Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
File: NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json)
Hash identifier: jJAXd4hhY4n6McVHFPHu0tPTk8jQ8K+ATfIh+Eanwvc=
Subject key identifier: 2E:BF:60:9A:06:27:B4:A0:FD:CF:9A:4C:6A:1E:6A:60:54:A4:6C:6C
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 019D2B17170FBBDF76C0E44CD161D4AF931F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
Manifest number: 114B
Signing time: Thu 26 Mar 2026 17:00:26 +0000
Manifest this update: Thu 26 Mar 2026 17:00:26 +0000
Manifest next update: Fri 27 Mar 2026 17:00:26 +0000
Files and hashes: 1: 1PqW9xAwSo4dm4VeDiS9Ue0wick.roa (hash: CB5tgTJXzCAm94J5KAhAijPRRc4JVl9OlDSGMEw6Gl4=)
2: D-ZsgxX-lJM43XQWd73eBSAxS_Q.roa (hash: WzGIf/FRP/VRfafRsDZV4L+vI/ltiwsGao4Ec2r89Fo=)
3: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: aszJmTvGLI45xKVhXPNiYPu+XPJ0ASMgkgP+bguxnH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:17:0f:bb:df:76:c0:e4:4c:d1:61:d4:af:93:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Mar 26 17:00:26 2026 GMT
Not After : Mar 27 17:00:26 2026 GMT
Subject: CN=2ebf609a0627b4a0fdcf9a4c6a1e6a6054a46c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:74:9e:43:08:53:64:7c:e1:41:01:b6:c5:
46:ce:c0:e1:43:e1:34:2c:3c:3d:39:27:7a:d2:68:
13:e5:37:6c:75:05:37:4c:ca:08:27:15:19:11:45:
d4:28:ac:05:55:2f:79:e0:57:0d:f6:42:28:8e:d8:
24:90:60:94:57:03:f8:24:e9:f5:f6:e8:00:89:27:
a6:f9:24:32:f2:1b:7f:fc:b5:f1:07:40:af:eb:3f:
57:69:a6:b0:a3:df:a8:d0:37:37:30:65:62:31:32:
99:ca:05:9e:21:41:08:d5:23:8c:21:02:28:83:32:
f0:14:6f:b3:95:8e:33:f5:42:ba:bd:22:1e:21:5f:
09:b9:29:62:af:7f:db:e2:b7:82:e5:ec:a4:48:a5:
bc:49:d0:7e:2b:06:9f:7e:74:8d:c9:a5:41:b7:12:
49:7a:4c:cd:5a:bb:47:ef:88:2e:51:e3:47:3d:29:
48:52:41:40:14:dd:15:89:dc:38:69:c0:db:a3:7a:
ee:eb:b2:6e:81:c0:a4:ab:f7:0a:4c:f8:a3:71:50:
25:43:1d:44:d5:9f:58:e2:91:c4:e9:8d:43:4c:b3:
6c:31:e4:cc:5e:b0:2b:6b:59:31:97:00:09:fc:02:
81:27:75:38:9d:a1:71:eb:2d:f6:d5:28:07:eb:47:
0e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BF:60:9A:06:27:B4:A0:FD:CF:9A:4C:6A:1E:6A:60:54:A4:6C:6C
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a3:fa:20:3b:f6:c0:c9:d5:fa:37:46:f8:65:7f:70:4e:57:
98:9f:b5:97:63:a5:b4:66:00:6c:4b:aa:7d:d6:56:83:e5:b8:
e7:bd:a9:86:69:f2:13:48:f4:6c:a0:de:c2:66:ee:e0:70:54:
c9:f9:5c:99:70:5b:3b:c4:9a:4d:7d:83:c7:c2:d7:84:a9:3c:
a2:e5:90:b7:dd:10:5d:22:4d:ad:8b:0d:73:bf:02:46:4e:5b:
2e:96:8d:35:92:b1:81:e0:f0:ba:f1:00:8a:48:24:aa:e1:ac:
c1:20:08:ed:7e:f5:19:05:01:5c:a6:bd:9e:38:04:80:26:56:
ec:54:53:08:e1:d5:70:bb:e6:79:5a:6f:47:fc:ef:c4:ff:c5:
28:d8:4e:d6:48:28:30:60:7d:0d:37:1e:d9:10:59:1a:21:96:
74:22:1c:fb:74:23:ec:0f:7b:9e:af:c5:94:7f:eb:0c:50:55:
4b:49:78:55:fa:3e:4d:39:2a:89:e3:4a:31:34:78:33:95:1c:
fb:3e:dc:5f:64:9b:4d:32:a7:97:fb:64:22:27:75:68:b7:3c:
22:13:c9:da:92:5a:18:33:70:ba:1e:3e:61:c4:cd:4b:74:4c:
59:c0:dd:12:0d:f9:cd:35:4c:b8:7a:57:36:2f:72:f5:17:21:
00:f7:69:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:44 2026 by rpki-client