Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
File: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft (raw, json)
Hash identifier: Mt4Sun3jeA33w/FrCzGyIchSge4MZvc4OyrQoUbgZbk=
Subject key identifier: B7:16:CD:87:76:E0:40:8C:E0:43:EE:F1:E5:3E:66:46:43:E2:12:22
Authority key identifier: 34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
Certificate issuer: /CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Certificate serial: 019D27A8F6582989B519121FAB6699776715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
Manifest number: 131C
Signing time: Thu 26 Mar 2026 01:01:17 +0000
Manifest this update: Thu 26 Mar 2026 01:01:17 +0000
Manifest next update: Fri 27 Mar 2026 01:01:17 +0000
Files and hashes: 1: 95fE5XU1a1pGoSxnu5vxMKDbXJg.roa (hash: 4/Ix+l1myZu6RT/8dZ3jkzpVwV0AaDZm+INviGp4TeQ=)
2: NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl (hash: T0Hb/bGd+55m989bnULCFpOHob6rimVG58swUAe08tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f6:58:29:89:b5:19:12:1f:ab:66:99:77:67:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Validity
Not Before: Mar 26 01:01:17 2026 GMT
Not After : Mar 27 01:01:17 2026 GMT
Subject: CN=b716cd8776e0408ce043eef1e53e664643e21222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:67:7e:21:5a:bf:89:59:a6:d8:5c:12:c2:
f7:00:ba:20:ff:31:ae:35:6d:f8:e9:9c:ab:d6:4a:
88:75:c7:1f:8e:35:42:7d:fc:ea:2e:66:60:d5:61:
d1:46:16:e1:a5:81:93:c7:c2:5d:e6:6f:76:c8:46:
ea:96:b5:81:69:28:0e:cc:91:59:69:04:a4:48:c8:
9a:39:fe:1e:ea:35:59:49:41:4c:6f:61:92:45:bc:
38:ae:04:b1:d9:44:ef:e0:15:79:5e:54:fb:d1:8f:
ad:c8:e5:61:10:5e:18:3f:d1:02:aa:53:74:4c:ea:
10:84:12:9b:bc:90:4e:f2:b0:0f:4c:41:8a:66:98:
9a:38:84:ee:dc:5a:e0:3b:71:28:a1:f9:db:78:e4:
35:2c:77:a2:55:cc:65:96:3a:bb:2a:08:d4:c8:35:
e5:56:6f:b4:7f:80:c5:85:c2:2d:ce:b3:eb:07:bf:
54:f2:f4:0a:b4:12:8d:a1:f4:54:be:31:ae:08:46:
8b:f8:36:fe:ff:83:da:5c:49:0c:3c:01:73:b3:30:
4f:23:e6:8e:3c:5e:d2:ab:fb:f1:ac:14:43:7c:83:
3a:ba:13:3a:20:12:66:6d:1a:0f:7b:6a:08:f8:bb:
2c:ae:b6:a3:de:5a:bb:75:76:b1:75:1c:2f:07:4d:
ad:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:16:CD:87:76:E0:40:8C:E0:43:EE:F1:E5:3E:66:46:43:E2:12:22
X509v3 Authority Key Identifier:
keyid:34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:16:53:d0:a9:b6:c9:2e:98:0a:71:24:e2:18:53:7a:ab:3d:
6f:43:c8:4c:9d:59:69:fc:e9:55:90:dd:49:87:aa:b2:45:07:
fa:26:1b:b6:52:c8:7c:93:7b:ec:c9:47:50:7a:a4:e9:a4:f7:
55:d7:36:4c:0c:c9:05:a4:f4:3f:a8:ee:bf:b1:7e:b7:03:14:
18:e8:d6:84:67:4c:30:fa:80:ed:ea:48:7d:45:53:2a:07:91:
ce:93:8e:65:54:73:20:31:e6:cc:98:60:05:a3:41:08:2b:d0:
53:8b:88:62:50:ad:e5:1e:d9:6c:44:4c:7d:05:82:9d:80:e6:
b6:c5:d8:66:7f:98:0a:71:ba:d0:18:3d:45:ff:f1:6d:42:89:
cd:68:08:c4:0e:9a:74:ba:ae:0f:fc:ac:54:22:fc:89:87:22:
d5:3b:3e:61:36:71:1e:ba:5f:38:ba:01:d2:21:8f:b7:37:d7:
fc:6b:39:25:66:87:1a:bd:54:d5:7c:e4:19:c6:0f:62:7e:47:
5d:57:8b:2b:2a:0c:e2:15:58:1f:2a:86:9a:90:50:f8:c4:fe:
c0:df:f4:c6:d9:e3:98:83:e0:60:90:4c:62:5e:d1:3d:37:28:
90:d8:fe:73:25:06:51:b7:2c:47:53:47:76:ac:92:2f:25:75:
41:d8:34:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:37 2026 by rpki-client