Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
File: NNDsesTDkeTsup0KN0kZGxjr-TQ.mft (raw, json)
Hash identifier: 58h1xBbAF8dAvB49oBhD4Wi+/KHM7CTvxtvQfsincQE=
Subject key identifier: 5E:57:D2:0D:8E:D5:B0:F0:8D:29:61:7E:BB:93:36:57:48:A9:B2:9E
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial: 019CAB34A191872551F53E6EFEFC1C2325C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
Manifest number: 10C9
Signing time: Sun 01 Mar 2026 21:01:19 +0000
Manifest this update: Sun 01 Mar 2026 21:01:19 +0000
Manifest next update: Mon 02 Mar 2026 21:01:19 +0000
Files and hashes: 1: 5aUFJ1nRNDZXvDlW5Ib7ApLcjzU.roa (hash: CM2yuZbmUG7aD/W6YESLWl+Ll1dOOpDPDyQg/E7d6L8=)
2: NNDsesTDkeTsup0KN0kZGxjr-TQ.crl (hash: iWxOKjpvGLfsdMriZuX6Jw7RL8i5CMA7g+2fr1RPbKE=)
3: OXINEPIBnVaglpO2WDs_RqIzbkc.roa (hash: aSnB+0+0CnA11ivltYbXw+kEcjRN69vsEQ+sqlBivaA=)
4: PSJHF0T7csTccKL_3bcCSL4cmds.roa (hash: gSWHMoNkvXzeD2od1079ScFl5g/lvv5imGebCIsGgDs=)
5: WnoEZcRKFsEIGDrcD6eNi-NlUKc.roa (hash: 8G8cCnlz9tk6XzMq2zPRRygvIM2OH91XUUZ803rheUU=)
6: jBtjySCq2ld1Ntg6smiqyHDsdNs.roa (hash: zVyG6ZDReg9r2lMt4sCY0P5PMeh7pF+y9sNnS21ueDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a1:91:87:25:51:f5:3e:6e:fe:fc:1c:23:25:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Validity
Not Before: Mar 1 21:01:19 2026 GMT
Not After : Mar 2 21:01:19 2026 GMT
Subject: CN=5e57d20d8ed5b0f08d29617ebb93365748a9b29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:f4:4f:57:83:71:f5:71:de:3b:2b:0c:32:
14:ef:e0:41:d8:99:00:14:6c:6c:40:6e:35:93:87:
b9:f9:83:cf:e2:35:b7:ca:75:05:d2:ff:e7:55:1b:
e0:ce:8c:88:59:7e:01:93:a4:c2:d1:e5:f3:21:e1:
88:77:6b:bf:e7:e2:40:c6:8e:ec:b7:d1:f7:0a:ac:
f3:cc:ce:6e:0a:f4:06:f0:bf:ed:cf:1b:74:67:2c:
94:7c:cd:1d:cc:64:9c:08:eb:b5:f6:c9:69:87:9a:
ca:d4:28:c9:7f:e5:ec:bd:7a:e2:3c:60:1d:1d:d2:
55:0e:c1:6b:ed:81:23:24:da:cf:7f:6e:6a:3e:71:
ca:7d:3a:c9:e1:8b:8a:ac:16:92:2b:e8:2c:a6:b0:
a9:fa:3b:33:65:15:02:03:89:42:13:aa:fc:3c:8a:
94:64:50:2d:ec:bf:5c:37:01:56:bd:77:61:bf:2a:
83:b7:76:af:2c:da:5c:d4:45:9c:0b:49:ce:3d:76:
e3:d8:c7:39:c1:d6:a4:81:80:94:69:e2:8d:51:cb:
75:28:be:ef:5d:33:5c:87:54:f4:a4:c7:9b:3b:44:
7e:c0:64:f6:0c:d5:43:57:fa:f6:b7:34:d7:75:cf:
53:aa:1d:ef:1d:61:aa:bd:8f:0f:16:c3:1b:f3:c2:
ef:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:57:D2:0D:8E:D5:B0:F0:8D:29:61:7E:BB:93:36:57:48:A9:B2:9E
X509v3 Authority Key Identifier:
keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fe:6c:32:0f:b8:04:b7:3b:51:15:6b:0a:9c:da:c5:da:53:
a5:dc:09:08:1f:d2:d8:f1:5e:00:00:d7:20:08:c9:2c:f6:32:
ad:f2:c4:71:c1:f1:7e:37:22:a3:dd:12:f4:8a:58:78:44:a0:
5c:f2:df:e6:c0:8f:e4:77:9a:88:2a:fe:61:7b:68:18:95:f8:
23:05:d3:0e:83:55:84:94:48:a4:2a:cc:1c:0c:3e:06:67:23:
72:70:42:f7:a5:1a:35:6c:81:ef:7b:dc:77:9c:fb:7c:a7:3b:
b5:75:b9:1e:0c:29:26:75:33:60:b8:0e:2d:cd:fc:8c:f6:4f:
a5:1c:40:17:af:15:bc:2d:fa:b4:f6:6c:b6:41:9e:43:47:7b:
e5:14:6d:c2:73:83:9e:cc:39:0d:00:97:7d:a3:f7:0a:b8:d4:
35:63:6c:83:e0:c5:ca:51:17:09:20:83:db:46:ed:77:aa:b1:
d3:6d:81:4d:ab:28:7b:ec:46:91:fe:29:52:bd:2b:fc:6c:1d:
88:36:a4:1c:4a:7b:22:31:e0:13:94:a0:4b:92:34:48:c7:e6:
8b:8e:50:86:e9:90:66:8b:2f:4f:43:16:a1:4a:35:75:4d:52:
81:1c:cd:b8:39:92:1c:72:8c:ba:fa:fe:d2:21:e3:42:54:9a:
55:bb:f7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:19 2026 by rpki-client