Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
File: NLqcIjJB64DivHGFO7fS5YKGvdM.mft (raw, json)
Hash identifier: Lb55JA2EVYqIBh5Zf4UuSOG1jw4bwQNExWUN2k93JxE=
Subject key identifier: 5D:35:88:C2:29:6C:7B:46:CE:62:89:9C:3F:11:B8:20:37:77:93:9E
Authority key identifier: 34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
Certificate issuer: /CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Certificate serial: 019D27A8DB4ACE2A84FB05E536BFD4E2FACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 01:01:10 +0000
Manifest this update: Thu 26 Mar 2026 01:01:10 +0000
Manifest next update: Fri 27 Mar 2026 01:01:10 +0000
Files and hashes: 1: 3WJjV42gX3UcYyB9uPxn6ReQPNE.roa (hash: xdAcfOJKPu9GkR2yJdt8tSxgO0xjvWuS026sQ/93JIc=)
2: NLqcIjJB64DivHGFO7fS5YKGvdM.crl (hash: WPNLdUARDyZMw4aeo1OPhrLPlL56jmGP0oYzj7nhHN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:db:4a:ce:2a:84:fb:05:e5:36:bf:d4:e2:fa:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Validity
Not Before: Mar 26 01:01:10 2026 GMT
Not After : Mar 27 01:01:10 2026 GMT
Subject: CN=5d3588c2296c7b46ce62899c3f11b8203777939e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:65:ac:d9:c4:a4:a0:9e:5a:8a:34:c2:71:
f1:59:92:64:99:9e:e6:04:04:cb:56:65:97:ad:66:
41:67:2e:04:b8:bb:6c:3e:2c:51:54:0d:fc:e9:3f:
91:77:99:51:cf:aa:2a:49:d1:3c:5a:83:66:c2:af:
44:82:48:a9:da:5b:2f:d3:97:48:c0:39:2a:96:06:
24:27:02:55:39:c0:0a:7b:33:e1:d4:91:ec:bb:8a:
6a:e7:ed:83:35:8a:29:74:94:b5:7b:38:3b:e4:dc:
ae:8d:57:53:30:8a:0f:72:98:54:30:34:2f:b2:71:
f2:50:37:13:d3:85:fd:b1:1c:61:d4:28:ca:b1:60:
68:5c:21:ef:43:73:0c:0f:79:4d:90:08:fa:aa:4c:
aa:7e:68:57:f8:e0:59:09:3f:43:b8:57:76:47:91:
87:0f:28:52:19:b4:c6:1a:45:86:2f:d1:3e:a5:df:
72:73:c1:5b:3a:a4:5c:89:34:85:d6:d7:53:5d:2c:
7d:e8:04:c4:8c:5c:27:73:35:66:fb:a6:63:74:b5:
aa:68:0f:f0:11:de:31:b9:50:aa:55:8f:18:f2:4f:
74:c2:43:6f:c2:7d:f1:61:1e:51:bd:44:93:9b:ba:
c5:a1:bd:c0:34:dd:7a:58:03:2c:b2:7c:60:b0:92:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:35:88:C2:29:6C:7B:46:CE:62:89:9C:3F:11:B8:20:37:77:93:9E
X509v3 Authority Key Identifier:
keyid:34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bd:1e:66:4c:34:83:67:82:5c:bd:c1:66:b9:8a:80:af:26:
4c:dc:74:a5:4a:70:50:b5:9d:16:bf:37:51:aa:11:c3:12:a9:
aa:96:f3:ac:be:93:a6:7e:4f:5f:fd:9a:27:80:b6:61:4d:e2:
de:d9:ed:bb:7a:77:bf:e1:97:dd:87:71:53:7e:4c:ad:46:2e:
6a:9a:6b:b4:f1:93:73:d3:2b:58:f9:16:8a:16:20:75:d8:58:
e7:31:27:fe:2d:49:38:62:81:6d:4f:20:22:cf:30:30:70:32:
8e:f5:af:0a:4c:b1:d7:aa:ff:03:ec:38:cd:7f:39:f9:a6:1c:
99:39:43:79:ef:81:3a:3e:52:5c:c1:69:42:ec:4f:b5:be:a2:
35:97:75:1d:cd:14:e9:32:77:f9:0a:4f:ea:b2:28:90:63:3e:
db:2c:53:a0:65:f0:e4:a5:6d:7c:eb:01:3c:2b:b5:58:75:e7:
64:7f:42:e4:7f:f7:b4:95:20:26:6c:0d:a9:30:ae:e6:84:73:
67:7e:73:af:62:0f:70:23:fe:bf:b9:da:e0:4a:d5:94:3b:0a:
6a:74:a2:8e:42:25:03:93:82:ce:d7:cd:d8:b0:a0:2b:7a:71:
8d:5a:f1:2e:f1:5e:50:07:4b:48:37:6e:01:40:c4:f8:88:b7:
6f:f6:93:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:21:35 2026 by rpki-client