Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
File: NztHo87nmYKtsXA0HQICYCczICM.mft (raw, json)
Hash identifier: 5RfJmJdLY7yPeulrQ/FmVr+DtNsZUghQmjcVmTX4uTc=
Subject key identifier: 57:F8:79:89:D8:B3:E7:EB:83:78:51:01:44:A8:D3:8B:EB:33:26:C4
Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023
Certificate serial: 019CAAC6F7E6932BB70AD1A48D1CCBFA91C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:01:32 +0000
Manifest this update: Sun 01 Mar 2026 19:01:32 +0000
Manifest next update: Mon 02 Mar 2026 19:01:32 +0000
Files and hashes: 1: EhbDV-ZEobAKZPJC0NEd9rEnh3M.roa (hash: 8dSJ4V344uYPfv20kAYh7+/QdkqmIXoZCP2MoBXPCpg=)
2: Fkfx-G5QL9i_y4t8EzraGT25sro.roa (hash: Z3pIWqwQsVYBQFolUdVnXyqDy8vnTGDvbMN3ug4bHxw=)
3: NztHo87nmYKtsXA0HQICYCczICM.crl (hash: PhGKiFzKQNXdycD0p+Z17naJ0gutkqkLSQF2GaH7/8U=)
4: m0NQBZ6XvTWPMiWsX0wTun30DiM.roa (hash: 7AzW8C0oi0Ht7xq3BopOUhvowxO30E+ewpFpqQ9MzqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:f7:e6:93:2b:b7:0a:d1:a4:8d:1c:cb:fa:91:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373b47a3cee79982adb170341d02026027332023
Validity
Not Before: Mar 1 19:01:32 2026 GMT
Not After : Mar 2 19:01:32 2026 GMT
Subject: CN=57f87989d8b3e7eb8378510144a8d38beb3326c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:45:8d:77:14:74:0f:5d:be:a7:78:3b:03:e5:
c6:df:62:bb:dc:66:87:d3:6c:31:b0:18:f5:df:4a:
29:1e:56:4d:0f:4a:c9:5d:58:5a:f3:16:3c:88:f9:
fd:e9:b1:e1:d8:cc:df:14:40:87:3a:a7:ed:93:03:
67:57:9a:f3:17:74:86:b3:98:b9:65:22:0f:e6:c5:
a6:3a:ea:8d:d6:37:70:9a:fd:73:6e:ca:11:27:fc:
e0:52:c8:c5:1c:92:a0:64:29:ed:51:a1:02:f6:51:
e5:7d:94:b7:b4:bb:8d:4d:fe:16:ac:90:c5:7a:24:
f3:e8:58:9d:18:00:8f:82:23:c0:6a:9e:2c:ff:df:
66:5d:ae:39:ba:e6:ff:94:6c:81:28:25:57:30:73:
dd:e3:58:a3:2f:53:67:35:20:35:cd:fe:0f:c2:0b:
33:fc:ea:8a:2c:12:5e:fc:7f:49:b1:c5:e5:7b:3a:
83:32:3f:23:c3:86:e6:05:c7:d3:37:a6:93:0f:7e:
2d:43:74:67:c9:be:d8:10:40:6e:aa:6b:1b:4e:08:
90:ae:fa:0e:9e:d2:5a:59:14:e8:df:26:9c:d3:3b:
b6:20:52:d3:32:45:0f:3e:a3:7d:93:5a:c4:2e:23:
3b:c3:e3:2b:26:51:d2:da:8e:f0:c2:b8:8c:91:da:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F8:79:89:D8:B3:E7:EB:83:78:51:01:44:A8:D3:8B:EB:33:26:C4
X509v3 Authority Key Identifier:
keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fe:6c:e7:ee:d0:52:54:ed:6c:23:10:e3:d8:0a:5a:dd:ee:
20:71:2e:fc:7f:11:51:01:d0:a5:1c:b6:49:5e:0c:5f:5d:39:
f3:53:47:9a:ff:71:ca:00:03:56:59:ac:0a:2e:01:18:18:7a:
62:d2:cd:75:1d:eb:a6:c0:8b:31:27:48:07:03:13:e9:2f:9b:
9b:1c:06:c5:3c:88:14:d7:b6:45:4c:7f:8c:11:21:d1:2d:e2:
c7:4e:ce:93:4d:59:2c:7e:78:dc:54:0c:18:5c:cc:81:1c:a0:
ee:9f:5b:86:e7:df:f0:15:e8:ef:6a:e5:74:0d:18:77:59:48:
59:3f:21:03:d3:0f:d0:24:db:e6:be:eb:fc:3f:d7:41:0e:03:
e2:f0:ef:fc:9c:6c:87:c2:97:ea:15:54:d4:63:20:97:2b:cd:
6b:eb:1b:f0:f2:c2:21:7e:2e:cd:52:6c:0d:8a:62:aa:5c:d4:
ba:b9:cb:b3:d4:1e:53:eb:52:67:ed:ec:cf:42:38:f8:93:de:
84:6f:64:35:df:e0:27:e9:c8:4f:f1:a1:b3:d0:3e:01:80:49:
c1:0c:55:d1:fa:da:00:61:c7:b9:7e:85:e5:d3:6b:ee:db:45:
94:60:95:f0:25:cf:bc:54:ba:00:6d:d2:74:29:0d:9e:6a:8c:
95:17:d1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:48 2026 by rpki-client