Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
File: NAd7QemIc-fwb7HfP105xyGxND8.mft (raw, json)
Hash identifier: RJ7CsxQ6dB6/RdGm8buU99DXQIvV1AapilfHONTsbFo=
Subject key identifier: 1E:8E:94:29:F4:DB:16:EA:16:A5:46:59:DC:FA:85:43:12:2D:CD:F2
Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Certificate serial: 019CAD5A78C7E60C2AFC96142619A8457992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
Manifest number: 1850
Signing time: Mon 02 Mar 2026 07:01:53 +0000
Manifest this update: Mon 02 Mar 2026 07:01:53 +0000
Manifest next update: Tue 03 Mar 2026 07:01:53 +0000
Files and hashes: 1: 1-V8x_3FzosbTSoBrUqHkMLV-44Q.roa (hash: RPgG1SJlqfEsV732+LedUmH+jks8p7lo8I/jwtQGL9I=)
2: NAd7QemIc-fwb7HfP105xyGxND8.crl (hash: L4V0Q8F0Mye1/wVjWo3w/b2AieSsSNp475kpeKqnk/M=)
3: crwkgLLFi1G5PStFW-NTuVWRboI.roa (hash: DbnKu1FnYU/F077cUpyCX4xEr0gw1CrOBRGG+CxkZak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:78:c7:e6:0c:2a:fc:96:14:26:19:a8:45:79:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Validity
Not Before: Mar 2 07:01:53 2026 GMT
Not After : Mar 3 07:01:53 2026 GMT
Subject: CN=1e8e9429f4db16ea16a54659dcfa8543122dcdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:12:58:f4:5d:85:17:24:bc:53:06:1b:cc:38:
19:c7:ca:b5:6c:fa:50:8d:8c:59:fa:cb:65:f9:32:
f0:d0:90:e4:43:3c:9e:b4:7a:24:2c:eb:63:c6:7c:
d3:5d:3c:c8:3c:a5:53:ce:dd:18:ea:3a:fe:6c:e7:
6c:e9:41:66:1b:7c:c0:aa:95:a7:52:99:28:4b:b2:
8e:8b:07:fc:30:55:73:61:60:01:34:57:21:c6:65:
5e:b2:71:cb:d2:38:3f:d7:70:d8:12:ba:b1:35:9f:
8f:b4:9d:3c:7e:f7:4c:53:78:12:5f:b3:4f:c0:2e:
85:ed:5a:48:86:9f:e6:56:02:58:f3:c9:d6:11:18:
d1:31:88:92:cb:29:3c:d2:39:57:1f:3c:55:84:2b:
c8:69:9a:04:59:4b:e3:b2:a3:ae:f8:08:8e:a1:ab:
72:cf:f8:bc:cd:1b:76:9a:13:5c:20:8b:ed:8d:9b:
d7:61:eb:9a:fa:53:e3:5a:d2:e2:6d:b8:50:dd:cc:
85:7c:f9:1b:e5:eb:d1:06:24:b4:ec:5f:d2:d6:44:
1f:db:13:53:7d:f5:3d:2e:b6:8a:f0:bf:a0:bd:99:
46:98:30:3a:66:1c:81:56:2f:16:a7:42:91:f6:53:
51:34:d9:b5:c1:a1:13:4c:1a:76:cc:55:f6:11:26:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8E:94:29:F4:DB:16:EA:16:A5:46:59:DC:FA:85:43:12:2D:CD:F2
X509v3 Authority Key Identifier:
keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:82:ca:30:35:92:1c:05:d0:2d:f9:26:ae:98:4b:d6:29:97:
