Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
File: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft (raw, json)
Hash identifier: qUHm2J1aiJje95MHe9gedeRB/hsYVf0zSfOJIiLJ7Fc=
Subject key identifier: 9F:1C:EC:64:A0:31:A3:DD:EE:08:51:32:DC:5B:A0:DB:1B:70:51:3C
Authority key identifier: 34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
Certificate issuer: /CN=345eecab9570cf0affa81be748e9128f55e416c2
Certificate serial: 019CABA24958468A49F30E80B7D46090ADD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
Manifest number: 07A2
Signing time: Sun 01 Mar 2026 23:01:05 +0000
Manifest this update: Sun 01 Mar 2026 23:01:05 +0000
Manifest next update: Mon 02 Mar 2026 23:01:05 +0000
Files and hashes: 1: NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl (hash: NTOEqVeqo1Tetg1SXBQMBFREg4SPFXOVvhNEr3rDISk=)
2: kekcgSv-eDONMe6ZG8p99c62CHY.roa (hash: YXzQs9p+P9jRTPWs0pwKa3KkCYRND2jAcNEa4dtHmUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:49:58:46:8a:49:f3:0e:80:b7:d4:60:90:ad:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345eecab9570cf0affa81be748e9128f55e416c2
Validity
Not Before: Mar 1 23:01:05 2026 GMT
Not After : Mar 2 23:01:05 2026 GMT
Subject: CN=9f1cec64a031a3ddee085132dc5ba0db1b70513c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:da:63:f5:82:ad:6a:8a:ed:5d:41:91:d6:
9b:df:c6:86:8f:db:e7:b8:ff:28:4d:c1:64:f7:98:
cb:59:bc:40:76:57:08:a4:74:ee:1b:83:89:19:2b:
d8:e7:de:e8:8a:0d:86:37:5a:77:80:c1:30:b7:74:
49:8e:ce:3c:86:9c:da:16:18:c4:8e:d4:47:2e:0a:
05:96:b8:d2:f4:30:46:d3:0f:aa:8c:6a:44:84:ba:
ab:3f:b0:78:f4:e5:eb:22:82:e2:6b:7e:88:bf:67:
c6:03:0b:97:64:39:b6:98:eb:f9:c9:b9:3a:7b:9b:
41:a5:c9:a1:93:b3:2e:8b:a7:be:3d:c1:df:e3:17:
c2:a4:84:dc:ac:4c:6f:c5:5b:0a:0f:e0:10:5d:28:
a8:78:75:f5:5f:f2:90:7c:aa:9e:3d:e7:2d:b6:10:
bd:74:bd:0d:92:81:4e:f0:f3:6e:10:0d:29:d2:3f:
a9:da:a9:e2:f7:71:fc:5e:f0:26:20:31:5b:d2:22:
cc:15:4d:ad:8b:a8:bf:ee:f6:6f:01:87:7f:73:40:
c1:d1:e1:dd:c5:0a:44:99:e2:89:6b:0f:b6:49:d9:
c8:43:f8:18:18:a6:e0:77:40:fc:8f:30:42:6e:a2:
0a:81:7d:33:f1:52:f8:6f:1f:3d:26:56:43:ec:56:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1C:EC:64:A0:31:A3:DD:EE:08:51:32:DC:5B:A0:DB:1B:70:51:3C
X509v3 Authority Key Identifier:
keyid:34:5E:EC:AB:95:70:CF:0A:FF:A8:1B:E7:48:E9:12:8F:55:E4:16:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f80d27-18af-4982-bb07-e72fa5531d45/1/NF7sq5Vwzwr_qBvnSOkSj1XkFsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d3:43:67:6e:26:17:8d:06:94:b6:a5:07:72:fa:36:f9:c3:
