Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
File: NNsbsppK6oXhnCiS0Mg54vuUXtA.mft (raw, json)
Hash identifier: wnQ/mM4AV3cfLjTCxJjg9WoiUaNJWUFueAXLk6Sgrtc=
Subject key identifier: A2:91:0F:3C:83:F9:5D:6A:B7:A6:75:B8:8C:B4:DB:FF:A1:78:58:E2
Authority key identifier: 34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
Certificate issuer: /CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Certificate serial: 019D2884BA8EB68D41704B7F20B3A3C06BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
Manifest number: 0567
Signing time: Thu 26 Mar 2026 05:01:20 +0000
Manifest this update: Thu 26 Mar 2026 05:01:20 +0000
Manifest next update: Fri 27 Mar 2026 05:01:20 +0000
Files and hashes: 1: NNsbsppK6oXhnCiS0Mg54vuUXtA.crl (hash: 5a6srNz97UPWsFkI/szEwEREaCrCVEYgC1c83eCMCYY=)
2: vLei4seWygsDh0oR9_VnFB1q0Xs.roa (hash: ND2KaYB7DGNAB4Oizn0Q8ZdJQ6VlQYlD9dkkKlwD5i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:ba:8e:b6:8d:41:70:4b:7f:20:b3:a3:c0:6b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34db1bb29a4aea85e19c2892d0c839e2fb945ed0
Validity
Not Before: Mar 26 05:01:20 2026 GMT
Not After : Mar 27 05:01:20 2026 GMT
Subject: CN=a2910f3c83f95d6ab7a675b88cb4dbffa17858e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:8c:56:0f:8a:82:2b:34:fc:5c:95:d8:49:
48:2c:9f:61:7f:0c:04:2b:cf:e7:ae:c7:2c:81:07:
08:76:d2:44:9d:d0:21:18:77:6f:e9:63:83:67:37:
ef:16:13:ed:b1:43:fb:8e:74:2a:b9:29:e9:20:a9:
39:35:d6:0e:57:1f:6e:36:62:96:79:d7:e2:bd:a7:
90:25:78:89:35:eb:e6:c0:86:85:39:39:ac:60:cd:
be:7a:bf:3c:3a:54:ba:c1:9a:1a:24:39:b7:a1:21:
87:52:bf:4b:fd:f0:20:26:c3:48:bb:bc:62:27:83:
aa:67:d9:b2:aa:34:6d:4d:5c:4e:31:53:45:6f:b3:
94:60:0a:41:22:3e:de:e6:ee:ff:e5:57:d4:8f:d4:
1c:f6:bd:5c:65:f3:1c:c4:0a:0d:32:fa:29:bb:79:
82:65:9f:2f:ce:e3:35:bf:3f:71:65:9f:77:86:88:
5c:f9:71:be:29:00:b0:65:7b:2a:1e:28:73:e7:00:
e4:47:b8:85:da:dd:34:5c:74:3c:91:61:c7:5f:ed:
c7:0e:14:e2:2f:e2:cb:32:ac:4e:4a:4d:2d:a2:ec:
ac:9e:ed:53:e7:1f:83:2e:b0:a8:03:f9:e0:c5:b3:
de:7f:7d:dd:0e:6e:b8:6b:06:7d:21:2f:c1:f6:13:
86:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:91:0F:3C:83:F9:5D:6A:B7:A6:75:B8:8C:B4:DB:FF:A1:78:58:E2
X509v3 Authority Key Identifier:
keyid:34:DB:1B:B2:9A:4A:EA:85:E1:9C:28:92:D0:C8:39:E2:FB:94:5E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNsbsppK6oXhnCiS0Mg54vuUXtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8db8d2-6b11-4d19-8e8d-52a10425b136/1/NNsbsppK6oXhnCiS0Mg54vuUXtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cf:20:46:d6:05:8d:64:1e:9f:04:9a:a5:3f:b2:b5:bb:09:
36:c1:a4:e2:4b:0f:7b:51:9a:71:da:c3:c9:4f:ee:36:91:a0:
09:2d:a8:dd:b4:f7:e1:80:84:1e:1a:04:a1:ec:5a:5a:53:a8:
2f:c3:cc:3a:cb:cd:69:58:a8:e7:49:0c:e1:13:be:f4:42:7c:
c8:d3:8e:c6:72:62:bd:1b:f8:4d:93:82:79:5e:a6:94:2f:e7:
67:00:d8:d4:bd:46:92:86:9f:ec:11:30:13:d0:b0:45:06:9b:
c6:cb:1b:e4:54:8f:5a:cf:9c:cd:de:5e:99:d2:c0:a8:a7:44:
9e:14:46:23:c0:e6:3a:40:cf:f6:c3:20:ad:85:6b:68:5a:5c:
b3:4b:ee:3e:d5:87:cf:6d:64:8e:9e:f9:d7:0e:88:83:c0:f7:
36:d6:62:82:5d:02:85:92:06:f4:63:14:9c:ef:5c:c1:18:4e:
e4:ff:56:ca:5e:4e:10:41:ca:cf:61:7b:22:ad:f1:7f:af:a1:
d5:c6:54:6b:77:da:99:f8:46:ce:1f:a5:6f:87:fb:d5:ad:bc:
aa:00:24:5d:7b:02:7b:26:45:8a:fb:5b:a8:f2:22:6b:75:e6:
82:d9:8d:33:94:94:ac:01:61:a0:21:4d:25:88:ed:94:6d:34:
f2:08:a0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:57 2026 by rpki-client