Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
File: NA5TAUvwOK3g13rmeP9t80ylPcA.mft (raw, json)
Hash identifier: Z4wqPMpeygddxwhZ4zkV9pp6soZxuvz7coBMc+YYZfA=
Subject key identifier: 6A:F1:D5:5E:65:C7:5A:43:CA:54:52:8F:86:B6:EF:6A:9F:CB:37:1D
Authority key identifier: 34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
Certificate issuer: /CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Certificate serial: 019CAA590C053EC67A01A03EF7A4AD755951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
Manifest number: 07EC
Signing time: Sun 01 Mar 2026 17:01:28 +0000
Manifest this update: Sun 01 Mar 2026 17:01:28 +0000
Manifest next update: Mon 02 Mar 2026 17:01:28 +0000
Files and hashes: 1: NA5TAUvwOK3g13rmeP9t80ylPcA.crl (hash: Xy+XeQaPoH0shvb4R9vQY9ot2lx1YIJq6+j+KSTT4I4=)
2: y0EXH7ROarOi9kpgsz591gLVxK4.roa (hash: k4u5/XxA6Sf9mSKxl8oxoWnS212/XxShJpEKu6orXMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:0c:05:3e:c6:7a:01:a0:3e:f7:a4:ad:75:59:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Validity
Not Before: Mar 1 17:01:28 2026 GMT
Not After : Mar 2 17:01:28 2026 GMT
Subject: CN=6af1d55e65c75a43ca54528f86b6ef6a9fcb371d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ec:ce:39:b7:5d:25:5e:7d:80:bb:e9:65:e0:
58:ba:a9:95:b1:f7:f0:c4:80:43:f9:77:c9:a3:39:
f8:d2:27:4c:91:75:1b:0e:88:72:bb:03:e0:70:f3:
b6:7b:ae:3f:fb:1a:ec:88:7e:ba:7e:69:17:fa:09:
13:ee:9c:b2:e5:42:4f:12:ab:a5:f2:aa:4c:0a:a8:
e9:f1:6e:bd:a2:5f:c2:81:64:04:c6:06:44:13:16:
c8:6c:de:43:3d:ad:de:f0:d9:60:dc:8b:fd:f1:e5:
de:6d:a0:72:bc:85:c9:e7:7e:b9:fa:42:a1:39:69:
28:83:02:f8:10:be:e0:5d:b3:4b:c9:11:68:2a:6a:
54:64:6e:c7:cc:c8:00:ab:39:0c:39:f3:38:f8:9c:
9c:92:59:ae:9d:65:3f:86:8b:0f:f6:7a:39:cd:39:
df:eb:99:fd:7e:40:58:6b:8e:b7:79:47:20:c8:44:
79:0c:55:13:27:ad:e7:8a:70:8e:f9:31:be:ba:8c:
f5:11:ef:e3:ce:2a:07:11:f2:82:3f:e6:de:2b:fc:
b8:47:91:a2:98:5f:e1:c6:37:a9:a1:9c:42:f5:89:
05:27:88:2b:eb:94:05:91:6a:c1:d4:14:9b:7b:88:
3e:f3:72:21:b6:31:f0:d7:a2:0c:a1:4a:e8:72:8e:
c1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F1:D5:5E:65:C7:5A:43:CA:54:52:8F:86:B6:EF:6A:9F:CB:37:1D
X509v3 Authority Key Identifier:
keyid:34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:99:9a:25:01:7c:e5:c4:51:b9:32:46:13:fa:e9:51:14:e8:
cd:01:c0:92:c5:ac:71:e6:21:f3:20:36:61:8d:3d:04:cb:23:
5f:62:89:3d:0b:77:dc:1e:1d:37:36:31:2c:b3:cd:8c:c2:d8:
e6:e2:bb:ee:77:11:45:81:5b:4d:1f:31:95:be:1e:da:8e:0e:
c0:37:d8:82:7d:00:de:e1:08:50:88:42:d3:7c:83:22:e5:a1:
f0:86:e4:b8:98:3a:c0:bf:b2:7f:2b:e3:ac:58:45:fb:e4:8a:
fb:a0:05:a9:c1:c3:d2:9b:e7:72:d7:b3:7b:44:05:9f:20:f0:
e9:c0:d9:0c:ae:b1:ae:cf:64:66:cc:fb:6e:f1:75:d3:e7:06:
97:ab:b5:a8:a4:43:f0:9b:23:cb:3f:ae:29:52:3c:6d:a1:ef:
cb:ca:6d:1a:3f:25:2e:83:23:cc:d9:d6:fc:d4:90:a3:4a:cd:
ce:7a:76:19:7a:43:af:5a:de:e9:b0:e0:e2:ee:bd:14:1f:3a:
d8:7c:d2:26:e5:1d:45:5f:c0:91:4c:41:a7:72:cc:c6:92:d4:
3a:ce:81:62:28:5f:10:34:ae:b5:d7:28:0e:fd:3d:16:b5:88:
84:af:01:7b:1c:e5:10:6c:34:91:47:83:f3:5b:f9:99:ad:30:
ab:25:c2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:43 2026 by rpki-client