Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
File: t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft (raw, json)
Hash identifier: FRXk2sJSkKfo5qunXmK/F5PXax0ba1QLlS51rQdE4ag=
Subject key identifier: 61:F6:E4:51:BF:BA:DC:88:6E:78:30:86:EE:86:1C:88:CE:BB:FA:FC
Authority key identifier: B7:F3:5C:5E:EE:A0:21:F6:0A:FF:33:8E:D6:28:52:E4:C0:3C:57:9A
Certificate issuer: /CN=b7f35c5eeea021f60aff338ed62852e4c03c579a
Certificate serial: 019D27722B081E96FAD9094444B85F56E34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_NcXu6gIfYK_zOO1ihS5MA8V5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
Manifest number: 70
Signing time: Thu 26 Mar 2026 00:01:26 +0000
Manifest this update: Thu 26 Mar 2026 00:01:26 +0000
Manifest next update: Fri 27 Mar 2026 00:01:26 +0000
Files and hashes: 1: ZBLmjHEnNj5CsLTBhAUiBj1hV0A.roa (hash: 3EA6s7k8+iqt8vTemGLaBh1ZR5wfpLsxKHoZaTRSwXw=)
2: t_NcXu6gIfYK_zOO1ihS5MA8V5o.crl (hash: b2yvllk8fVacz9dM6mHN3Uz7IosvhjG16R+F2tNgTX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_NcXu6gIfYK_zOO1ihS5MA8V5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:2b:08:1e:96:fa:d9:09:44:44:b8:5f:56:e3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f35c5eeea021f60aff338ed62852e4c03c579a
Validity
Not Before: Mar 26 00:01:26 2026 GMT
Not After : Mar 27 00:01:26 2026 GMT
Subject: CN=61f6e451bfbadc886e783086ee861c88cebbfafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:35:dd:c6:ef:53:99:aa:20:50:3a:b0:f8:ad:
c0:52:d4:4b:1b:fd:04:43:ed:9d:d9:e6:0c:c4:ce:
e8:72:f4:45:46:1a:10:13:93:aa:6d:4c:af:68:54:
56:a8:63:50:5e:a4:0d:eb:86:fb:db:f5:2d:b8:8f:
ff:7a:50:86:51:37:20:b4:53:45:c2:44:d0:55:ba:
1c:6d:79:b9:79:49:a4:29:f2:44:3f:9b:19:e5:66:
75:aa:1f:5e:db:b3:3e:13:64:3d:b1:93:f8:3c:b8:
a6:c8:7a:bd:35:e1:77:b6:b7:0e:f7:25:20:ae:be:
6e:73:f7:70:c5:78:bf:ab:8e:1b:f6:e3:ba:af:b7:
c8:20:37:ae:05:9b:04:2a:e9:b3:52:ee:04:2f:bf:
78:2e:f8:b1:30:9f:64:62:62:b6:f5:48:8b:ae:f0:
18:a8:2e:d8:36:9f:2b:63:1b:06:0f:e2:fb:99:ed:
40:12:3c:f7:68:e1:54:54:af:92:d3:c7:83:07:f5:
d2:f6:3e:9b:9b:57:d5:2d:d5:7c:9e:b3:35:fa:61:
f1:7c:b8:48:52:8f:2f:bf:b7:d9:d2:44:80:20:61:
8a:b8:0d:76:c9:ed:5e:c9:26:e6:e6:55:1e:9e:4a:
63:56:9f:db:8e:ec:30:e1:a8:f9:d5:e9:01:f8:e5:
6d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F6:E4:51:BF:BA:DC:88:6E:78:30:86:EE:86:1C:88:CE:BB:FA:FC
X509v3 Authority Key Identifier:
keyid:B7:F3:5C:5E:EE:A0:21:F6:0A:FF:33:8E:D6:28:52:E4:C0:3C:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_NcXu6gIfYK_zOO1ihS5MA8V5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f3:41:e1:aa:93:bc:e7:a8:4c:ca:fa:2f:c6:5c:0b:dc:10:
a4:dd:c7:03:21:77:67:18:35:54:6c:d7:a8:60:50:94:cb:24:
65:85:65:44:c9:b2:c7:63:13:84:39:ac:41:f6:41:2d:7a:4e:
7d:44:76:02:f1:c2:4e:6d:f4:d1:7b:2a:17:9e:b4:07:d9:cf:
a1:40:96:4f:c3:aa:4a:06:b0:56:ed:92:66:59:c2:28:e5:15:
a3:ed:46:b8:42:e5:24:95:cc:a4:57:c4:8b:a2:d5:19:0f:ab:
73:db:01:f2:d7:cc:71:88:dc:2d:7c:a4:3a:c7:e0:2d:b9:3c:
52:7f:e1:46:ab:68:e3:dc:34:64:b6:a6:c7:24:10:9e:f8:55:
70:73:f1:84:b6:5a:18:94:ab:8a:ab:fd:c8:ef:e3:0b:34:b5:
7e:e3:8e:bb:bd:e7:c3:f1:2f:fd:1c:1b:c5:77:e2:46:d8:62:
4e:ec:16:23:d1:b1:b5:75:2b:00:7c:06:bf:d1:73:ed:08:a7:
37:f7:11:af:14:3b:3b:7f:9f:20:d0:62:3b:59:73:d7:a7:f7:
79:50:21:23:bb:9b:08:2f:53:32:e0:65:0a:0b:17:4b:92:49:
5d:ed:d4:96:a4:7e:ab:b0:7a:30:dc:63:22:18:9a:28:2d:5a:
2b:24:0c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:43 2026 by rpki-client