Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
File: NW4BARgaykJR6fJKj2NzXi9evc0.mft (raw, json)
Hash identifier: FRtJrd4Y5GiLY+zW4dEloGv9cB5UAwvNZtzrMUNyGzc=
Subject key identifier: DD:23:B5:76:66:34:08:F7:E1:1D:32:20:23:1C:A3:58:B6:72:46:40
Authority key identifier: 35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
Certificate issuer: /CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Certificate serial: 019D28170EBC3648A47232555BBF02A0693B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
Manifest number: 0594
Signing time: Thu 26 Mar 2026 03:01:32 +0000
Manifest this update: Thu 26 Mar 2026 03:01:32 +0000
Manifest next update: Fri 27 Mar 2026 03:01:32 +0000
Files and hashes: 1: NW4BARgaykJR6fJKj2NzXi9evc0.crl (hash: R/4/exxZXInsaydeJSxZ7fwR+t5U/QcJxkr4CzqpqN4=)
2: OpL-pa8NL900kH8xzWl5YjvThJY.roa (hash: vlDt2SoHGnTYLb5raTfW4h1Lk0nI8+h/wkbguuhzWkQ=)
3: sIlCaCD_4BDRNR5RbqWtiio-eF0.roa (hash: PQBWwOKM2zk4TrqswCsq5mNswJnxO+Lcbmzd/J2ySfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:0e:bc:36:48:a4:72:32:55:5b:bf:02:a0:69:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Validity
Not Before: Mar 26 03:01:32 2026 GMT
Not After : Mar 27 03:01:32 2026 GMT
Subject: CN=dd23b576663408f7e11d3220231ca358b6724640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:10:c4:d1:0c:2e:5c:58:0a:42:b7:55:e3:
96:d4:a8:f3:04:2b:17:05:85:04:34:3c:0f:5e:14:
64:5d:10:54:3b:06:e2:fb:ca:b5:10:77:fe:1b:51:
2e:7c:ef:99:67:c2:10:c0:c0:1a:d3:c0:15:3d:38:
57:85:88:cd:e9:9d:a0:5d:20:b8:c1:20:1e:99:33:
f8:68:9a:0d:92:bc:7d:60:bc:32:de:53:8b:cc:36:
c2:2b:58:de:1f:28:33:08:36:6c:76:d7:ec:49:09:
6d:fc:ad:be:81:1b:bc:f9:d2:88:a6:73:d3:68:aa:
fb:9c:6f:87:d1:f4:37:7b:d4:02:76:9f:40:de:e7:
bd:d8:21:49:d4:ce:fa:eb:02:9d:83:2d:f4:ac:88:
c2:c7:97:7d:c3:f1:d1:bd:ca:e1:bc:ba:38:28:fd:
e1:de:1b:24:2c:e9:32:f4:14:fa:04:b3:29:3d:00:
8d:93:cf:29:12:20:b1:02:57:2a:c0:e7:d9:53:36:
c8:7c:28:98:e3:58:0d:17:f8:73:6e:b8:c6:25:03:
22:64:b2:1e:ee:4f:da:94:50:f3:8d:70:00:bf:a0:
ba:85:1e:91:0b:4f:af:74:30:0d:9c:0e:9c:52:ea:
a7:84:31:9c:9f:d0:dc:82:a3:04:e3:c0:ee:c1:fb:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:23:B5:76:66:34:08:F7:E1:1D:32:20:23:1C:A3:58:B6:72:46:40
X509v3 Authority Key Identifier:
keyid:35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:53:ac:3f:61:b5:54:09:0f:77:25:09:ad:e4:0e:ae:31:ce:
53:4d:54:41:0d:68:4b:7a:1b:ee:f7:b4:92:30:6a:d3:ac:88:
63:c4:86:bd:46:5d:3d:3e:53:65:d9:e8:d1:f6:07:f2:ab:5e:
a0:0f:0d:a0:c0:53:b8:0f:34:5c:30:85:0b:b6:c1:87:af:4a:
6e:d6:77:a8:ed:0d:73:c5:79:86:af:ea:ff:83:f2:08:60:eb:
b1:d8:ce:76:1d:8d:26:28:05:93:8e:f6:51:46:e4:df:f0:0c:
76:4f:0b:ca:27:9e:5e:ab:5c:5d:35:e2:23:55:0b:38:3d:d3:
12:8d:fc:40:f2:3a:a6:c1:d2:fc:ec:e9:d2:1c:35:4c:9e:7d:
4d:a1:1a:58:9b:19:97:85:e4:8f:0c:bb:1a:e9:04:80:32:4f:
f2:2a:35:bc:cd:39:d6:61:75:75:7b:5e:a3:aa:b5:9d:cb:49:
a0:e9:dd:96:7d:44:af:df:64:3e:22:ad:3e:42:e4:06:d8:b1:
c0:c8:ee:60:99:f3:78:26:13:b2:7b:f1:e4:5c:1b:ec:9e:1a:
88:f9:48:83:30:d7:28:1a:36:de:66:f7:5c:40:91:2c:62:47:
aa:9b:54:2f:c3:b3:da:5a:71:39:94:46:3f:fd:02:ff:e9:c0:
af:d2:34:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:36:34 2026 by rpki-client