Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
File: NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft (raw, json)
Hash identifier: dOScYVyE5UR2LtCNMoyjoQFrL5eE5An5yyomgVMN7iU=
Subject key identifier: E2:0C:47:C0:C1:D7:CA:96:63:06:3A:36:06:55:6E:84:2A:5D:38:29
Authority key identifier: 34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
Certificate issuer: /CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Certificate serial: 019D28BBD822F8FCE955A1301B3197E985E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
Manifest number: 0DFD
Signing time: Thu 26 Mar 2026 06:01:32 +0000
Manifest this update: Thu 26 Mar 2026 06:01:32 +0000
Manifest next update: Fri 27 Mar 2026 06:01:32 +0000
Files and hashes: 1: NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl (hash: zSoEl/Su2RMC5VtQ9rKNMtphNv8yENa3pIKZwBIEOSg=)
2: d0hB3sr_J40CjN3DPScI5WDQSFY.roa (hash: ZEZewkOpSdtKFHUVQXPwxArZxLY7Jpp1t6GgLUjAr+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:d8:22:f8:fc:e9:55:a1:30:1b:31:97:e9:85:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Validity
Not Before: Mar 26 06:01:32 2026 GMT
Not After : Mar 27 06:01:32 2026 GMT
Subject: CN=e20c47c0c1d7ca9663063a3606556e842a5d3829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:28:b1:0f:93:38:9d:2c:16:ee:f2:33:f2:
d1:d7:ab:cc:32:fd:ad:ab:17:d9:f2:1d:00:3a:e3:
69:a0:b9:03:cb:e0:4f:77:9f:98:81:64:a4:4c:7a:
84:67:10:fd:76:ee:26:d5:ff:e7:d4:c3:1c:e7:ec:
5c:10:48:cf:87:f4:04:7d:a0:35:41:90:90:00:09:
24:40:cd:6c:ad:cd:07:ae:1d:5d:66:c8:1f:de:26:
85:23:58:1b:04:3b:42:f6:5b:5e:3b:ad:77:fd:16:
db:de:15:b4:d9:8c:0d:03:9f:3c:9a:83:66:4e:7a:
d1:7c:b1:55:c8:6d:06:83:3a:d3:1c:29:d8:27:f7:
e7:5a:a5:1d:bc:ed:4c:72:26:4b:c7:a1:5b:6c:dc:
f3:9e:cc:93:43:17:a6:9b:4a:6d:6d:4e:5b:f2:75:
d9:59:db:fd:90:49:af:b9:9f:3b:4d:48:c8:65:f1:
4d:48:3e:17:e3:99:70:47:93:9f:3f:4f:fa:5e:e5:
a5:92:f5:a1:f6:a7:ec:2f:33:27:53:94:7a:62:c1:
78:e8:35:b3:fe:22:46:aa:5f:89:ae:4d:ae:1f:5b:
3a:b8:c7:df:6b:c0:8b:7a:21:70:b7:c1:61:9f:20:
46:09:63:ed:fe:1d:2e:a2:36:14:f2:71:9a:a2:a9:
36:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0C:47:C0:C1:D7:CA:96:63:06:3A:36:06:55:6E:84:2A:5D:38:29
X509v3 Authority Key Identifier:
keyid:34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:66:9b:dd:8b:4f:1b:85:80:ee:3b:f3:c7:a3:18:e5:75:20:
e8:75:d7:25:ac:09:a5:fc:be:35:77:66:5a:a8:69:2f:f2:20:
a7:79:fe:f3:57:75:b9:5d:ee:10:b7:0e:4a:c3:99:46:6a:af:
06:9d:c9:55:62:ef:9c:fd:f4:a7:4c:7b:d1:88:41:42:97:53:
8d:60:89:d0:db:9b:4d:7f:92:07:84:c5:3d:15:f8:8c:3d:35:
c6:c6:6f:ab:f9:04:25:b8:81:41:99:54:c0:58:2d:3d:5b:f5:
5a:88:12:6f:ed:62:88:3b:a4:c1:17:0b:d8:15:a7:78:7f:48:
8b:4a:7f:ce:cd:cd:9a:2e:83:36:c8:83:ea:d8:cd:ec:13:35:
ce:be:5a:80:92:5a:61:62:6d:0b:e3:3b:c6:84:db:ad:e1:f9:
9d:a7:00:e8:a5:e6:7f:95:7c:30:bb:4d:19:ae:50:ed:7e:5a:
34:41:d5:7c:88:3c:db:8a:15:83:01:8a:2c:25:b3:42:a5:61:
2f:7e:b5:6f:c1:4b:38:c9:e2:ce:c2:4c:a1:49:d9:71:3e:fc:
94:4e:4a:3b:49:ab:e0:96:a4:3b:59:11:8d:16:60:ee:50:56:
79:79:7b:97:02:82:64:a2:c5:ce:05:f1:47:ca:93:1c:56:22:
32:b8:8a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:20 2026 by rpki-client