Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
File: NQtAztNuMfkF4abo4DxiHp-_yyk.mft (raw, json)
Hash identifier: rpQHoLpEHsWsTglS1r7AUcAi4AspYLDrdRBzx4SO2JA=
Subject key identifier: 07:08:62:1A:4F:1D:B1:7F:A9:A6:81:19:B1:19:AD:E2:2E:73:B1:25
Authority key identifier: 35:0B:40:CE:D3:6E:31:F9:05:E1:A6:E8:E0:3C:62:1E:9F:BF:CB:29
Certificate issuer: /CN=350b40ced36e31f905e1a6e8e03c621e9fbfcb29
Certificate serial: 019D2A3BE42F6C91CC4CAB2F11AA6BD66FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
Manifest number: 15C5
Signing time: Thu 26 Mar 2026 13:01:01 +0000
Manifest this update: Thu 26 Mar 2026 13:01:01 +0000
Manifest next update: Fri 27 Mar 2026 13:01:01 +0000
Files and hashes: 1: FGksGgzRp3dqx5JNslhPDHOeSF8.roa (hash: Ae+SgijVIMWeitkLixTQZhBAwcIx6R8bn51UQHedapk=)
2: NQtAztNuMfkF4abo4DxiHp-_yyk.crl (hash: O17z05dklq8GObyHRzCUXsVfzKjZcow3tPj1uXJ7ljI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:e4:2f:6c:91:cc:4c:ab:2f:11:aa:6b:d6:6f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350b40ced36e31f905e1a6e8e03c621e9fbfcb29
Validity
Not Before: Mar 26 13:01:01 2026 GMT
Not After : Mar 27 13:01:01 2026 GMT
Subject: CN=0708621a4f1db17fa9a68119b119ade22e73b125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2e:f4:bd:dc:3d:e2:15:fe:20:b8:07:30:30:
66:27:36:34:28:dc:80:5c:88:2a:6a:40:3e:cd:3c:
c1:62:02:69:1e:a6:4e:f0:a9:4f:21:c7:8e:be:5e:
4a:16:49:3c:3a:d9:b9:80:7e:a1:e3:47:56:01:51:
5e:9e:b3:96:84:6b:35:62:3d:09:f4:88:6e:94:2d:
47:7d:e8:94:9f:17:98:85:2e:f5:5e:20:62:fd:1a:
5a:e8:b5:08:e8:a0:4a:12:aa:dd:e0:f1:8a:a1:c1:
c2:e4:43:99:33:67:6c:88:55:4d:5a:96:cb:52:74:
2c:28:23:15:85:e7:39:49:41:f8:35:77:7b:21:a8:
5b:bb:5f:18:10:6d:c2:21:62:3a:3e:f2:e1:28:2b:
53:38:53:11:e7:a4:de:3d:b4:99:34:1b:80:fc:8a:
09:59:47:66:26:f0:7c:a9:3a:0a:17:c7:fd:9c:eb:
60:e8:eb:e9:31:53:a7:29:30:3a:c4:1c:7f:8d:41:
08:be:34:e5:70:5d:aa:02:1a:db:f0:51:97:f4:0f:
eb:18:64:62:14:07:78:d5:c7:5d:7a:61:89:f3:70:
63:65:d0:ac:8a:4b:96:b8:a4:03:b1:f9:27:e3:76:
ea:98:5f:9d:39:00:7f:57:de:fe:fc:f3:1a:d3:93:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:08:62:1A:4F:1D:B1:7F:A9:A6:81:19:B1:19:AD:E2:2E:73:B1:25
X509v3 Authority Key Identifier:
keyid:35:0B:40:CE:D3:6E:31:F9:05:E1:A6:E8:E0:3C:62:1E:9F:BF:CB:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2b:b6:2d:92:5b:22:15:21:93:44:7c:b7:e0:46:43:23:7c:
56:ae:ba:88:6e:96:c2:3b:ce:39:ad:14:ca:ab:53:82:4f:d4:
26:1b:03:c1:84:8c:7d:68:6f:50:ae:e0:88:ac:9b:40:8d:15:
88:39:95:ef:cc:29:b3:ea:29:51:20:d8:eb:21:d1:d2:6a:39:
fc:8b:9e:3e:c2:46:a6:e5:47:5f:99:ef:81:e3:52:45:97:ab:
da:43:d4:08:46:80:05:7c:e9:92:55:af:51:fe:5a:eb:69:1e:
bd:75:8b:40:83:f5:7f:07:19:2a:e9:a8:0f:65:aa:2b:c7:ae:
70:10:8e:4c:a9:cd:f3:c2:e6:b3:ec:7b:48:a0:b6:ac:5d:0f:
64:86:01:26:8c:7d:75:f8:5c:3f:70:df:93:20:72:b8:13:55:
66:94:09:79:d1:44:f1:3b:c9:5c:8a:58:57:58:32:bb:a6:6a:
3c:3d:4e:23:de:5b:9a:90:21:79:f1:48:c6:c2:aa:e4:30:97:
ec:4b:96:b9:04:e4:1c:c2:05:51:d3:ed:e0:7c:16:3d:a3:ab:
69:da:c4:a2:bd:4a:6e:c1:4d:85:cd:57:e3:b7:75:7c:18:e6:
ea:b5:67:b7:7e:78:1d:26:71:35:d0:ab:35:03:d9:94:94:3f:
ce:60:72:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:01 2026 by rpki-client