Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: MEDGOFH5kXazyXgaQ6pHYMBAQrEhSgR2fN5sdnMGC3c=
Subject key identifier: AD:2C:E5:EA:1A:65:01:EC:A0:39:1E:C5:C6:9A:E3:C1:D9:5E:78:2E
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 019CAD22AD6E3EA6876CAE77F3966F7E7E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 03A1
Signing time: Mon 02 Mar 2026 06:00:56 +0000
Manifest this update: Mon 02 Mar 2026 06:00:56 +0000
Manifest next update: Tue 03 Mar 2026 06:00:56 +0000
Files and hashes: 1: 2mDBUtF183-0RSLjJBliu1rIQO8.roa (hash: 3lzqCQHb4j0yU8pcFwYiFLfqy0BLZUaM9oBjKILthJw=)
2: GfO-2z23flcVZgus0pDd6WLIU1g.roa (hash: 0ETAGcbcy3jcVs9OlDEPeiK922VrJQwu8CgS9xVuEdY=)
3: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: uZsM4yv46jbuduRLUYBuap6VQKEv/1XxPNoMukz+/mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:ad:6e:3e:a6:87:6c:ae:77:f3:96:6f:7e:7e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Mar 2 06:00:56 2026 GMT
Not After : Mar 3 06:00:56 2026 GMT
Subject: CN=ad2ce5ea1a6501eca0391ec5c69ae3c1d95e782e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:87:3a:df:46:53:59:82:85:c9:ee:52:3d:
c3:02:a0:b3:a7:cb:9f:a2:fa:0a:fb:90:63:00:d0:
95:97:68:55:fb:76:65:90:26:99:19:1f:d4:37:8b:
5b:86:18:2a:14:a6:3b:99:11:a6:a1:34:df:63:ff:
f9:90:2e:4f:07:35:27:09:c8:71:ea:cb:e3:3e:e0:
51:c3:48:18:72:5a:2d:9a:fd:5d:09:fc:cb:dc:32:
47:36:e4:eb:fa:2d:da:54:4a:5f:45:4b:06:de:d4:
bf:66:c2:29:f7:d4:bd:9a:e6:3a:2c:6f:37:40:ff:
53:be:bc:8f:a6:67:84:5f:b9:ea:b7:00:91:fc:c9:
2b:32:5c:70:84:42:fd:2f:74:b7:c8:3f:9c:df:dc:
7d:33:30:02:cd:e5:65:74:e1:35:bf:2d:48:8b:bc:
ce:38:a7:a7:ff:27:ac:dc:ce:e5:bb:e3:9f:2e:af:
7f:e0:b4:8a:51:a2:1f:70:73:e8:6b:77:9d:d6:5f:
a0:17:8a:6a:c8:6f:b8:70:2e:3d:3d:f9:04:af:4e:
39:cf:ce:31:67:d8:b3:03:4c:0e:ac:93:9e:73:8d:
88:d9:61:e5:ba:0d:b9:79:7a:67:d6:47:92:b6:e8:
81:c8:84:73:ae:5d:4c:c8:c8:fc:bc:46:40:1b:f8:
67:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2C:E5:EA:1A:65:01:EC:A0:39:1E:C5:C6:9A:E3:C1:D9:5E:78:2E
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9c:ee:c3:d2:19:32:e2:66:b7:cc:f0:1f:a3:d1:57:a8:59:
88:73:4e:47:10:96:d3:93:8a:be:f0:63:7d:63:26:bb:32:1e:
f1:e9:ea:5f:cc:b1:b5:2d:2f:8a:2d:18:0e:cf:bc:d1:5d:f8:
77:9c:02:37:16:a7:2a:38:79:2c:17:d2:d5:8d:95:26:12:55:
ff:34:8b:60:87:32:a4:d5:83:64:f4:15:60:6e:23:5c:34:ad:
36:20:ed:e1:bc:4b:ff:d2:3b:ea:fc:35:d2:59:43:1b:40:e5:
60:5f:4b:02:8d:b3:ea:f1:b5:f8:fd:d3:44:88:6a:73:fe:96:
94:94:4b:38:b4:7a:16:e0:c0:1a:90:5f:d4:81:0b:e7:bd:e0:
8c:48:71:10:0d:3d:0c:58:0b:23:be:ce:b6:08:d1:cf:bf:a1:
88:27:25:a0:c1:4e:f8:e6:01:0b:b4:9c:66:44:bd:d8:89:38:
b8:68:13:38:cf:47:63:2e:59:b0:ed:9b:1d:a3:0b:ac:47:79:
4b:4b:6d:ef:20:73:7a:6d:97:92:52:5f:d7:54:ca:f5:09:29:
4d:4a:a5:0e:8c:e7:27:d6:d4:be:8f:c5:72:ea:2a:f1:00:73:
cf:5d:80:eb:36:5a:fc:a2:04:15:3d:e2:6c:07:97:2c:b2:96:
8b:84:f4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:23 2026 by rpki-client