c1:34:8a:f6:a9:4e:36:86:32:3d:a7:eb:20:67:52:d9:20:e4:
05:ed:21:d5:06:da:d3:20:07:96:92:d4:ed:e9:3e:1f:f8:df:
59:22:40:5a:d2:71:fc:8c:ef:28:83:b0:bc:8d:d6:57:dd:8e:
e0:e7:9f:31:86:77:b4:66:28:0b:d4:cc:84:40:5d:28:d7:42:
c1:aa:25:6d:b7:8d:61:89:38:1d:3f:87:67:e2:0a:15:19:bb:
d0:72:b8:65:be:b0:81:a4:0d:e5:02:ba:f5:e6:a1:42:10:db:
9b:99:08:77:fb:db:9f:02:ed:de:b4:9e:22:23:d8:03:21:9b:
63:82:bc:4c:94:33:c6:66:71:c1:5a:8c:60:2f:11:30:08:6d:
94:3a:e2:02:cb:08:d7:1c:ca:91:c0:97:8d:a9:03:d2:03:f5:
fa:b0:a2:4e:ae:d6:67:58:df:bc:58:ea:8b:66:3b:04:1b:e7:
33:0b:41:13:ad:a0:cb:04:91:67:2a:4b:51:73:d8:66:0d:ca:
75:75:44:58:62:8d:5f:1f:52:18:85:04:3a:1d:3a:75:c2:88:
6a:72:16:42:d7:2c:8b:55:b4:de:bc:70:12:0b:c5:08:8e:65:
73:cc:7f:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWnjH5gwq/JYUJhmoRXmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MDc3YjQxZTk4ODczZTdmMDZmYjFkZjNmNWQzOWM3MjFi
MTM0M2YwHhcNMjYwMzAyMDcwMTUzWhcNMjYwMzAzMDcwMTUzWjAzMTEwLwYDVQQD
EygxZThlOTQyOWY0ZGIxNmVhMTZhNTQ2NTlkY2ZhODU0MzEyMmRjZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxJY9F2FFyS8UwYbzDgZx8q1bPpQ
jYxZ+stl+TLw0JDkQzyetHokLOtjxnzTXTzIPKVTzt0Y6jr+bOds6UFmG3zAqpWn
UpkoS7KOiwf8MFVzYWABNFchxmVesnHL0jg/13DYErqxNZ+PtJ08fvdMU3gSX7NP
wC6F7VpIhp/mVgJY88nWERjRMYiSyyk80jlXHzxVhCvIaZoEWUvjsqOu+AiOoaty
z/i8zRt2mhNcIIvtjZvXYeua+lPjWtLibbhQ3cyFfPkb5evRBiS07F/S1kQf2xNT
ffU9LraK8L+gvZlGmDA6ZhyBVi8Wp0KR9lNRNNm1waETTBp2zFX2ESbIpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6OlCn02xbqFqVGWdz6hUMSLc3yMB8GA1UdIwQY
MBaAFDQHe0HpiHPn8G+x3z9dOcchsTQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC80NDg4MDAtODI5ZS00YjdhLTkyYzQt
Y2I3Y2JjYTdjMWUwLzEvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC80NDg4MDAtODI5ZS00YjdhLTkyYzQtY2I3Y2JjYTdjMWUw
LzEvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYLKMDWS
HAXQLfkmrphL1imXwTSK9qlONoYyPafrIGdS2SDkBe0h1Qba0yAHlpLU7ek+H/jf
WSJAWtJx/IzvKIOwvI3WV92O4OefMYZ3tGYoC9TMhEBdKNdCwaolbbeNYYk4HT+H
Z+IKFRm70HK4Zb6wgaQN5QK69eahQhDbm5kId/vbnwLt3rSeIiPYAyGbY4K8TJQz
xmZxwVqMYC8RMAhtlDriAssI1xzKkcCXjakD0gP1+rCiTq7WZ1jfvFjqi2Y7BBvn
MwtBE62gywSRZypLUXPYZg3KdXVEWGKNXx9SGIUEOh06dcKIanIWQtcsi1W03rxw
EgvFCI5lc8x/uw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:50 2026 by rpki-client