Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
File: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft (raw, json)
Hash identifier: fmbiX2SqGVrCVUktDtO/i+FRpyBy+R5qu1ANqE/0Fyw=
Subject key identifier: F8:6E:22:4F:4D:57:1A:7B:71:66:50:AF:AD:81:53:64:C7:6F:E9:AD
Authority key identifier: 34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
Certificate issuer: /CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Certificate serial: 019CADC85E2D0A60A9B95929182D84D5DF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
Manifest number: 0E09
Signing time: Mon 02 Mar 2026 09:01:55 +0000
Manifest this update: Mon 02 Mar 2026 09:01:55 +0000
Manifest next update: Tue 03 Mar 2026 09:01:55 +0000
Files and hashes: 1: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl (hash: qbDcNISvqdTxyEfov60CTUco01CDT47Ozz6gXW/8Dzs=)
2: lr150d2XGILiqF-TQMwRxqDTm5w.roa (hash: swf9GzpHqLFrOjJ0Syj99F4hF6OOAJag78U+mc9YBAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:5e:2d:0a:60:a9:b9:59:29:18:2d:84:d5:df:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Validity
Not Before: Mar 2 09:01:55 2026 GMT
Not After : Mar 3 09:01:55 2026 GMT
Subject: CN=f86e224f4d571a7b716650afad815364c76fe9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5f:68:4e:b4:38:ab:79:b8:f9:69:05:5c:fc:
3d:dc:e5:9a:04:2e:d4:5a:0c:a6:f1:c5:5c:34:bd:
ba:0b:0a:71:f4:92:e3:c7:c3:b1:d0:7a:51:50:71:
c2:25:0c:88:cf:cc:62:52:d3:12:44:a3:03:c2:74:
29:13:93:cd:bf:d7:ae:cf:b8:8e:b4:a6:0c:8b:c9:
13:69:e4:0d:7c:2b:1c:64:6f:1c:f7:d3:0f:2d:09:
38:17:14:1d:fa:a2:7f:fb:d6:d0:d8:da:6a:52:d0:
64:cd:17:f2:52:da:fc:11:2a:a4:81:c7:0f:64:ab:
42:80:af:40:c1:bb:97:60:b6:21:ec:8b:98:ae:f4:
9e:42:e9:0e:2f:d4:00:39:ff:66:17:68:51:1f:66:
dd:aa:94:18:2a:ab:2d:b9:43:cd:b8:57:ae:25:7a:
c0:a6:e5:d2:9a:4c:32:29:52:cc:41:f1:1d:50:c7:
d2:8b:b3:73:cf:a7:0c:4f:e0:9d:79:22:71:00:78:
da:c3:67:e7:66:95:4e:22:2d:c3:b3:90:64:f0:77:
f2:7b:c1:f1:06:fd:11:f6:58:e7:85:95:45:0c:64:
87:65:2f:db:d8:7d:11:b1:6b:40:1e:78:ca:9d:e9:
33:1f:17:ef:ec:98:8f:51:7b:eb:2b:3b:c6:1a:23:
05:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6E:22:4F:4D:57:1A:7B:71:66:50:AF:AD:81:53:64:C7:6F:E9:AD
X509v3 Authority Key Identifier:
keyid:34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:17:85:cd:a2:a3:5b:fe:a5:45:8d:a6:e9:b1:10:cc:18:72:
22:47:65:48:32:90:ad:d0:c4:64:ed:fd:62:2f:a9:a4:5e:bb:
0e:b7:04:24:8c:3c:38:6b:18:af:f4:6f:c4:a9:9f:41:4b:a5:
14:15:58:0a:2f:3a:13:54:1d:dc:e8:78:07:cd:df:ae:70:ae:
55:51:15:d2:60:ff:43:74:b1:a6:42:40:ef:32:47:f5:e8:95:
ce:e4:2a:5e:91:e5:81:fc:b7:b2:99:e2:b2:67:6a:8b:bd:97:
44:6c:18:4f:cd:99:01:a7:fa:08:c5:41:11:e4:0a:ac:9f:f5:
5a:e2:e9:35:36:e4:a7:e8:73:7b:90:0d:3f:28:bd:60:c5:3f:
89:71:bd:72:10:e1:de:f2:1b:f7:e2:d1:62:61:f0:9f:dd:23:
2d:c9:a3:27:66:6a:4a:65:12:82:9a:b3:31:30:cb:6b:da:84:
0a:68:42:9d:e7:93:e4:53:90:f4:86:54:f6:93:15:34:cd:8e:
0d:9f:8b:e3:01:96:05:64:8e:23:45:34:60:17:63:a0:4f:8e:
29:ab:9a:d1:d8:17:26:3d:a5:90:2a:f1:a6:a6:10:7b:9f:fd:
fb:e1:a2:84:10:4f:fc:aa:04:93:2b:91:49:be:57:6a:4c:ed:
75:5e:68:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:47 2026 by rpki-client