Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
File: NLjV-ROFaLUssJNuK0yU93zleuw.mft (raw, json)
Hash identifier: ey+8FBf9ouChU4OIbh5geFGhn5Q8eJvD1JAmENHSP3E=
Subject key identifier: 2C:40:83:09:D6:8E:E4:61:45:B9:76:DB:89:1A:3A:6D:6B:D2:CA:F0
Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
Certificate issuer: /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Certificate serial: 019D2961557C0DA271CFED95DCA94B792A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
Manifest number: 15C1
Signing time: Thu 26 Mar 2026 09:02:17 +0000
Manifest this update: Thu 26 Mar 2026 09:02:17 +0000
Manifest next update: Fri 27 Mar 2026 09:02:17 +0000
Files and hashes: 1: 2qExfB805-R2i4AdQ2Nza5P_ogA.roa (hash: I7bRoDVEoiwuKeHZcRlXKBPzc5ivPBkAnRRWojlZ0Wc=)
2: NLjV-ROFaLUssJNuK0yU93zleuw.crl (hash: IK5WJYKlMejyUjc92kwTTLpQ/N+JMpfIyOTpGpMQjq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:55:7c:0d:a2:71:cf:ed:95:dc:a9:4b:79:2a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Validity
Not Before: Mar 26 09:02:17 2026 GMT
Not After : Mar 27 09:02:17 2026 GMT
Subject: CN=2c408309d68ee46145b976db891a3a6d6bd2caf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:19:76:47:4f:22:d9:f2:b1:63:4e:7c:16:
93:4e:20:2c:60:45:6e:f1:93:0c:77:8a:d9:81:e6:
78:89:0d:42:f1:23:81:14:89:05:35:c4:a5:7a:25:
ba:11:94:4d:b4:90:db:3a:a5:77:04:16:4e:bd:d1:
28:ff:66:38:6c:86:b8:11:eb:84:11:80:bb:00:3d:
90:34:46:39:1a:f7:aa:52:4a:a6:f6:d6:5a:b7:ef:
01:4d:33:c5:45:ef:d9:72:d8:ee:c1:43:77:89:c2:
69:e7:01:4c:4b:24:97:d4:e5:71:3e:2a:3f:83:96:
11:18:03:f1:c3:89:e0:5c:5c:4d:d5:2a:25:91:02:
78:fd:58:11:66:14:fe:1f:91:b8:ff:0e:87:ba:02:
eb:b8:f6:cc:0a:83:ec:f7:cf:33:72:bc:ca:f5:1b:
2d:81:bc:c2:29:30:a8:88:d6:86:92:41:19:69:dc:
ff:2a:24:e1:ef:4c:b3:86:ad:75:a6:b2:7e:45:0d:
89:4b:84:4f:c5:a2:79:f2:1d:29:f0:30:84:84:1e:
eb:ba:ae:06:44:f5:24:7b:de:f2:e2:7b:f2:17:4a:
ac:9d:70:8d:26:01:56:c7:5c:e4:34:a2:66:ad:88:
58:3d:be:14:f7:3a:d4:f8:66:24:71:6a:07:d8:9f:
6b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:40:83:09:D6:8E:E4:61:45:B9:76:DB:89:1A:3A:6D:6B:D2:CA:F0
X509v3 Authority Key Identifier:
keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:34:91:e4:c2:43:5f:85:f4:7f:6d:e4:c6:8e:f5:61:65:94:
ca:1a:fa:f8:93:0c:96:c1:47:40:08:8b:c4:71:7e:5f:2a:7e:
44:f4:4c:22:7b:c4:71:0b:d4:05:a5:1f:5e:d5:e2:1e:bc:d8:
40:e8:8f:55:5c:c9:3e:ed:79:f2:5a:68:1d:8c:9d:a5:13:5f:
bc:38:32:1a:5e:2f:c2:32:4b:ab:2f:82:34:6a:f1:42:09:de:
6b:ac:36:ee:ba:c3:21:95:f1:e2:00:c8:f7:77:e0:6b:6f:0e:
35:e4:6f:17:3d:cc:7b:00:85:df:70:6d:11:e4:c0:f7:47:66:
91:c5:f7:28:59:c3:84:d1:47:e0:8c:1c:b8:71:7d:bd:c5:1c:
c9:e6:5b:c0:a1:7c:0e:3f:e9:98:67:e5:14:9d:40:e4:66:af:
0b:c9:37:90:e8:6c:92:5b:f6:5f:32:ba:67:d8:85:8a:e7:1a:
84:d7:17:c7:46:23:8b:de:28:fe:9e:25:9e:4c:84:a5:8f:4e:
e6:a0:64:7f:9d:a2:04:d1:74:0e:8e:d3:26:ae:96:e6:80:f6:
2a:de:71:0c:72:a1:10:b2:b7:25:23:15:d6:d0:59:ef:bc:ca:
76:99:0f:21:88:5c:bd:48:06:04:e8:bb:2f:6b:9e:6a:00:d7:
58:84:b0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:18 2026 by rpki-client