Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
File: NscJXgRZhgU7mz6HiQNnJoN90fU.mft (raw, json)
Hash identifier: KGJeg/slCauFJGIWOBwnPdWBg2BZDpURxLqcrH25a1c=
Subject key identifier: 7F:5D:9F:99:DD:6D:ED:E5:7F:A7:CC:EA:90:65:49:D9:A4:7E:DA:52
Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
Certificate issuer: /CN=36c7095e045986053b9b3e8789036726837dd1f5
Certificate serial: 019D26CCFB7A2258CED18313B28E75A7A52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
Manifest number: 07AF
Signing time: Wed 25 Mar 2026 21:01:01 +0000
Manifest this update: Wed 25 Mar 2026 21:01:01 +0000
Manifest next update: Thu 26 Mar 2026 21:01:01 +0000
Files and hashes: 1: HuSnhil6lfXTqaq7JgeQk-Ofamg.roa (hash: gk7WHH1Fk2fGMGJjH6DsGNArwgZbzQBBGEMIBb7kSmE=)
2: NscJXgRZhgU7mz6HiQNnJoN90fU.crl (hash: 3/RtOPl+1huP0CdioWazYDhfkAuSRi5Nz6sJR+tXDbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:fb:7a:22:58:ce:d1:83:13:b2:8e:75:a7:a5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5
Validity
Not Before: Mar 25 21:01:01 2026 GMT
Not After : Mar 26 21:01:01 2026 GMT
Subject: CN=7f5d9f99dd6dede57fa7ccea906549d9a47eda52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ea:09:07:33:61:e8:de:5c:fb:34:a3:56:f3:
a6:2d:ff:d9:2f:f6:d4:96:4a:f0:12:32:04:61:68:
67:8d:81:cf:9d:a2:df:01:b1:7c:ec:ea:49:56:a0:
39:0d:e1:ea:06:60:2a:d9:ef:de:cb:71:cc:83:94:
82:ae:a0:48:8f:e8:85:78:cb:e4:39:e9:04:1f:c4:
07:8f:4a:6c:b4:35:19:dd:22:4c:cb:f4:66:59:62:
35:e2:69:e6:cb:f0:94:05:bd:51:d8:d7:d1:1c:b9:
b2:04:97:e3:1b:f4:a4:2d:a4:62:a4:c8:28:d6:f5:
15:c0:d0:d2:b1:cf:22:af:86:e6:ef:3b:c1:d4:fc:
e9:6d:56:09:72:09:06:27:c0:29:e2:37:36:4e:ed:
9a:6a:c8:08:5c:36:0f:ae:b4:30:69:29:c4:af:44:
65:ed:00:75:12:bd:ce:e9:65:f6:eb:51:b0:51:98:
bf:fa:e6:b1:36:22:40:89:e2:67:32:47:90:5e:5d:
06:8c:ae:c2:0e:7f:93:58:f4:38:a1:3f:ed:7e:ba:
06:e5:af:6b:78:5a:33:47:8a:04:85:b0:ff:08:2f:
38:5e:b1:0e:3f:0d:1b:50:90:b7:1f:47:ed:26:49:
dc:51:bd:a5:c9:6e:cb:ae:08:84:4d:29:8c:41:47:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5D:9F:99:DD:6D:ED:E5:7F:A7:CC:EA:90:65:49:D9:A4:7E:DA:52
X509v3 Authority Key Identifier:
keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ee:e0:46:d9:8a:df:fb:54:af:8e:58:11:d0:74:ea:83:ce:
fc:33:a8:78:24:3e:cf:78:2d:f2:af:50:0d:a0:b2:44:de:aa:
5e:1a:8f:a9:d1:64:12:ba:72:e7:6c:a8:01:e8:91:4e:24:59:
0c:d9:68:9e:72:b4:5f:31:57:cd:74:0f:4a:81:8b:71:8d:c6:
76:9f:ed:de:c8:e0:c0:5a:ad:c1:02:f5:72:1c:08:a7:dc:4b:
8c:6d:66:7a:d5:4d:b0:b4:9d:f9:cc:05:d2:ae:3b:5c:eb:3e:
63:a3:ae:4d:d4:ce:f5:2d:02:e1:0a:d8:b0:01:d4:05:91:92:
79:6d:7d:b6:a5:3b:26:9f:ea:83:78:d0:60:23:d0:d3:cd:40:
e9:ab:d4:5c:0b:3a:08:9c:00:eb:3e:b4:6f:4e:c1:c7:2d:4f:
0c:05:ad:0c:99:e1:16:6f:38:a5:ef:a3:a9:8a:ab:63:4a:87:
32:51:64:53:ab:2d:33:00:92:7b:23:58:ed:2b:49:c0:90:28:
9a:9a:10:f7:f5:8b:8c:bf:b1:91:87:26:99:7e:5e:10:fb:b4:
79:54:58:54:79:3b:aa:3a:b8:e8:2c:39:9b:f4:6d:7b:e6:17:
5a:08:f7:cf:cf:ff:d1:60:29:50:28:29:28:e1:7d:b7:93:d4:
74:5a:da:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:30 2026 by rpki-client