Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json)
Hash identifier: UgVmUzq6aLYxZdiImSkHqXwIAOoGiXhuNgertX1SI3k=
Subject key identifier: 0F:C7:B3:D5:3A:30:20:BD:93:FD:E6:BF:49:B6:80:B0:C7:F3:B6:01
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 019CAC46BD7FD41C3484B73631E34A4EA4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
Manifest number: 12EB
Signing time: Mon 02 Mar 2026 02:00:42 +0000
Manifest this update: Mon 02 Mar 2026 02:00:42 +0000
Manifest next update: Tue 03 Mar 2026 02:00:42 +0000
Files and hashes: 1: 4l82aU37AqmgAJlyCPGwmnooDcg.roa (hash: IgTUPhE8nSCBnJ2HPZrElAawWv50u6q/sojixDH5raQ=)
2: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: 5c0K+VRjkDnn3sfHE3e9DT8gCief9QcdBa2a8PTANWU=)
3: hZf5u0QbS1XG7PsEyRnhTDo6HjI.roa (hash: 3UtzjBeSVvMSTFyNhnUR4ZuKLONPZvV6PMClfmnPEuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:bd:7f:d4:1c:34:84:b7:36:31:e3:4a:4e:a4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: Mar 2 02:00:42 2026 GMT
Not After : Mar 3 02:00:42 2026 GMT
Subject: CN=0fc7b3d53a3020bd93fde6bf49b680b0c7f3b601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:5a:77:d7:5f:d4:15:00:ac:5b:0f:33:e8:
87:63:53:af:fd:a0:69:35:d0:fc:1b:e7:fe:1c:a1:
1c:48:23:50:34:66:0a:99:46:2d:52:d7:c4:4a:81:
4c:21:b4:e8:e6:33:c3:64:f6:7f:ce:2a:e8:78:e9:
39:69:69:46:31:4e:ab:18:fe:1c:8c:7f:43:6f:7f:
1c:b6:70:e5:fe:84:b6:2f:0c:58:fe:39:ff:ec:b4:
2b:b4:f8:ac:93:6e:6d:60:90:f3:2e:8c:fb:a5:25:
1d:44:40:fb:e5:cd:89:c8:6b:50:ee:b3:31:3d:32:
3f:19:1e:cc:75:fc:cb:02:58:9d:5f:e1:a6:f9:9c:
22:68:3c:cc:4c:58:03:af:6f:16:9d:41:25:f1:1e:
3a:c7:b3:2d:fe:c1:63:e1:ec:87:1c:86:44:0b:30:
64:9f:8d:6e:61:5a:a2:a3:08:ed:34:f5:02:c3:0a:
0b:57:ad:c8:99:e7:1e:7e:bf:6f:89:01:9f:41:7e:
7a:8f:06:ac:e3:0c:0e:36:20:b7:d7:e0:b4:48:67:
de:4f:92:2a:48:64:c1:15:a6:c8:2f:ed:66:5f:a2:
2f:8e:a4:46:b3:12:25:4a:bf:95:ce:9d:34:4a:c1:
49:28:83:e6:ac:f0:69:40:6f:aa:e1:5c:fd:c1:dc:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C7:B3:D5:3A:30:20:BD:93:FD:E6:BF:49:B6:80:B0:C7:F3:B6:01
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:04:06:2d:2b:8d:7e:21:13:0b:f6:02:fa:cf:3c:38:2e:d0:
c3:95:61:e4:d7:b5:70:21:a6:31:20:36:65:00:d6:7c:31:cb:
60:9a:5a:7e:90:dd:30:7d:1f:5d:d3:ea:5b:c9:d1:2d:a6:c9:
9e:5c:c6:a5:9e:9f:26:3c:dc:db:01:47:24:38:f1:ca:9c:0d:
da:18:e6:90:62:fd:c3:ff:1a:e5:4e:3e:b9:e0:0c:16:e3:b1:
58:5e:c9:31:d6:3e:3c:f2:6d:d5:d9:99:3b:bb:40:5c:4d:b2:
06:1a:e5:cd:57:5b:4d:bc:5e:bc:fc:c4:d9:37:0d:f5:7e:f2:
d6:f5:bd:c9:ad:d4:ad:e2:cc:04:fc:60:b5:54:1c:82:5e:2f:
12:f8:3d:75:f6:c8:4d:ba:0c:96:f7:f3:22:74:96:1c:51:fc:
81:9f:94:6e:9a:cd:ec:4b:c2:df:e2:dd:78:f7:69:ac:df:35:
f6:2c:10:c5:0c:23:82:f0:70:f4:bf:cd:f0:6d:46:d6:ed:14:
03:b0:f4:72:00:ec:3b:0c:66:d0:c5:9f:82:09:11:8b:ee:bc:
76:ea:53:4d:cb:9d:27:a6:45:af:31:79:87:1b:32:82:f2:66:
e8:c3:d2:f6:98:04:92:54:46:0f:cd:71:3d:de:74:56:2b:2a:
a7:0e:82:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:55 2026 by rpki-client