Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
File: NHjAigY6wtNKGxkeJDY4m77tXpc.mft (raw, json)
Hash identifier: CL7zmozXA+uBZvzeErA/cZYUsvJriv1b+8u+aN3gFzI=
Subject key identifier: 8D:1C:4A:FD:0D:67:73:45:0A:97:AD:33:44:B4:62:16:A0:FE:A2:03
Authority key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
Certificate issuer: /CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Certificate serial: 019CAB6BE7874FA56A5A888719EEEF0587BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
Manifest number: 0E86
Signing time: Sun 01 Mar 2026 22:01:41 +0000
Manifest this update: Sun 01 Mar 2026 22:01:41 +0000
Manifest next update: Mon 02 Mar 2026 22:01:41 +0000
Files and hashes: 1: NHjAigY6wtNKGxkeJDY4m77tXpc.crl (hash: DynYkAKxFJizc8TIgm8kPxr9yEeVHtGo3flWMKA44hU=)
2: w9CRvvsYzgY0DlQQmWuMnS9mI2o.roa (hash: fUMokcIKd3DOh6naOLFCtJpr9vVF9HoG1tnLSbQmKeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e7:87:4f:a5:6a:5a:88:87:19:ee:ef:05:87:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Validity
Not Before: Mar 1 22:01:41 2026 GMT
Not After : Mar 2 22:01:41 2026 GMT
Subject: CN=8d1c4afd0d6773450a97ad3344b46216a0fea203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:0e:8f:a1:e3:b2:f9:5e:b3:6f:9f:ec:e1:
9a:db:b0:4d:c4:1b:f0:50:cb:63:f8:7e:84:22:a9:
37:55:20:cf:64:1c:c8:6c:65:df:2f:83:02:55:0e:
82:aa:a0:7d:f4:c9:f9:a6:08:56:46:1f:e4:7a:21:
56:37:5b:b0:7b:81:ef:43:c4:d2:4e:59:c1:c8:0d:
be:9c:df:68:67:e6:cd:7c:25:63:47:69:6b:72:25:
e7:2a:b9:fd:4c:ec:35:cd:bf:76:4b:ee:ca:21:91:
73:46:3d:34:5c:18:fa:f6:e5:af:cb:fb:5d:aa:0b:
9b:2b:4f:c1:ab:12:f6:2e:b6:8b:d6:13:ba:7a:90:
d8:47:e0:99:4d:9a:15:66:98:bc:68:02:1f:77:fb:
0c:bc:13:dc:b3:4b:76:cf:69:e8:22:75:6b:4e:1c:
c9:90:a3:ef:88:25:7e:34:bd:44:a0:c3:b1:56:26:
cc:c4:6e:d6:f8:46:ed:9f:e7:1c:90:f3:7d:3f:62:
7e:34:81:4c:c0:81:99:b4:a8:89:b2:d9:4b:73:72:
98:82:5c:0e:ae:95:2c:16:93:69:8d:1c:8f:16:14:
56:0f:3d:c6:2b:53:2f:2f:40:4f:b8:3c:71:22:b2:
dc:51:0f:9e:d5:38:92:02:b6:14:f5:fd:79:0b:ae:
c8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1C:4A:FD:0D:67:73:45:0A:97:AD:33:44:B4:62:16:A0:FE:A2:03
X509v3 Authority Key Identifier:
keyid:34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:06:55:88:a2:1a:e9:58:27:f8:21:74:2f:c2:31:77:2c:05:
9e:9a:40:77:0c:5e:3c:d5:c4:25:e5:81:fb:11:19:58:e0:01:
1d:68:63:9b:6f:7b:3a:9e:5a:d8:d1:c9:cf:0e:7d:9b:5b:4d:
24:db:61:d5:e1:5a:cb:32:22:72:73:30:8f:da:31:3b:b1:a4:
45:a3:e6:f5:5e:09:25:8d:a1:35:c0:f3:d2:e9:9f:8d:71:fc:
ad:b5:d3:87:b5:63:d2:20:92:3d:40:72:81:9f:9f:ee:79:d7:
a0:0a:62:81:60:80:63:91:de:fc:34:02:49:de:44:af:cb:61:
0a:88:c0:08:9e:00:f6:4f:2b:9b:de:d1:2b:d2:a8:f8:44:09:
40:7c:55:e5:dc:58:af:3c:32:0c:48:18:37:90:c0:bc:cc:53:
71:b3:a7:d8:61:4b:1b:87:1b:ae:86:e6:34:13:96:b1:e7:dc:
01:7e:4b:56:e2:85:34:51:d9:78:a9:42:f2:93:8e:4f:c6:10:
ff:cf:58:d2:65:e8:da:f1:d1:7e:e1:de:2c:75:de:34:42:00:
7b:3f:2f:db:f8:55:7f:5c:49:04:c7:14:87:cc:8a:ea:96:33:
86:a7:0f:05:b8:52:e6:85:0e:17:3e:23:61:25:30:71:d4:ba:
5f:c3:1c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:57 2026 by rpki-client