Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
File: NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft (raw, json)
Hash identifier: VTFnq6MmIHoW9voLl6JZyjUM7+7BA3oDjAt3iX+AeXc=
Subject key identifier: 42:CE:8A:A5:6F:AE:7B:75:27:CD:30:98:BD:B3:51:C0:B2:29:EF:39
Authority key identifier: 34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
Certificate issuer: /CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Certificate serial: 019D258322C1086618496068E010219F4FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
Manifest number: 03D4
Signing time: Wed 25 Mar 2026 15:00:44 +0000
Manifest this update: Wed 25 Mar 2026 15:00:44 +0000
Manifest next update: Thu 26 Mar 2026 15:00:44 +0000
Files and hashes: 1: 7ksTJ_jFitxF4bukC24j3eo_mx0.roa (hash: P5sZaUJcRIlYxIsN9061EjjltvsNE9PdjoK/NkSXYrQ=)
2: NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl (hash: BVBc/bCC0fQb+ESlQ8SqmDj16DBn7NjhKVQNqJApDpU=)
3: jSMK0-DQ4LkW8HGxfeOZqpRoUDg.roa (hash: LbCW9qnhO4rcrIcNPyJRkz9sjQKYiVfJkLlpl6db0Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:22:c1:08:66:18:49:60:68:e0:10:21:9f:4f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Validity
Not Before: Mar 25 15:00:44 2026 GMT
Not After : Mar 26 15:00:44 2026 GMT
Subject: CN=42ce8aa56fae7b7527cd3098bdb351c0b229ef39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:28:23:ea:91:74:2a:fe:96:53:24:c1:d4:
91:01:2d:03:d2:48:7d:18:8b:f7:e8:eb:85:f8:45:
cd:b2:87:ea:3e:fb:62:a4:6c:58:53:5d:c5:5d:52:
6a:fc:07:4f:86:d0:d3:c2:bf:69:df:0d:3b:ed:ed:
a5:7b:8e:23:a0:5c:29:ca:79:ec:c3:0c:fb:f9:47:
06:1d:ec:6f:fb:f0:61:13:52:ea:b6:d6:b2:b3:39:
12:fb:04:7f:f7:c5:c0:22:68:d9:37:1f:d7:3c:31:
fb:09:39:2b:08:04:6b:5a:f6:b9:e0:a4:58:c9:01:
1c:bd:f8:0f:57:51:8d:c4:45:24:9d:e7:5c:d9:87:
3e:3a:99:14:75:8c:ce:12:c8:72:2b:ff:1c:08:88:
e0:10:e7:32:2a:8e:50:71:42:73:67:71:1c:47:09:
f6:b3:2d:07:1d:fe:4b:5e:bf:ea:00:21:6c:7a:ad:
75:bc:14:37:e4:8e:48:df:52:d5:af:11:6e:af:d8:
46:b8:92:c8:f5:51:d8:03:24:bb:60:95:c2:b3:65:
da:16:95:57:27:9c:50:d6:35:70:51:5c:b6:ed:43:
7f:7f:9a:1a:e2:b9:8d:72:a1:f2:ce:73:d0:43:08:
05:5c:9b:b1:cd:3e:5e:2d:51:12:4f:3f:9e:0a:4e:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CE:8A:A5:6F:AE:7B:75:27:CD:30:98:BD:B3:51:C0:B2:29:EF:39
X509v3 Authority Key Identifier:
keyid:34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:34:4f:e4:dd:cf:db:97:70:ab:20:0c:ee:fb:aa:63:dd:8a:
a3:e7:12:0d:42:8c:af:50:82:40:f8:f8:49:dd:b1:7c:05:aa:
3a:9e:06:13:f8:be:28:37:56:4e:6a:e8:35:7c:25:69:e9:55:
38:ce:c8:8c:a2:c9:d9:7e:56:4e:12:15:56:44:08:2f:92:4c:
6f:79:ea:1a:ed:4c:4c:de:0a:dc:40:b4:8f:f3:04:6d:24:02:
19:35:60:ae:2e:13:16:ec:85:a8:70:16:04:84:55:09:67:65:
16:2a:07:45:60:bb:92:9e:d3:d4:93:23:68:e6:cc:6a:e4:93:
66:15:62:7b:31:d2:f5:5d:5f:22:c9:46:9e:0c:4d:fb:69:e3:
0e:c5:45:fe:50:b4:d2:57:44:24:d9:1d:d3:a6:34:da:78:68:
38:69:bc:9b:75:8c:79:35:e7:ef:cf:d7:a4:1e:5d:79:fd:6e:
77:7d:1a:5d:d0:3a:28:37:a4:23:eb:c2:4b:80:86:fa:de:77:
1a:13:f2:df:1c:c4:d7:6a:7f:61:e0:f3:0c:07:c6:9d:d7:40:
ac:cd:59:0c:34:b5:70:8c:59:fd:6a:fd:c3:6e:5a:4f:16:27:
86:ff:44:ea:3a:a1:52:0c:50:90:e9:76:6e:8c:93:f6:58:d1:
17:9d:dc:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lgyLBCGYYSWBo4BAhn0+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZGQ0MDI2ZDI5MGYzMjAxZDI4ZWY2ODRkM2M1YWMxM2M5
NmVjNmQwHhcNMjYwMzI1MTUwMDQ0WhcNMjYwMzI2MTUwMDQ0WjAzMTEwLwYDVQQD
Eyg0MmNlOGFhNTZmYWU3Yjc1MjdjZDMwOThiZGIzNTFjMGIyMjllZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6IoI+qRdCr+llMkwdSRAS0D0kh9
GIv36OuF+EXNsofqPvtipGxYU13FXVJq/AdPhtDTwr9p3w077e2le44joFwpynns
wwz7+UcGHexv+/BhE1LqttayszkS+wR/98XAImjZNx/XPDH7CTkrCARrWva54KRY
yQEcvfgPV1GNxEUknedc2Yc+OpkUdYzOEshyK/8cCIjgEOcyKo5QcUJzZ3EcRwn2
sy0HHf5LXr/qACFseq11vBQ35I5I31LVrxFur9hGuJLI9VHYAyS7YJXCs2XaFpVX
J5xQ1jVwUVy27UN/f5oa4rmNcqHyznPQQwgFXJuxzT5eLVESTz+eCk6IPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELOiqVvrnt1J80wmL2zUcCyKe85MB8GA1UdIwQY
MBaAFDTdQCbSkPMgHSjvaE08WsE8luxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MmE0MDUtMTU5OC00MDMzLThlMmIt
ODc4NTA3ZWQ0NmY3LzEvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83MmE0MDUtMTU5OC00MDMzLThlMmItODc4NTA3ZWQ0NmY3
LzEvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTRP5N3P
25dwqyAM7vuqY92Ko+cSDUKMr1CCQPj4Sd2xfAWqOp4GE/i+KDdWTmroNXwlaelV
OM7IjKLJ2X5WThIVVkQIL5JMb3nqGu1MTN4K3EC0j/MEbSQCGTVgri4TFuyFqHAW
BIRVCWdlFioHRWC7kp7T1JMjaObMauSTZhViezHS9V1fIslGngxN+2njDsVF/lC0
0ldEJNkd06Y02nhoOGm8m3WMeTXn78/XpB5def1ud30aXdA6KDekI+vCS4CG+t53
GhPy3xzE12p/YeDzDAfGnddArM1ZDDS1cIxZ/Wr9w25aTxYnhv9E6jqhUgxQkOl2
boyT9ljRF53cUw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:52 2026 by rpki-client