Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
File: Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft (raw, json)
Hash identifier: yPnbpgqhyEqd6R6pZlosDdQ1kmCzy2EgP/TiD1+tDMU=
Subject key identifier: 51:58:AC:EE:E2:2E:97:28:42:2C:65:5B:48:50:44:22:EF:7C:51:75
Authority key identifier: 37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96
Certificate issuer: /CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
Certificate serial: 019D2B1706045B50F6C9EC3D26EE36CB2FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
Manifest number: 103A
Signing time: Thu 26 Mar 2026 17:00:22 +0000
Manifest this update: Thu 26 Mar 2026 17:00:22 +0000
Manifest next update: Fri 27 Mar 2026 17:00:22 +0000
Files and hashes: 1: DVNQFoQorVY9yU9kbTj9LC9XoJw.roa (hash: 07ZRQCYv53Y3Q3qxf4P5rZ1SgsujlGLWZ0tRpP+wSS0=)
2: Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl (hash: n1q2337TDFOA1pQEXY1ThQ+xFNhMFqwAoagiMXhA33k=)
3: YbX_Uq-fQ-5ekdVmZwT4UX9M_AE.roa (hash: 3ccMS28ZUPKFrYPJozhkPpBaeqel+ZZodIDTxyiq9A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:06:04:5b:50:f6:c9:ec:3d:26:ee:36:cb:2f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
Validity
Not Before: Mar 26 17:00:22 2026 GMT
Not After : Mar 27 17:00:22 2026 GMT
Subject: CN=5158aceee22e9728422c655b48504422ef7c5175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:40:9d:ae:e9:f4:74:23:39:b7:0d:10:ae:
62:17:df:35:b1:e5:ec:93:32:51:c9:73:24:4c:7f:
dd:10:4c:45:e3:05:2e:7c:25:da:62:2b:18:77:c3:
c0:92:1d:57:36:f8:e9:fe:71:49:6f:e1:14:8b:c5:
14:77:17:e6:2e:ac:73:ae:38:45:14:a9:fc:e6:b8:
e9:4f:86:cf:ba:e9:8c:b3:ae:49:a3:d1:09:01:e5:
8f:25:99:d1:6c:0e:82:e9:72:52:12:29:73:83:e2:
54:37:4b:8e:0a:36:c8:05:b3:69:ca:0e:5b:5c:2d:
e6:e7:98:1f:27:3d:ad:83:99:8c:7e:20:f9:13:41:
7c:52:3c:10:b0:2b:a5:d4:ab:0e:14:29:b8:43:98:
57:43:26:c8:be:ec:ec:9d:63:cb:09:43:81:d7:61:
e3:76:bc:d5:88:13:fb:c9:c5:20:7a:65:e5:48:8c:
c4:d8:a5:77:10:03:38:fb:96:a7:10:ef:c8:8c:21:
95:65:b5:d6:82:ce:99:a8:b7:49:b1:cf:bd:e2:77:
78:5c:1e:fc:6e:45:6c:04:e3:84:41:ab:7f:14:1a:
94:89:7a:ab:62:5b:b9:0f:0a:b2:21:25:43:ab:41:
32:0f:07:2a:f5:51:90:20:5a:fa:d7:ef:40:b6:85:
84:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:58:AC:EE:E2:2E:97:28:42:2C:65:5B:48:50:44:22:EF:7C:51:75
X509v3 Authority Key Identifier:
keyid:37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ef:24:b2:44:53:7b:c8:58:bf:7a:5f:15:a2:15:b5:be:8e:
92:9d:d5:17:0e:8c:42:61:7b:a6:a9:4b:1e:03:2c:3a:ae:73:
39:eb:3a:fa:5a:cf:79:2b:d4:78:02:35:c2:65:05:38:fb:55:
3d:06:92:66:41:03:9e:f5:17:c8:de:c5:1d:8c:9b:64:85:70:
af:7c:50:00:ae:8b:6c:8e:53:4f:50:82:59:d4:f9:61:2a:44:
39:52:4f:7f:18:bd:36:0a:2e:ad:f6:09:9a:8c:71:40:74:6d:
9a:ef:a0:0e:be:c8:e3:ca:11:20:50:a7:4b:ec:7e:c6:3f:31:
7b:9c:d3:e1:c2:d1:b8:e8:2d:ee:dd:66:af:8f:b9:25:7d:a8:
d0:ca:b1:c9:97:b1:68:cd:40:58:d6:fd:68:e4:5b:54:c3:f9:
19:42:47:f3:29:74:90:1b:f6:8c:6f:f3:f3:cf:7c:e9:7c:7b:
18:27:73:f2:25:91:5c:b5:fb:6d:21:7b:0f:68:e2:69:8e:ab:
3c:20:1a:b8:d9:83:ce:0b:e3:ad:39:d3:c7:2b:f8:1e:16:99:
7e:d4:55:35:78:b4:51:03:ef:02:0f:d4:93:df:39:1c:db:61:
25:5e:36:b5:de:ce:e0:01:1d:e6:ec:b4:8d:17:d9:1e:76:fc:
37:21:5e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:21:56 2026 by rpki-client