Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
File: NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json)
Hash identifier: ZgSkKyVbHNnnkbZanS8gSKkeikPxeraVXw3NgWot3B8=
Subject key identifier: D3:BB:6E:46:89:10:60:C8:FA:B3:03:5D:CE:F9:6F:71:D5:6E:B5:FF
Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Certificate serial: 019D2960811CB7CD8D024842C003E5641C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:01:23 +0000
Manifest this update: Thu 26 Mar 2026 09:01:23 +0000
Manifest next update: Fri 27 Mar 2026 09:01:23 +0000
Files and hashes: 1: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: hdrWGZQEjtGc+jf0gl7nkHugyEXaTFG2q/hYP3oMOpM=)
2: h0Ifd57oi9lfBeUdeRd9nSCgSg8.roa (hash: kiI/t9Fma+sRPCboiwT26YcfI7j4ilrF6LxmsduO9hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:81:1c:b7:cd:8d:02:48:42:c0:03:e5:64:1c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Validity
Not Before: Mar 26 09:01:23 2026 GMT
Not After : Mar 27 09:01:23 2026 GMT
Subject: CN=d3bb6e46891060c8fab3035dcef96f71d56eb5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:65:7e:ca:f5:2f:f6:42:34:95:9a:68:aa:
ff:46:d7:fb:d2:27:65:8a:65:e0:d9:52:0e:d8:b1:
79:9f:7e:bd:cc:e0:74:40:32:7c:8d:6b:97:f2:b5:
c2:5d:1a:60:b3:a1:33:4e:50:ee:43:99:1f:56:6e:
8f:8c:24:0b:ae:83:76:67:91:2e:0f:7e:91:57:56:
c9:93:c5:4a:c7:3b:c2:83:59:53:20:1e:95:23:f2:
ab:19:a4:c6:c2:c0:ce:d1:36:ed:1c:43:ce:0e:19:
0d:81:68:8f:ca:ef:75:6a:cc:a0:70:87:ee:22:a3:
cd:3b:84:10:0f:5d:93:51:c4:a9:23:2c:f9:99:18:
b9:18:cb:5d:47:72:19:e6:c6:0a:1d:a0:89:4e:ca:
b2:53:83:74:99:c1:d4:68:81:dd:0b:f1:cf:31:7d:
d9:d6:3a:9d:2a:18:e2:00:2e:e2:16:87:cf:bb:39:
34:ff:ce:6b:3c:2e:e0:4b:31:6b:bb:05:47:57:05:
9d:e0:43:09:2d:92:60:b8:0a:28:6c:42:cd:7c:c1:
32:97:54:46:50:04:e9:6a:25:04:86:2a:dd:a8:f7:
30:3d:16:8c:50:42:00:e0:08:16:7a:36:07:ca:1e:
7f:ca:c8:26:19:7e:fc:02:76:99:02:f2:f7:9a:fe:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BB:6E:46:89:10:60:C8:FA:B3:03:5D:CE:F9:6F:71:D5:6E:B5:FF
X509v3 Authority Key Identifier:
keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d4:1c:2b:d9:73:d0:11:7d:3d:bd:26:93:78:d6:49:8f:1c:
08:5f:e4:a8:36:9f:26:d5:10:6f:15:4d:9f:12:b1:0b:1f:61:
6f:01:c9:32:ae:4e:5d:7a:ea:8f:66:ec:b2:47:00:07:a1:e7:
bb:73:57:5a:1c:a8:a8:5b:a1:4b:fa:f6:59:03:90:58:e1:26:
8f:a5:5b:e9:7d:d7:8f:b2:0d:d9:a6:8d:82:19:7f:15:1e:b6:
38:04:8d:4a:f2:69:42:0c:b3:3c:95:4a:0f:97:28:24:3d:8d:
0f:8e:39:34:ea:0f:92:fa:f1:d5:3f:87:d3:bc:09:f0:01:89:
13:4b:6e:9f:24:ea:dc:d7:37:8d:ae:41:e1:06:b8:ef:7d:c3:
93:d2:56:31:00:d1:c1:3a:37:9f:07:74:e0:3b:90:66:bf:fa:
d1:ea:9a:5d:2e:69:f1:87:67:ea:28:ac:8c:24:e9:c1:3e:95:
a4:22:95:cf:dc:57:ad:08:06:fe:c3:88:9d:65:74:0c:27:3f:
db:64:b4:14:63:96:17:d5:98:96:17:0b:78:15:08:bb:23:0b:
15:e7:d7:b5:e2:a7:ff:73:58:b0:bd:32:7b:5a:e1:77:8b:f1:
2a:c7:8c:ae:b7:d2:65:ee:81:37:9c:a7:1e:fd:4d:21:bd:e0:
ec:88:a5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:38 2026 by rpki-client