Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
File: NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json)
Hash identifier: VRpypS4GsehevKWp62+SsXhWRkXPOr9y9wKk+aMkegE=
Subject key identifier: 17:C6:EB:D1:29:0B:5D:1B:72:8C:4D:EE:01:78:53:70:F1:C6:EA:AC
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial: 019CB0235460DDDCB0D965E93D3B1617B6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
Manifest number: 15B3
Signing time: Mon 02 Mar 2026 20:00:31 +0000
Manifest this update: Mon 02 Mar 2026 20:00:31 +0000
Manifest next update: Tue 03 Mar 2026 20:00:31 +0000
Files and hashes: 1: 5FGHLdK72qHzzMVR761PYkr0_B8.roa (hash: UFVl1rQ+AMtmM2jj8l8YxQbgnT/lIb1Y+3O5KmViWAw=)
2: AaFb4BxfuUv5NeajfZzyZ_pKzC8.roa (hash: nTI1O9abgRlXav6e6wF4qbfd1OvGtpWjUhjV79Bt2Cg=)
3: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: Bt2F4DILCPZAt7RzMw6jz2y6rln1dy59KeJzyfmfXhc=)
4: wTpGtpvYbgK_vun8v_p94uvYUWw.roa (hash: MlwFMoA+ixOAYhXtfytpmcxvQgdxjqKkv8yoqTSG6+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:23:54:60:dd:dc:b0:d9:65:e9:3d:3b:16:17:b6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Validity
Not Before: Mar 2 20:00:31 2026 GMT
Not After : Mar 3 20:00:31 2026 GMT
Subject: CN=17c6ebd1290b5d1b728c4dee01785370f1c6eaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:e7:51:3e:0f:e5:dd:60:1d:b5:92:0c:8d:
e3:42:10:5c:bc:15:46:0b:84:c3:32:15:68:93:1c:
ac:a0:a1:c0:b4:ce:c2:6f:96:f7:6f:34:01:76:4a:
71:1d:c5:1e:df:4d:9d:40:00:a4:9f:7c:52:5c:b3:
0b:61:f0:a0:13:7c:4f:0d:da:f6:4e:fb:7c:cf:c0:
ab:7f:bc:f8:0e:ba:0b:2a:96:7e:8e:bd:f1:d9:34:
d9:42:da:6b:24:88:5f:d0:4e:01:1b:4e:0c:da:f5:
77:30:0e:db:c9:20:38:02:b0:dd:06:fd:cf:cb:2c:
0b:6d:f3:0f:4e:51:2c:1e:91:94:2f:7b:ba:b6:0e:
db:a1:dd:6a:20:be:88:74:07:60:07:0e:69:2b:28:
7c:20:13:78:f0:e3:ae:ca:6f:85:5e:52:f0:f5:f6:
87:eb:9e:cf:9b:83:cf:86:1c:ae:45:64:69:e3:6b:
c4:91:22:94:dc:c8:28:c0:7b:32:8c:35:59:8a:bb:
60:b6:71:09:10:e3:be:42:67:fa:94:21:c4:dd:4b:
7a:57:29:68:67:76:e3:b3:b5:ce:e1:48:6f:78:e1:
f7:8e:64:96:66:43:12:1f:00:83:81:d2:ba:96:e5:
a1:a4:85:11:8c:76:a0:57:76:ef:3b:1d:fa:61:05:
40:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C6:EB:D1:29:0B:5D:1B:72:8C:4D:EE:01:78:53:70:F1:C6:EA:AC
X509v3 Authority Key Identifier:
keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:34:8f:b6:ca:42:bf:57:b2:d5:ed:a9:86:7b:54:c5:2f:81:
82:8c:e0:fa:09:6f:43:fa:ff:86:02:83:a2:e1:94:8d:cd:af:
50:73:72:d6:3a:56:00:66:5b:05:6c:f5:ff:7d:89:76:68:62:
0c:01:fa:42:7d:65:f2:82:d9:fe:6a:53:f6:3d:bc:60:a4:92:
69:6f:78:3b:82:46:df:92:d7:6e:3a:be:c4:ff:5a:2c:54:09:
6c:45:f4:4e:1f:27:94:c0:63:18:e4:6d:2f:07:ce:fc:55:35:
14:e6:c9:cf:a4:66:16:36:f3:02:63:a5:73:b8:14:35:65:df:
a3:ca:1f:52:e8:ee:f1:12:89:f5:56:71:ba:14:a4:7f:1e:02:
5e:af:95:1a:54:12:e5:3c:21:35:42:15:3b:d7:90:01:2c:ca:
39:6b:65:50:04:ed:e7:e1:e2:e7:bf:3d:2a:d8:b4:82:8f:09:
ae:88:c6:90:9b:da:74:bf:7e:53:25:bd:c2:7a:43:19:15:93:
47:69:80:76:71:c6:53:75:22:51:30:3a:22:b1:b6:a0:cd:b0:
e5:56:1c:f0:ea:b6:23:3b:67:fc:61:5f:d1:89:e9:76:65:9c:
80:fd:2e:f2:8c:77:07:75:e2:23:1b:aa:91:ec:42:43:6e:12:
9c:8f:80:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:20 2026 by rpki-client