Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
File: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft (raw, json)
Hash identifier: wo/0SZzvSNu61ssGTPiZTW3/m/vKWHbyXyqOp7sQ3KU=
Subject key identifier: 73:58:70:74:58:F8:A8:11:42:28:3B:95:1A:B0:59:64:EE:7A:D8:05
Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
Certificate issuer: /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Certificate serial: 019CAC47576EE8EE1AA716BD3FE2A29CCAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:01:22 +0000
Manifest this update: Mon 02 Mar 2026 02:01:22 +0000
Manifest next update: Tue 03 Mar 2026 02:01:22 +0000
Files and hashes: 1: 5MfrvFJHqhqYrR1Oc9h-OkMPeG4.roa (hash: QQ5YRKyPOHLwW62MQSDhBmGI/lB6OrTfowyUhMbXM7A=)
2: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl (hash: 9TEcqk+KckDvTPaQ7Z7AII4IxrIVCs5uixb0UwOKXSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:57:6e:e8:ee:1a:a7:16:bd:3f:e2:a2:9c:ca:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Validity
Not Before: Mar 2 02:01:22 2026 GMT
Not After : Mar 3 02:01:22 2026 GMT
Subject: CN=7358707458f8a81142283b951ab05964ee7ad805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9a:1d:42:c8:69:9f:4f:c0:eb:e1:f9:9a:60:
e7:ba:5a:b5:d4:c0:f5:0f:e1:a4:84:d3:5e:ce:57:
9b:5a:73:5d:5f:65:9c:bc:b0:40:84:f0:e6:13:cb:
8b:0a:9e:90:54:7c:7f:65:30:d5:75:35:22:bf:8a:
17:6f:ec:8f:d8:85:e3:7b:fe:f8:94:b1:68:3b:cd:
96:8a:b4:9b:e9:41:e7:91:aa:7e:25:d5:1b:58:25:
9d:7d:33:71:7f:a7:fe:03:18:0f:8e:e9:d9:fc:4a:
b4:2f:9e:0e:8a:e0:0a:94:dd:e4:a2:95:25:c0:57:
1a:fa:c4:d7:ec:01:15:67:21:66:f6:d6:be:35:cf:
ae:44:e6:79:54:61:d9:ef:2b:da:2e:b9:3c:0d:d5:
69:66:8b:e0:74:41:7d:94:e2:f2:48:5b:08:f1:21:
59:5d:0f:a1:ed:0a:a4:fe:63:81:cb:73:4f:37:dd:
dd:75:55:8d:9d:d0:77:c6:93:94:e1:1b:22:56:10:
dd:09:33:77:8d:1a:be:b1:7d:07:ac:5d:37:ef:17:
3d:bd:3b:24:74:4c:bc:bd:2e:ee:aa:f5:aa:82:f6:
92:83:74:bf:d4:9c:20:d2:8b:03:24:da:dd:23:73:
20:92:9a:c4:7a:d8:11:5c:5d:73:28:44:82:85:50:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:58:70:74:58:F8:A8:11:42:28:3B:95:1A:B0:59:64:EE:7A:D8:05
X509v3 Authority Key Identifier:
keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d3:65:79:10:a7:c2:65:83:16:90:a5:89:a6:4c:7b:ac:be:
9f:72:99:96:25:a1:b0:16:80:ff:19:81:b2:25:8b:6d:98:17:
44:a9:6f:64:68:9e:85:7d:00:ce:b5:39:6b:22:d5:e9:1c:ef:
5a:8c:c2:f2:46:b9:70:a0:87:52:41:ef:1f:50:8f:c5:95:9d:
c4:f6:f5:33:cf:68:de:18:6e:90:55:d6:70:8f:fc:64:4c:32:
47:f7:1b:b7:7b:bb:19:91:79:92:00:d9:28:ba:51:03:6b:a5:
69:c9:9a:02:f3:b4:8a:b2:26:c8:b0:8e:49:26:47:0f:2d:24:
27:b6:74:02:92:f0:52:49:02:53:2d:07:b5:94:59:15:4c:32:
02:f4:ea:d0:fa:55:51:5f:4f:fc:30:5e:5d:64:16:27:9f:95:
45:bc:14:3a:a5:14:c9:45:c4:8a:1f:50:89:58:3d:a5:b1:cc:
f3:4f:d0:48:a7:3d:2d:34:4d:aa:ef:7c:38:5d:fa:19:2e:a5:
0d:ae:43:f7:e2:2d:47:97:9f:d8:e8:05:0c:02:12:c7:67:6f:
b3:2c:d8:c2:6d:18:d9:c9:ff:ff:58:0e:b3:de:fe:f1:fb:dd:
c5:fb:20:04:37:b1:a2:32:80:a8:f2:da:aa:e1:f6:aa:4e:f0:
68:7a:76:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR1du6O4apxa9P+KinMrlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OGZkOTc3Y2NiZTdiYjk2ZDNjMGYzMTc0Yzk5NTFiZjg3
MGZlYjAwHhcNMjYwMzAyMDIwMTIyWhcNMjYwMzAzMDIwMTIyWjAzMTEwLwYDVQQD
Eyg3MzU4NzA3NDU4ZjhhODExNDIyODNiOTUxYWIwNTk2NGVlN2FkODA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZodQshpn0/A6+H5mmDnulq11MD1
D+GkhNNezlebWnNdX2WcvLBAhPDmE8uLCp6QVHx/ZTDVdTUiv4oXb+yP2IXje/74
lLFoO82WirSb6UHnkap+JdUbWCWdfTNxf6f+AxgPjunZ/Eq0L54OiuAKlN3kopUl
wFca+sTX7AEVZyFm9ta+Nc+uROZ5VGHZ7yvaLrk8DdVpZovgdEF9lOLySFsI8SFZ
XQ+h7Qqk/mOBy3NPN93ddVWNndB3xpOU4RsiVhDdCTN3jRq+sX0HrF037xc9vTsk
dEy8vS7uqvWqgvaSg3S/1Jwg0osDJNrdI3MgkprEetgRXF1zKESChVB+zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNYcHRY+KgRQig7lRqwWWTuetgFMB8GA1UdIwQY
MBaAFDSP2XfMvnu5bTwPMXTJlRv4cP6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wZGY4MDgtNzQ3My00N2IxLTgxN2Yt
YmU3NzBlMWU2YzEzLzEvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8wZGY4MDgtNzQ3My00N2IxLTgxN2YtYmU3NzBlMWU2YzEz
LzEvTklfWmQ4eS1lN2x0UEE4eGRNbVZHX2h3X3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9NleRCn
wmWDFpCliaZMe6y+n3KZliWhsBaA/xmBsiWLbZgXRKlvZGiehX0AzrU5ayLV6Rzv
WozC8ka5cKCHUkHvH1CPxZWdxPb1M89o3hhukFXWcI/8ZEwyR/cbt3u7GZF5kgDZ
KLpRA2ulacmaAvO0irImyLCOSSZHDy0kJ7Z0ApLwUkkCUy0HtZRZFUwyAvTq0PpV
UV9P/DBeXWQWJ5+VRbwUOqUUyUXEih9QiVg9pbHM80/QSKc9LTRNqu98OF36GS6l
Da5D9+ItR5ef2OgFDAISx2dvsyzYwm0Y2cn//1gOs97+8fvdxfsgBDexojKAqPLa
quH2qk7waHp2Ow==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:17 2026 by rpki-client