Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
File: NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft (raw, json)
Hash identifier: zWx1fEU6y/bXS3RKZ4Z2H1HLkcXTCTO4kl0nnptptAk=
Subject key identifier: 8A:CB:59:97:39:CD:ED:7E:B6:AB:83:42:6E:BA:A8:B4:17:56:1D:91
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 019D2772A1FF2046F577D007E22C0904FC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
Manifest number: 0EEE
Signing time: Thu 26 Mar 2026 00:01:57 +0000
Manifest this update: Thu 26 Mar 2026 00:01:57 +0000
Manifest next update: Fri 27 Mar 2026 00:01:57 +0000
Files and hashes: 1: NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl (hash: 083kti3rX+RFP9wPkEhyY295PeDPvda5T7wQnrdOF1s=)
2: OyB8W9_wA5wbpLXiXUV8OttkP34.roa (hash: 0Tul/Q70maJ+aYBSNOe7pTN1kLta1YDTWvdIAUQpUg4=)
3: To1bIGbGp5M1LHEOYaAsoYMvFHM.roa (hash: J8108bKHwwomV0pOsdiePFOse+rC/Obmy+4s0xm8yGA=)
4: mnDV37o17I0BMCtvgbbSLcAn6Bc.roa (hash: Zf56A5N3eze8bYTELdKSyu3EXVQqDU3l8BuGCW7L2tc=)
5: so34H4EHsb2bvFRzdgNld87kNq8.roa (hash: tntM2l7FDBGtsKGRGPXiqst0BOOsbh2THcmt/BZuxRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a1:ff:20:46:f5:77:d0:07:e2:2c:09:04:fc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Mar 26 00:01:57 2026 GMT
Not After : Mar 27 00:01:57 2026 GMT
Subject: CN=8acb599739cded7eb6ab83426ebaa8b417561d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:87:20:fa:25:85:9d:e0:58:a0:7f:4a:fb:
65:49:3d:c9:d9:95:13:f2:db:82:0d:cb:65:8e:da:
87:d9:49:bc:45:0a:c8:dc:53:af:b8:49:70:0d:65:
ac:b9:f1:cd:24:e3:36:74:38:be:b5:8f:ff:a2:9c:
0d:f5:8d:db:b2:46:d8:83:a6:d1:0e:75:d5:ed:80:
12:a8:54:fe:98:36:1b:43:c5:1e:b8:f4:ea:80:0c:
1f:77:e9:f1:86:a2:b7:b9:a8:0b:9e:8e:b5:f9:9a:
b1:72:0a:b5:da:d5:e3:9a:4b:4b:34:af:b5:53:4d:
97:93:d5:14:07:42:b4:9d:7f:35:1b:0f:fb:3c:cf:
92:a5:b4:3e:8d:44:44:0f:d9:d8:54:18:8d:30:4e:
ee:84:4d:5e:99:e6:59:77:a2:24:ee:9e:39:6b:f7:
56:95:19:37:5e:b8:79:a1:9e:c5:0c:7e:b6:a9:2e:
7c:db:5b:4b:36:fa:13:59:8c:da:8b:24:c5:0f:d1:
b9:e4:6e:9c:7e:48:aa:70:eb:83:91:7b:e4:6e:e8:
15:90:c1:c6:16:cb:a7:79:a2:b4:cd:26:56:3d:b0:
00:92:63:3b:32:12:39:4b:ca:49:68:f5:2f:da:07:
d1:25:3d:c2:60:41:c2:8a:39:b1:79:3d:dd:55:9f:
03:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CB:59:97:39:CD:ED:7E:B6:AB:83:42:6E:BA:A8:B4:17:56:1D:91
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bf:b1:a0:2d:50:a7:de:f9:9b:47:91:37:7f:af:c3:2c:d9:
85:3e:06:0b:9a:03:f7:fa:db:a0:11:6e:b1:ce:bd:f6:ce:2a:
ae:81:6a:34:8f:e7:67:bf:01:ee:2a:5b:1a:69:b2:23:18:7a:
24:b8:78:52:0e:b6:56:58:91:4a:87:bf:db:7b:aa:61:64:6b:
1c:bb:47:f8:f9:d9:90:63:db:0d:25:3c:da:82:f5:3d:13:a6:
8e:04:52:89:f9:91:74:b9:ca:76:48:44:ff:a0:c2:13:a7:0b:
1d:1a:65:cc:ce:54:8a:00:bb:a6:df:00:d1:c7:46:a9:a6:0d:
19:c2:23:50:aa:13:3e:bb:2e:91:a3:94:91:72:86:ff:65:0d:
92:de:f6:16:56:5d:05:87:8d:ac:ca:90:f1:6e:4b:9a:ca:36:
ff:45:ad:36:85:1e:ab:80:6e:3f:f5:61:39:9a:d9:72:f6:d6:
dd:58:63:13:7e:10:8b:ef:d3:35:df:c2:fb:be:6d:74:44:a0:
04:ef:f6:1e:3f:4d:e1:74:f0:a6:0c:97:f5:99:a7:e7:84:5a:
a3:38:55:6a:9f:36:e4:50:49:93:bc:5b:bc:d3:a9:59:b4:c9:
fe:d6:68:7a:ae:a0:95:a9:14:fc:dc:d3:ba:be:8d:4b:d9:46:
c9:a6:0e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:52:58 2026 by rpki-client