Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: Q5vqpXs+n3liz8GNLS7e7tjX1hl+ow7JVAiPenN5pTw=
Subject key identifier: D1:B5:94:AE:76:6B:A9:E5:92:7E:F5:19:AC:22:7C:D1:80:44:93:6E
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 019D2A72BE772FCD63A926532070CD267AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 14:00:56 +0000
Manifest this update: Thu 26 Mar 2026 14:00:56 +0000
Manifest next update: Fri 27 Mar 2026 14:00:56 +0000
Files and hashes: 1: 7KmiHeTQXRSzn1pRizVCv_INZ1Y.roa (hash: ovjEW9N/bVELgNzaDJYrGYeSdyjGcKIXWsIKwlhcxp8=)
2: 9oyInYSuVnIf7zTVtB6sDcf1XhI.roa (hash: l1RSHVmCnQUWX+RzMHEaP0MGuYdTYp413ef1exVSOrk=)
3: AWHMjmic5cEKV8bVpt2xGeWTmJw.roa (hash: iFYqoLqjFem2aNEBBJqDmHNGhtphtI842p4krYOCFlM=)
4: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (hash: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc=)
5: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (hash: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk=)
6: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: xvdf77+1Bi92WJ7gBV4J0qPJTCMcIWEuKVw5f29mdWw=)
7: opbJdENGQKlgxiw3UzXsb5urRe8.roa (hash: 6DXHz5IMpgCFLQr3dZW4IiHNXv7NbkZD9862/Rjdnts=)
8: qUTKfMDduS5G83IwddW0Srvow3k.roa (hash: cOBAb4cGXrEFXoWSmcqXtalPKxlVlDLrCL2/MXUlMlg=)
9: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (hash: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:be:77:2f:cd:63:a9:26:53:20:70:cd:26:7a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Mar 26 14:00:56 2026 GMT
Not After : Mar 27 14:00:56 2026 GMT
Subject: CN=d1b594ae766ba9e5927ef519ac227cd18044936e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:1f:28:1b:6b:d5:4f:b2:7d:65:52:84:86:
4f:53:50:e3:e8:56:dd:cb:6b:66:36:45:ed:90:49:
40:e6:7a:9d:69:69:15:0e:d1:b2:a7:b7:cc:86:90:
a6:9a:b4:8c:4f:91:f5:6c:02:e9:0d:79:7c:be:43:
8a:76:98:cb:20:04:4d:15:0d:47:6d:7c:ae:32:d0:
de:50:17:bb:f1:2f:7c:35:e7:3b:34:4f:38:ba:69:
d1:12:3f:19:db:61:72:7d:85:69:28:fa:67:9a:38:
e8:71:9b:b1:21:73:42:76:6a:3e:db:76:45:1a:91:
20:7b:9a:0a:4d:54:ad:70:f6:43:19:f2:36:7c:2b:
5e:93:43:87:d6:65:b7:cb:11:99:f5:41:bd:ab:5c:
57:9c:46:47:14:94:3f:ea:b4:65:b8:93:71:ef:3c:
b2:7b:f6:fc:f9:cd:8e:02:ae:7d:1b:ba:52:ae:92:
61:7f:d2:05:11:c1:45:ad:a2:6d:aa:1e:33:18:a6:
0a:b9:20:86:b4:25:25:de:5d:d3:e3:44:73:20:0f:
0a:6b:3c:5d:c9:f8:31:9a:27:ef:25:ad:22:ca:3d:
9e:a6:bd:3d:f0:31:93:13:59:22:2d:9b:76:47:af:
8c:19:4a:f8:ae:f8:1e:13:6d:ac:3b:92:16:de:6b:
97:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B5:94:AE:76:6B:A9:E5:92:7E:F5:19:AC:22:7C:D1:80:44:93:6E
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:37:e7:f9:70:28:bc:d3:47:c1:aa:82:69:5c:1f:e1:b6:16:
e6:76:9a:db:fc:68:c9:56:12:91:27:20:21:10:d3:ad:2f:16:
6c:a2:c6:54:d6:18:8c:ff:90:cc:de:5c:b2:6f:00:c2:44:fc:
35:e4:c9:d7:34:0f:38:a4:34:f3:71:39:52:a1:a1:74:02:2b:
6e:a7:b5:5a:8c:0d:b7:72:a6:79:d2:f7:42:22:70:60:ba:91:
38:de:aa:cc:3e:9a:5f:c3:59:71:db:15:66:e7:06:21:70:1a:
07:64:db:85:16:58:f5:23:c2:5c:4f:49:ba:c2:7b:e6:c7:0f:
ca:5f:ed:6c:6c:bd:30:ee:e2:fd:df:61:04:36:00:12:6f:33:
e8:20:ef:3e:ce:8c:38:d2:b6:5e:c3:74:43:7c:9f:1e:c4:37:
02:bf:86:3b:5a:c3:ae:a7:4e:00:ff:8c:a8:d8:8a:6c:0f:aa:
a8:e0:58:cd:a3:03:c7:c2:3f:e1:db:3f:80:d5:f0:d5:69:54:
34:45:f2:d5:44:c4:31:66:46:84:3b:ae:f9:30:1a:fa:85:2a:
60:b6:92:bb:e2:9a:1b:fc:47:2d:19:bd:df:3b:2b:e7:b5:06:
eb:97:fa:1b:cf:1b:0c:99:2a:ab:b9:69:73:32:b0:7b:8c:28:
8f:74:25:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:54:34 2026 by rpki-client