Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
File: NM3lphFF05kuzN7Ht_C4fVZr3co.mft (raw, json)
Hash identifier: 7lSZPoZ04pBIPVhGRH32KBowyKMDHo4d4f1xkFzerNo=
Subject key identifier: A7:D4:70:4C:7F:3F:D3:AC:17:6C:26:FD:71:4D:1D:4A:76:EB:72:B8
Authority key identifier: 34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
Certificate issuer: /CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Certificate serial: 019D2AA9249D8FA23452C87B61DC99B0E0EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
Manifest number: 011D
Signing time: Thu 26 Mar 2026 15:00:21 +0000
Manifest this update: Thu 26 Mar 2026 15:00:21 +0000
Manifest next update: Fri 27 Mar 2026 15:00:21 +0000
Files and hashes: 1: 1-IJA-q45HspUpMubIpcnRXcTB8M.roa (hash: JXJRmj3ORBVNFKxWPy8ORXK6nbNNUCsakv/wzqIn0g0=)
2: NM3lphFF05kuzN7Ht_C4fVZr3co.crl (hash: S+Lv8AH3iPX+rilwhyz96M1yTpgEpmDPHHHpnsEVXUA=)
3: zbYhjs52NqgXZeFMN5zptwYaiMY.roa (hash: KsKrXGzHhE5GBB49wXeoqkTWzCeO3+7rNRAxePZu7qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:24:9d:8f:a2:34:52:c8:7b:61:dc:99:b0:e0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Validity
Not Before: Mar 26 15:00:21 2026 GMT
Not After : Mar 27 15:00:21 2026 GMT
Subject: CN=a7d4704c7f3fd3ac176c26fd714d1d4a76eb72b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:21:d5:cd:4d:a7:16:24:d5:59:77:3f:b7:
51:bb:8d:69:5e:31:d8:9a:d3:9d:1b:3e:17:78:a3:
f9:15:83:aa:d7:f3:a1:69:8b:ba:91:a4:87:ca:47:
a1:ba:22:4b:9d:5c:c5:be:cc:1d:c1:f8:5c:1e:03:
cc:a3:db:77:53:1a:14:d4:95:d8:0b:54:58:b2:26:
72:c4:be:db:9d:3d:b4:6e:ad:0d:9f:c6:62:7a:de:
9e:11:63:41:a5:60:99:a1:6b:34:7d:ba:6c:bb:bb:
ef:f0:29:fb:cf:2d:0b:c6:d3:c5:e7:3f:d0:3a:ca:
41:b6:65:71:98:70:ac:44:ff:2f:e2:7e:6e:50:a7:
b9:ae:cd:ec:43:82:e0:c3:75:44:f9:41:99:93:15:
c5:a8:0c:25:a9:ff:19:c2:05:d9:54:b5:85:14:2c:
8c:ba:e6:00:52:26:d6:87:83:60:9f:b8:d8:26:d4:
1d:68:e3:0b:90:cd:af:e5:a3:8a:d2:75:c6:8f:4b:
6d:d1:83:fe:bd:c1:34:8f:17:b6:de:84:13:6f:10:
db:64:e3:70:e8:10:ab:04:8f:89:76:7e:b6:52:cb:
b3:08:15:7c:ec:09:c8:db:7e:6a:a1:ad:bc:1e:b0:
8c:32:78:6f:40:53:eb:37:91:2d:46:07:0d:6b:6c:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D4:70:4C:7F:3F:D3:AC:17:6C:26:FD:71:4D:1D:4A:76:EB:72:B8
X509v3 Authority Key Identifier:
keyid:34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:50:2c:83:14:52:3d:a7:cc:aa:2d:91:43:5d:4d:99:6f:af:
d2:6e:33:98:39:d4:d2:50:5f:c9:67:a3:71:67:df:13:09:74:
9e:94:35:c1:da:82:b3:bc:40:2d:38:37:9c:6d:d1:a1:39:f2:
bf:c1:26:f5:42:14:1f:97:02:51:ed:6f:33:97:35:cb:86:15:
46:27:b2:cb:c8:41:e1:d6:a2:96:cf:86:f5:82:79:19:7c:91:
c8:ee:33:5a:06:82:6e:6f:be:ec:01:5b:2a:9d:24:ed:dc:55:
81:d1:18:ac:e3:fd:91:d4:94:4a:e0:d2:8c:ad:63:f3:dd:70:
bb:97:6e:9d:9a:b4:c7:c4:ef:b6:62:2f:5f:a9:0b:69:b5:90:
7e:81:a2:92:6b:da:83:b3:26:bf:d8:26:9e:03:80:bc:ee:fb:
89:fd:09:ee:b3:1b:64:24:f4:f6:1f:18:38:31:46:09:95:5b:
a3:f0:79:74:bb:d9:38:c4:dd:b9:9f:e7:b4:2f:11:16:2b:a6:
ab:15:03:0d:80:e8:d3:68:bc:e9:ef:ee:d3:c5:0b:2e:ea:d1:
19:21:66:8d:a0:38:50:a4:73:b6:96:db:b1:35:05:40:f6:fe:
af:46:c9:19:18:40:30:bf:00:56:14:98:2f:af:22:4b:a4:46:
bc:1c:74:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:11:28 2026 by rpki-client