Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
File: NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft (raw, json)
Hash identifier: VceUkS8T17uUndIKGGL5ums1CYvoi09smoEKr/dZd4E=
Subject key identifier: 04:C3:D9:89:F2:75:79:FF:A3:76:17:F8:D9:07:1A:77:6E:DC:F3:13
Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
Certificate issuer: /CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Certificate serial: 019D2696036BE8C81E6713C7C13C61D5BDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
Manifest number: 06E1
Signing time: Wed 25 Mar 2026 20:00:58 +0000
Manifest this update: Wed 25 Mar 2026 20:00:58 +0000
Manifest next update: Thu 26 Mar 2026 20:00:58 +0000
Files and hashes: 1: NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl (hash: yHimM99H8dnxxG9cbt7SNbfVnmQ3WfWlkSVk1m/+vVU=)
2: hWIPowhULMETPFMJ5-_H_ZNBRis.roa (hash: BNHF5BsMBRRalDPKnOb0xVzO7bSBgF7JDrPzIyr5BeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:03:6b:e8:c8:1e:67:13:c7:c1:3c:61:d5:bd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Validity
Not Before: Mar 25 20:00:58 2026 GMT
Not After : Mar 26 20:00:58 2026 GMT
Subject: CN=04c3d989f27579ffa37617f8d9071a776edcf313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:69:f6:16:4e:8d:a2:8b:cf:ff:ba:8b:14:
39:8b:40:96:29:e3:31:11:49:68:f3:9a:52:e5:1c:
0a:a9:b9:ec:c9:cd:6f:ee:76:6f:59:ba:fc:c0:26:
80:af:67:8b:06:90:eb:4f:4f:ba:af:d9:3e:b6:e5:
9a:c7:a1:28:a5:ff:1d:8c:94:ff:03:8c:ac:bf:37:
c5:a9:95:2f:f2:c7:23:45:55:b5:60:c6:6f:8a:c9:
34:e3:0f:b7:f7:a8:af:0a:2a:17:05:e3:19:fd:a6:
1d:38:9b:56:c4:6b:fa:59:69:43:50:f2:a1:76:eb:
08:a6:07:dd:98:2c:2b:d4:88:b8:62:7b:6f:29:8b:
33:f2:9f:4d:c8:df:d0:4f:aa:15:7b:1d:6c:68:02:
ad:5e:47:25:1c:a5:56:43:29:19:ac:18:29:9f:25:
ef:c1:4a:0f:ad:08:80:64:22:1f:7a:6a:de:88:41:
ac:ae:96:81:95:46:0c:06:a3:2f:54:09:0a:9d:b7:
e4:60:77:1b:63:2a:48:ef:f5:0c:80:52:83:d0:41:
91:eb:80:fa:24:e7:c3:2c:8d:91:d2:ea:20:bb:e7:
17:b3:91:9d:d6:ba:d1:bf:10:77:ab:1d:3d:56:0f:
6a:fa:b2:51:54:12:fc:0c:eb:16:db:1e:79:57:e7:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C3:D9:89:F2:75:79:FF:A3:76:17:F8:D9:07:1A:77:6E:DC:F3:13
X509v3 Authority Key Identifier:
keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f2:ba:a8:38:27:5f:19:54:bb:58:e2:67:f9:88:6f:9a:79:
e1:f7:fe:eb:6e:35:9f:e7:39:21:25:46:6b:38:2d:9b:33:f4:
ca:a1:4d:d6:1a:01:a9:fa:77:2b:d5:96:24:bf:cd:ab:f4:e8:
3e:af:a4:1d:ab:1e:26:7f:c3:af:eb:17:2e:08:b3:73:df:f1:
68:f6:de:23:f9:85:b7:eb:8f:12:66:98:4d:77:50:92:5b:77:
c6:32:3f:44:8f:6f:8c:15:d4:06:cf:e9:73:39:17:84:cb:56:
98:4b:e7:98:f1:b6:c2:e0:1b:d3:1b:f0:fd:71:1b:0a:02:9b:
0a:26:29:42:85:1d:d3:f5:2a:85:78:ae:28:02:13:9a:10:bd:
dd:65:68:24:78:54:fa:2a:09:cb:9a:2f:b4:bf:c9:8a:3d:2b:
36:af:95:44:53:89:51:34:6a:ca:77:b4:96:69:c1:d3:48:7e:
12:a0:98:02:d0:91:ad:9b:5d:4b:35:9b:96:1b:ee:9b:40:6d:
a7:58:94:f2:2c:db:12:05:47:1b:e5:6e:d8:78:3c:f2:15:23:
e9:3c:cf:a8:21:9f:39:71:31:ad:90:f8:61:2e:d5:4b:82:bf:
03:fa:41:5a:87:11:4a:df:ae:4c:eb:3b:dc:af:a5:0a:6a:c9:
80:5c:e3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:16 2026 by rpki-client