Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
File: NW5HRHMdpE8I-l6SxesqR01JqJI.mft (raw, json)
Hash identifier: HHxHVOCCbd1J4LrBPJB5Cli4UR2/Ow30WGSTmPJfOd0=
Subject key identifier: 79:F3:40:AF:D4:B0:55:6E:E8:41:C1:23:9F:DB:31:2D:D7:16:CB:6C
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial: 019D284DD81C413E7480DF960C9D2B42EE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:01:23 +0000
Manifest this update: Thu 26 Mar 2026 04:01:23 +0000
Manifest next update: Fri 27 Mar 2026 04:01:23 +0000
Files and hashes: 1: NW5HRHMdpE8I-l6SxesqR01JqJI.crl (hash: gUZnic36olokV2vBEdig7UclAmUhw29QCNE2GCyS2Xo=)
2: fk9U3XR8wWwd2opanzwEAz6eKk4.roa (hash: 5EeRjXWRWUv9RoV34Pw35rxYHtcF/8u2AEnciChzLxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d8:1c:41:3e:74:80:df:96:0c:9d:2b:42:ee:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Validity
Not Before: Mar 26 04:01:23 2026 GMT
Not After : Mar 27 04:01:23 2026 GMT
Subject: CN=79f340afd4b0556ee841c1239fdb312dd716cb6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:20:a5:f6:a3:94:4d:b0:24:9c:d7:09:87:
9e:4c:19:ae:88:88:ca:31:4e:e5:b6:a6:86:9a:6a:
99:7c:f1:f6:37:18:4d:03:08:94:8e:6f:b4:08:71:
d4:8d:ff:56:91:7b:e9:3e:0d:f8:66:a7:57:84:1f:
c2:65:e7:92:95:88:d9:ed:63:ed:79:db:b8:d0:6a:
41:f3:34:bb:d6:c5:07:a3:96:27:ee:af:b6:9d:df:
dc:7a:37:31:ee:27:31:6a:93:be:24:a7:c0:bc:88:
2e:8c:ad:3f:95:a9:bf:cb:88:fb:d8:37:58:17:d7:
29:49:c3:6b:54:a0:86:f6:d1:98:51:4c:6a:79:c6:
1b:23:d5:f3:69:80:0d:57:b8:4a:25:ab:28:97:53:
16:02:b2:2a:2e:7a:24:1e:40:0e:d5:51:9e:36:92:
26:4e:56:65:24:cb:3d:f0:41:19:c8:b0:82:db:0e:
b6:cc:ea:aa:14:7c:70:12:6e:5a:ff:8f:21:e3:e8:
36:dc:90:6c:c3:99:f0:24:59:b8:fe:9e:65:12:18:
1d:c6:9d:98:e4:b9:1e:99:13:b8:ec:8d:37:06:df:
4f:ca:6b:19:f6:43:42:70:a9:bd:3a:c0:90:b3:e8:
e8:5d:98:32:83:13:ae:f7:82:23:20:0b:2a:03:4f:
fe:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F3:40:AF:D4:B0:55:6E:E8:41:C1:23:9F:DB:31:2D:D7:16:CB:6C
X509v3 Authority Key Identifier:
keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fb:39:5b:3d:12:86:69:0f:e9:4d:af:53:f5:0d:e6:7a:28:
ea:74:4e:2f:87:06:e2:83:dd:58:96:cb:72:0c:0d:94:66:80:
aa:3f:85:73:04:23:d0:4d:bf:1f:fd:77:f0:5b:bd:7c:4e:e2:
0d:ed:dc:ca:0f:53:3a:e2:44:16:67:ac:cd:0f:f3:46:12:d8:
03:03:1f:e5:56:fb:93:b8:22:9f:f9:2b:ca:1a:f9:bc:ea:93:
30:0f:48:58:70:69:5c:8f:63:0c:44:8a:a0:c8:85:26:7a:57:
3a:0c:a7:6e:cd:7b:df:03:29:bf:80:58:1a:d0:42:13:46:73:
18:64:c5:b0:8b:45:58:28:8e:5d:64:76:0f:22:3b:e7:12:af:
80:0b:5b:3c:fc:ba:de:1d:16:fd:b8:98:7b:93:3d:8c:b6:f9:
db:96:dd:de:c0:74:e1:da:80:9f:af:92:24:f2:4d:b3:86:75:
57:f1:2a:c7:6a:90:cf:6d:a0:0d:77:11:8a:fe:77:43:fd:4f:
d0:5c:7c:4a:ba:cc:1f:63:2e:0e:83:bc:0f:1a:40:89:ca:f9:
aa:0e:16:ab:9a:b4:66:18:0e:f3:08:14:6a:4f:8e:ed:81:cb:
5e:89:34:b7:77:05:39:5a:ed:97:2c:92:1a:91:b7:9d:fc:40:
f4:b0:9b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:24:27 2026 by rpki-client