Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json)
Hash identifier: zxfhwdZStL6531M3ymnccDfPD254mN7B4pNCj1tEzPk=
Subject key identifier: B1:52:9F:44:17:94:02:55:69:1C:99:E7:A4:6A:FC:07:9A:F7:D0:62
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 019D9BBEFC1C90A088BB0734FBC87438A6C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
Manifest number: 1367
Signing time: Fri 17 Apr 2026 14:01:18 +0000
Manifest this update: Fri 17 Apr 2026 14:01:18 +0000
Manifest next update: Sat 18 Apr 2026 14:01:18 +0000
Files and hashes: 1: 4l82aU37AqmgAJlyCPGwmnooDcg.roa (hash: IgTUPhE8nSCBnJ2HPZrElAawWv50u6q/sojixDH5raQ=)
2: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: 7YKqmpWamP67DwHIV8PpSMAu7VffprAJDv0lbghiYk8=)
3: hZf5u0QbS1XG7PsEyRnhTDo6HjI.roa (hash: 3UtzjBeSVvMSTFyNhnUR4ZuKLONPZvV6PMClfmnPEuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:fc:1c:90:a0:88:bb:07:34:fb:c8:74:38:a6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: Apr 17 14:01:18 2026 GMT
Not After : Apr 18 14:01:18 2026 GMT
Subject: CN=b1529f4417940255691c99e7a46afc079af7d062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:da:29:86:e1:5a:92:fc:8e:48:ab:40:63:
ec:a6:bb:35:53:0e:2d:10:ad:b3:e5:05:31:a2:e3:
88:c9:61:47:0c:96:aa:72:11:a0:17:2f:23:ee:bd:
73:cd:2c:19:e7:57:a2:6d:bf:28:1a:b5:7b:43:61:
8b:d6:31:d3:de:61:26:cf:2a:7d:c1:9c:58:c6:54:
4d:b7:5a:79:ba:42:1f:a1:25:1d:84:1d:7d:f3:31:
ef:b5:42:e5:60:b3:54:3d:fd:10:b3:6f:73:0f:e9:
14:54:de:65:c0:9c:8b:94:30:12:75:c8:f9:5a:29:
09:e7:e2:e3:2f:ea:44:81:33:c0:ca:6e:ba:5e:8d:
85:f9:87:74:a9:1b:64:4f:73:8a:1d:22:6f:70:5c:
07:b7:8e:d8:c3:32:39:6a:89:a5:b1:c8:eb:df:4e:
1e:07:9e:3f:5f:37:82:67:22:99:e1:4c:d1:d8:9c:
bd:ee:49:09:25:ba:16:99:05:45:6d:0a:17:88:cf:
ae:52:a8:58:ac:b1:61:00:ce:a3:5d:12:63:87:c4:
f3:a3:04:44:b8:a8:99:14:ee:a8:d6:a8:d2:e6:22:
a4:1d:ed:37:6d:d5:ff:64:20:76:7b:3c:9f:55:14:
ba:4c:60:51:79:57:19:36:65:1e:8b:c8:0b:1e:27:
cf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:52:9F:44:17:94:02:55:69:1C:99:E7:A4:6A:FC:07:9A:F7:D0:62
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:07:1e:82:ff:29:48:f4:d4:e6:a8:fa:05:49:e2:86:e9:43:
36:da:c9:11:2e:78:02:08:8b:24:6e:be:52:4b:88:bd:db:7b:
42:5a:2c:82:99:e3:f3:ea:08:7c:5a:63:2a:cd:2d:39:d4:66:
8a:5b:03:0f:15:41:d7:9b:fb:58:c3:bf:8f:ca:4e:bc:e6:23:
d6:48:1f:bc:e9:66:2f:8d:91:02:dc:8e:11:55:22:c4:d6:6a:
42:68:e8:75:58:c1:61:c6:0e:6b:9f:63:a8:f2:70:84:55:6b:
6d:ca:dd:c1:3a:bb:e9:0d:e1:1c:cf:bb:d5:08:13:a5:33:07:
83:61:93:fd:be:fd:24:2b:b7:9b:0d:97:d7:e8:13:e0:59:cc:
bc:1c:07:d9:ce:50:5c:0c:2b:32:77:87:a6:10:35:f0:46:b8:
40:7c:39:d9:e9:e0:94:17:dc:8e:15:0c:6b:41:d0:23:00:c2:
79:cb:94:6e:63:72:b5:61:e2:e8:a9:db:54:66:80:90:dd:a7:
3f:95:87:fb:78:a4:91:a3:79:a8:61:b2:7f:40:9a:1c:99:62:
a9:a8:10:6f:b2:4a:82:87:d7:28:91:d0:72:7f:e8:4c:99:93:
26:29:2b:ec:b9:02:18:48:65:89:bb:1b:50:58:34:f7:53:e7:
79:21:fe:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:25:37 2026 by rpki-client