Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: jSgQXqoTzHLcT0gO/9Wq3c2UPcDUqoVIE6UlTXw4paY=
Subject key identifier: 9B:84:12:86:48:88:FB:B9:03:2A:4A:02:D3:86:8F:C5:0C:7B:AF:A0
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 019D299753A59DC7329F3D08509933676AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 10:01:16 +0000
Manifest this update: Thu 26 Mar 2026 10:01:16 +0000
Manifest next update: Fri 27 Mar 2026 10:01:16 +0000
Files and hashes: 1: 4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa (hash: Z+M0a2CeBocn+5J0DpLY2Wi61/jCPMoAwEWgcIu3zn8=)
2: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: 8KTn23tOIPPAjbmDBiDI1L365AWhk68JfdNy7mHK6dU=)
3: RxH1gaSjLMp0tnHIqiMkmznCeLE.roa (hash: p4krdNmYmG1wZdtq1raA8Nmp1Uo/DFzB3h6x0GajZ1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:53:a5:9d:c7:32:9f:3d:08:50:99:33:67:6a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Mar 26 10:01:16 2026 GMT
Not After : Mar 27 10:01:16 2026 GMT
Subject: CN=9b8412864888fbb9032a4a02d3868fc50c7bafa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:e5:7d:b4:98:97:9f:6f:3f:dc:85:5f:cc:
27:e8:a5:34:0f:3b:97:4c:ff:01:96:22:16:e3:32:
b3:e6:91:12:e7:d4:57:49:6d:5e:00:a0:de:3c:ab:
02:6c:ae:a5:cb:8d:9a:a4:76:41:a1:70:3d:5d:bb:
03:96:b1:d2:3d:e9:24:22:5d:6e:a4:d3:ed:d3:dd:
34:67:56:35:ed:c9:2e:1d:a6:d0:45:c2:a8:a5:cc:
33:52:d5:1a:f5:2a:38:3b:e0:ac:4a:0c:f5:87:7a:
bf:1a:e2:3d:88:19:9b:7f:be:53:7f:8a:ef:58:f5:
f2:b7:a5:91:51:b2:b0:44:87:9e:1d:da:24:4b:73:
dd:4b:15:04:ca:38:5c:d3:cc:aa:be:e5:ec:be:b9:
b3:2d:78:ca:78:c9:05:54:e6:32:2a:e5:f4:86:f5:
1e:46:b1:f6:df:2c:f6:f1:fa:b8:d0:9c:74:00:53:
55:84:a5:4b:97:45:79:21:48:5d:02:7e:a7:ca:09:
d2:7c:21:1b:2c:a5:66:ca:15:07:63:a1:6a:20:75:
27:ab:7a:8e:f6:21:ae:40:05:20:f2:ef:4f:da:df:
0d:3c:bd:d9:31:16:a0:b8:a6:b2:8b:35:95:86:e4:
45:9d:9e:3c:b6:dd:b6:20:d3:b8:e9:9d:c0:67:16:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:84:12:86:48:88:FB:B9:03:2A:4A:02:D3:86:8F:C5:0C:7B:AF:A0
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:19:d2:69:5b:d1:4d:dd:ea:f3:31:8d:c6:20:d1:36:fe:8e:
94:d8:d0:76:2c:b0:5c:10:fe:c8:aa:5d:0a:6d:6c:89:70:fd:
04:0c:03:7e:49:f7:f3:5f:f7:6b:da:11:09:ed:5a:d5:04:4d:
4e:3e:aa:0c:63:ed:0d:fb:8e:2e:e5:f9:64:1f:86:21:47:0e:
57:97:0a:bf:0f:77:d2:46:08:be:8e:88:d7:96:dd:16:cf:a1:
ff:12:48:bf:41:a3:f7:ed:8e:a3:73:8b:13:48:21:e3:7f:73:
f2:1e:89:4a:ee:95:f3:41:f1:7b:65:80:e9:13:ff:ce:bd:7c:
f8:1a:c6:79:24:bd:47:a2:87:ab:89:b8:f7:90:00:bf:dc:b3:
82:31:15:0f:32:62:6c:63:0e:f5:f6:3b:ff:33:a5:86:4a:c5:
5b:e8:95:ec:01:09:e9:96:b0:d6:cc:26:0e:bf:c7:2a:ca:9d:
8c:d3:00:37:3e:ab:78:72:7a:bd:97:9f:86:c4:34:e2:b9:61:
b6:3c:f3:f4:29:4a:1c:74:2f:a6:30:b2:66:b4:35:eb:46:63:
f8:47:41:28:23:e5:ad:b9:d9:86:ba:ee:62:92:1b:33:0d:67:
4c:52:32:ef:69:03:f3:b1:e6:e2:7e:be:26:3f:6e:da:ce:81:
1d:62:74:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:40:12 2026 by rpki-client