a0:56:77:81:e4:3a:36:e7:13:e5:63:6a:0b:3f:e3:6a:ff:09:
76:9d:0d:01:84:78:53:c1:11:a7:8a:24:21:7a:ba:cc:7c:02:
8b:97:44:4f:77:01:1c:a2:58:9f:4f:bd:21:62:f3:d1:7e:1f:
0f:52:2c:5d:b3:aa:a0:2e:76:c6:e1:07:d7:0f:45:0f:1d:3a:
f6:2a:5a:fa:58:44:13:60:52:54:e3:35:e8:62:5b:a7:fa:47:
80:ea:1b:f9:15:f1:f0:86:2e:25:04:8b:8c:bd:75:bb:1f:4f:
7f:8b:b3:c9:83:e8:c3:b1:68:18:ca:b4:69:b6:7c:a8:ac:8e:
07:2d:b4:ce:66:b1:04:12:28:5e:50:d9:c0:3c:7e:54:61:30:
b5:3a:d3:95:1f:3c:db:8b:39:d7:03:b3:c4:38:7f:2f:8d:f2:
ff:92:ca:f0:08:32:95:cd:fc:db:b0:04:77:8f:c1:03:83:6a:
6a:23:40:7b:49:8d:78:03:69:62:3a:0d:b0:ec:76:ec:c2:43:
b1:90:f1:eb:56:45:f3:74:0f:6d:9a:6a:2e:e7:b6:51:dd:9a:
a4:d4:10:26:7d:83:33:ea:e6:cc:15:aa:b5:45:c9:2f:60:f9:
de:9d:2d:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroklYRopJ8w6At9RgkK3TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NWVlY2FiOTU3MGNmMGFmZmE4MWJlNzQ4ZTkxMjhmNTVl
NDE2YzIwHhcNMjYwMzAxMjMwMTA1WhcNMjYwMzAyMjMwMTA1WjAzMTEwLwYDVQQD
Eyg5ZjFjZWM2NGEwMzFhM2RkZWUwODUxMzJkYzViYTBkYjFiNzA1MTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJXaY/WCrWqK7V1Bkdab38aGj9vn
uP8oTcFk95jLWbxAdlcIpHTuG4OJGSvY597oig2GN1p3gMEwt3RJjs48hpzaFhjE
jtRHLgoFlrjS9DBG0w+qjGpEhLqrP7B49OXrIoLia36Iv2fGAwuXZDm2mOv5ybk6
e5tBpcmhk7Mui6e+PcHf4xfCpITcrExvxVsKD+AQXSioeHX1X/KQfKqePectthC9
dL0NkoFO8PNuEA0p0j+p2qni93H8XvAmIDFb0iLMFU2ti6i/7vZvAYd/c0DB0eHd
xQpEmeKJaw+2SdnIQ/gYGKbgd0D8jzBCbqIKgX0z8VL4bx89JlZD7FaxWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8c7GSgMaPd7ghRMtxboNsbcFE8MB8GA1UdIwQY
MBaAFDRe7KuVcM8K/6gb50jpEo9V5BbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mODBkMjctMThhZi00OTgyLWJiMDct
ZTcyZmE1NTMxZDQ1LzEvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mODBkMjctMThhZi00OTgyLWJiMDctZTcyZmE1NTMxZDQ1
LzEvTkY3c3E1Vnd6d3JfcUJ2blNPa1NqMVhrRnNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAstNDZ24m
F40GlLalB3L6NvnDoFZ3geQ6NucT5WNqCz/jav8Jdp0NAYR4U8ERp4okIXq6zHwC
i5dET3cBHKJYn0+9IWLz0X4fD1IsXbOqoC52xuEH1w9FDx069ipa+lhEE2BSVOM1
6GJbp/pHgOob+RXx8IYuJQSLjL11ux9Pf4uzyYPow7FoGMq0abZ8qKyOBy20zmax
BBIoXlDZwDx+VGEwtTrTlR8824s51wOzxDh/L43y/5LK8Agylc3827AEd4/BA4Nq
aiNAe0mNeANpYjoNsOx27MJDsZDx61ZF83QPbZpqLue2Ud2apNQQJn2DM+rmzBWq
tUXJL2D53p0t4g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:25 2026 by rpki-client