:b9:2d:90:4e:17:c0:dc:25:b9:7f:17:4a:
be:46:6a:dc:41:bf:56:14:2e:98:f5:86:c4:e7:f0:55:6e:ef:
f3:b4:e4:ab:10:0a:ad:78:05:8e:c7:f9:8a:11:5a:b4:a8:29:
e3:ae:c7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:36:26 2026 by rpki-client