Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier: 8RbHM8FVvzwKtU7n7jkLFyTfSLB50kk3AcRnn2yj7cs=
Subject key identifier: 2F:4B:DB:91:BE:31:DE:99:CF:93:62:CE:27:79:AA:D5:65:31:D5:3A
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 019D269659C5D84A16E610FC5BA1A6187E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number: 1037
Signing time: Wed 25 Mar 2026 20:01:20 +0000
Manifest this update: Wed 25 Mar 2026 20:01:20 +0000
Manifest next update: Thu 26 Mar 2026 20:01:20 +0000
Files and hashes: 1: KZG3OMXklNZsBx6WgKitrALmZj0.roa (hash: 9SZwSzE7oslX10Qwql6XopOxhODMi+xGUT/9jnT+PNY=)
2: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: E3RQueIO3liu57VLWFAcODWyEryVYxAWJF0gUe/kMAk=)
3: RgWD6Cul8V-cKt9LYAk_Q1ocGfE.roa (hash: Iv9j2nkfTILhlOSx9nkPprOTDgdWmEYo93HdfeAlzlU=)
4: nMxyFTkhcgdua8Reb7Q6l90PApI.roa (hash: ATDpv/c9S6aS3lBil2ijdclB6hxxeL+T+uqh9C31XI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:59:c5:d8:4a:16:e6:10:fc:5b:a1:a6:18:7e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: Mar 25 20:01:20 2026 GMT
Not After : Mar 26 20:01:20 2026 GMT
Subject: CN=2f4bdb91be31de99cf9362ce2779aad56531d53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:bc:88:ce:37:26:f5:35:79:63:eb:b1:4c:
01:e8:aa:ec:1b:5c:87:81:3a:26:8a:02:8a:7e:24:
f0:6d:4c:06:1b:67:12:61:2a:28:3f:b7:00:f5:6d:
b7:a9:93:bf:91:1f:86:e4:9a:38:e7:99:31:a4:38:
03:e0:e3:ff:19:09:3c:f4:13:ec:49:5d:58:80:d9:
07:27:8d:81:28:8a:8b:37:bb:4b:f9:65:19:16:c9:
fb:30:7a:9b:f4:68:9a:e1:f0:fb:80:52:10:f7:0f:
d0:26:e2:0a:f1:ad:28:97:f4:65:f0:f5:28:0c:0c:
bd:11:05:49:25:d8:a6:c4:c2:36:21:b8:fc:a8:c7:
3d:04:f1:df:f3:f5:ec:41:c1:37:04:d9:7e:f6:47:
84:00:31:1c:f4:2a:33:e1:de:2f:77:ec:dd:ea:c1:
55:e2:bb:f9:3d:75:e6:8e:7e:d9:f4:68:57:ab:f9:
c1:2c:51:cc:b5:99:fa:14:c1:44:12:51:63:0b:24:
bb:84:23:8b:78:27:b7:b5:dc:8f:66:26:60:a4:cb:
07:08:0e:ce:d5:e2:b6:5d:38:c5:b5:23:fc:94:dc:
38:41:16:2e:7c:ae:c3:df:fb:0b:73:79:6b:45:1a:
a3:eb:0a:3d:41:84:6b:0d:61:54:ed:05:91:ee:ed:
87:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4B:DB:91:BE:31:DE:99:CF:93:62:CE:27:79:AA:D5:65:31:D5:3A
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:83:31:d0:5d:c6:46:f9:de:79:fb:3e:76:10:39:6c:cd:85:
77:e4:4e:6b:03:aa:b8:3a:fc:0f:ea:bc:ba:b9:0a:51:e1:46:
aa:44:66:20:06:81:c2:6d:d4:e9:1f:38:a0:1a:d7:1a:2b:f8:
e9:26:65:b3:7e:47:3d:41:40:20:4e:55:35:c5:eb:d8:97:d3:
e1:db:a8:d4:a5:a0:3f:27:08:51:48:f1:77:db:d4:b9:e7:75:
a8:98:48:09:59:53:a7:77:de:c1:2a:24:f1:40:94:f9:ad:dd:
39:6e:0f:36:b2:93:6a:db:26:52:6a:e1:65:5d:8d:d7:27:8e:
8d:8d:fe:10:37:47:5c:42:75:3b:f5:ae:f2:86:98:e8:ae:ca:
22:b0:11:8c:45:b3:6d:1c:e1:75:e1:c4:e2:8d:5d:74:77:69:
8d:c5:56:99:a6:e7:7c:1e:51:25:46:d8:93:ce:dc:3b:1a:37:
2d:e5:40:dc:a2:77:8f:5f:d4:be:34:50:ea:69:92:cf:da:ae:
15:52:32:fc:9b:9e:06:3f:10:5c:b1:30:ce:1b:3d:95:f2:f7:
33:d9:08:11:07:5e:c7:25:9e:56:c8:84:db:c7:55:f5:24:78:
fd:c5:c8:42:93:87:b2:b5:0a:43:03:fa:a1:91:90:a5:5c:9c:
5c:97:a7:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mllnF2EoW5hD8W6GmGH4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NTMxYzU0YjFlNzk1NmMyY2MzNzFiMjNlMGE3NTU2N2Fh
Mjc1MTgwHhcNMjYwMzI1MjAwMTIwWhcNMjYwMzI2MjAwMTIwWjAzMTEwLwYDVQQD
EygyZjRiZGI5MWJlMzFkZTk5Y2Y5MzYyY2UyNzc5YWFkNTY1MzFkNTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIy8iM43JvU1eWPrsUwB6KrsG1yH
gTomigKKfiTwbUwGG2cSYSooP7cA9W23qZO/kR+G5Jo455kxpDgD4OP/GQk89BPs
SV1YgNkHJ42BKIqLN7tL+WUZFsn7MHqb9Gia4fD7gFIQ9w/QJuIK8a0ol/Rl8PUo
DAy9EQVJJdimxMI2Ibj8qMc9BPHf8/XsQcE3BNl+9keEADEc9Coz4d4vd+zd6sFV
4rv5PXXmjn7Z9GhXq/nBLFHMtZn6FMFEElFjCyS7hCOLeCe3tdyPZiZgpMsHCA7O
1eK2XTjFtSP8lNw4QRYufK7D3/sLc3lrRRqj6wo9QYRrDWFU7QWR7u2H9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9L25G+Md6Zz5Nizid5qtVlMdU6MB8GA1UdIwQY
MBaAFDRTHFSx55VsLMNxsj4KdVZ6onUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS84ZWZhODYtYzM1Zi00MWI2LWFkMDEt
NDkwNjEwM2RiZDE2LzEvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS84ZWZhODYtYzM1Zi00MWI2LWFkMDEtNDkwNjEwM2RiZDE2
LzEvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4Mx0F3G
Rvneefs+dhA5bM2Fd+ROawOquDr8D+q8urkKUeFGqkRmIAaBwm3U6R84oBrXGiv4
6SZls35HPUFAIE5VNcXr2JfT4duo1KWgPycIUUjxd9vUued1qJhICVlTp3fewSok
8UCU+a3dOW4PNrKTatsmUmrhZV2N1yeOjY3+EDdHXEJ1O/Wu8oaY6K7KIrARjEWz
bRzhdeHE4o1ddHdpjcVWmabnfB5RJUbYk87cOxo3LeVA3KJ3j1/UvjRQ6mmSz9qu
FVIy/JueBj8QXLEwzhs9lfL3M9kIEQdexyWeVsiE28dV9SR4/cXIQpOHsrUKQwP6
oZGQpVycXJen3A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:09 2026 by rpki-client