Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: +wBWSPZJ5CJEQ44BbYvno/OrbDxDa1kqVqoOC6lUT/c=
Subject key identifier: 6A:CE:14:09:2D:85:B3:48:87:9B:6B:13:50:73:41:F1:DF:68:E9:CF
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 019D265F61E5B04F523A4FE7D5561E8AE0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 03F1
Signing time: Wed 25 Mar 2026 19:01:18 +0000
Manifest this update: Wed 25 Mar 2026 19:01:18 +0000
Manifest next update: Thu 26 Mar 2026 19:01:18 +0000
Files and hashes: 1: 1a2w5_LzpzoweEi0kL3e8rXuwEw.roa (hash: Uznzi70zArzLc6sT1YufT+KJGM9lJIIJ4gfkTYxhtAs=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: uLzZf7/6ToboElDGCh8MS1cOvlcoZLVSeaF6MlcVoPo=)
3: TUYlFT-dUBjSF5MwO5c5SHo_-PA.roa (hash: yDE5fT46PoSW/d5/n8et57tOUUfO/M0RS358RxhsJ3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:61:e5:b0:4f:52:3a:4f:e7:d5:56:1e:8a:e0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Mar 25 19:01:18 2026 GMT
Not After : Mar 26 19:01:18 2026 GMT
Subject: CN=6ace14092d85b348879b6b13507341f1df68e9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:89:e5:94:7b:d2:29:b0:55:17:6d:2d:a3:55:
34:df:3d:4e:38:44:20:85:14:0f:52:e7:13:1c:fe:
7c:e2:b1:87:42:e7:d6:c4:0e:e8:f5:b2:48:ae:2c:
cd:02:9d:6c:02:fa:65:35:14:41:79:c9:e8:18:7e:
9d:5c:cb:85:a3:2a:f0:6e:b5:18:8e:af:27:37:7a:
9a:2f:c4:32:dc:c0:81:1d:56:7f:62:84:3f:35:c0:
2e:a5:fa:3d:b4:e8:55:44:36:40:e5:2b:31:0c:7f:
14:2d:b0:b9:61:aa:bd:87:e8:9d:6a:17:8f:7e:6e:
f7:6a:22:b7:d5:ff:50:1a:5e:ef:90:ce:53:6c:75:
1e:3a:a3:6c:2c:a8:03:6c:15:47:0f:3c:1f:cf:c3:
0a:3c:99:a4:c2:d5:e8:5c:d3:8e:f4:c6:a2:46:32:
4c:3e:47:55:28:31:59:ff:c7:79:a9:61:32:89:c2:
ef:a3:bc:dc:50:7d:cb:07:85:89:95:8e:12:a2:32:
74:bb:93:ec:53:33:39:74:e5:23:f8:e1:08:2b:60:
75:c6:38:3e:b7:35:22:12:c9:da:42:8c:27:74:32:
e3:56:77:80:2c:db:54:9c:b6:50:76:77:24:9e:9f:
3f:25:fd:6c:a2:c7:41:c6:2b:9b:eb:f2:04:2e:3e:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CE:14:09:2D:85:B3:48:87:9B:6B:13:50:73:41:F1:DF:68:E9:CF
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:98:7b:81:c9:fe:24:65:b4:d2:af:b3:f5:a0:6b:0d:1a:88:
ad:bd:6c:0b:46:d7:86:6e:32:0e:04:b1:1b:3b:49:18:23:31:
75:5d:07:b5:b1:31:c5:06:f9:3c:9a:09:27:38:ad:5c:30:28:
17:16:cf:dd:1a:1e:e6:be:5a:66:ef:75:3f:cb:78:22:61:8e:
eb:8e:bc:85:e7:fb:48:58:bd:7c:b3:70:8f:06:d2:7d:d6:b7:
a4:39:37:53:72:a9:cd:1d:5d:11:74:b3:fc:af:12:29:b4:70:
15:8f:41:ce:04:55:22:7c:2c:56:c7:0c:f7:c7:b2:b4:e9:d3:
f1:1e:5d:71:d8:43:21:3d:9b:5f:00:ae:b7:04:b8:9c:8d:52:
4c:cb:70:5f:92:1f:85:38:45:0a:37:0e:e5:63:99:96:0b:94:
93:65:91:84:66:61:08:92:c6:0c:48:75:ad:74:c3:76:c4:55:
0d:a4:da:af:45:a5:0d:66:ef:9f:4d:a4:88:03:6d:b1:75:53:
4b:8c:d6:2b:61:ee:f1:9e:5e:ef:c0:d1:65:1a:4d:d0:c5:99:
e0:78:8d:57:97:42:31:1a:85:c1:60:d8:0a:2d:6a:88:d4:c1:
26:67:57:14:ba:ed:eb:ba:7e:ca:98:63:65:34:d5:41:e8:6f:
cf:fd:33:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:45 2026 by rpki-client