Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
File: NLypT2th4QEA3Dpxhv-j-bAMad0.mft (raw, json)
Hash identifier: Lvjmg2t2K2HpDSnXkkYiYC3psJvaFNFVuiNjjiiyiJk=
Subject key identifier: E1:65:D1:C3:36:22:F5:C4:EB:96:44:17:49:00:95:CB:C1:89:76:3A
Authority key identifier: 34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
Certificate issuer: /CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Certificate serial: 019CAA59188A5B2457D3DF9FEBF650FCF22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
Manifest number: 14D8
Signing time: Sun 01 Mar 2026 17:01:31 +0000
Manifest this update: Sun 01 Mar 2026 17:01:31 +0000
Manifest next update: Mon 02 Mar 2026 17:01:31 +0000
Files and hashes: 1: I5fzdJCzLFrR9wNTsga_tOMPXh4.roa (hash: 0AweIDgWya6VM5E4CtElUS8whqXsBUXH8jRWGfH9rhs=)
2: LOvD5EwzbUXufLKBeuukoX61MEQ.roa (hash: eV3twutKHrIqu2Hm8QSddNGhB24fmUU3/K7sFbBo9AE=)
3: NLypT2th4QEA3Dpxhv-j-bAMad0.crl (hash: YTxaLfzBgNAKHSNtykutGlzwKCL0Li2usAuyqyewiY4=)
4: fjoBq7cUoJrRC1EG6pKDwLfdkWo.roa (hash: PIJVCUNM2lCSZBzxydlr8AgpZlMx3agile2sKdoLeqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:18:8a:5b:24:57:d3:df:9f:eb:f6:50:fc:f2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Validity
Not Before: Mar 1 17:01:31 2026 GMT
Not After : Mar 2 17:01:31 2026 GMT
Subject: CN=e165d1c33622f5c4eb964417490095cbc189763a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:3c:86:a5:88:91:f3:d1:b2:23:d9:ef:9d:
df:04:36:39:d3:a1:9c:1d:79:7b:cf:67:e4:4e:8b:
cd:ed:56:20:52:47:24:9b:21:5a:96:46:a0:a1:72:
35:f6:0a:5a:1f:8a:f0:b7:de:80:2f:9c:a7:48:18:
e5:41:d5:37:11:11:38:0b:61:98:ce:0e:0e:60:88:
0a:f4:42:fb:16:ef:29:1f:63:0d:66:f5:87:69:e5:
88:c9:0e:27:5c:ca:4a:fd:36:56:a5:80:45:24:c2:
56:c6:bc:58:db:e2:cb:aa:a7:26:df:d4:42:84:8d:
b9:98:89:19:e6:1f:8b:e8:73:c4:33:ea:0b:58:d8:
e0:87:df:59:53:4b:8b:15:ab:80:06:fd:3b:e3:fe:
6e:df:94:87:d0:93:6e:d5:ed:d4:23:c0:5b:84:34:
9b:33:d4:1d:80:a1:1a:f0:c7:d9:72:3f:f5:cb:d0:
e0:a6:c7:a1:f3:40:a1:f0:1e:fb:c0:14:df:2d:6f:
c5:33:e6:3b:18:f2:ec:38:a0:a2:19:bf:e1:b6:97:
f2:29:09:88:4a:a2:56:e9:b1:e7:05:b4:46:ed:89:
b4:4e:53:ff:fe:8c:30:c7:3f:f6:40:3f:8f:1b:00:
69:ad:df:a2:18:8d:6c:a2:69:78:3a:80:4c:f7:92:
e8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:65:D1:C3:36:22:F5:C4:EB:96:44:17:49:00:95:CB:C1:89:76:3A
X509v3 Authority Key Identifier:
keyid:34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:06:d8:b1:14:c6:7a:be:5d:a2:86:78:a7:4d:1f:4c:12:1b:
be:e7:0e:5f:c3:d1:1e:23:2b:6b:8f:56:90:80:49:e9:11:00:
f2:86:9f:36:d2:40:20:58:4e:1b:9d:f2:59:7a:bc:eb:f1:b5:
1a:b0:20:ad:cc:a1:36:62:70:e3:4a:58:96:9e:b5:0c:d8:a7:
4a:3f:4e:ba:b8:82:ee:19:03:e1:79:75:ec:b7:bb:1a:ab:e3:
7a:0a:ad:cb:b6:ef:56:14:f4:6d:80:eb:d5:a1:d4:12:fe:a1:
6f:c0:5a:c7:1f:20:b0:e1:6c:d6:85:75:51:74:45:40:91:e6:
0f:a1:84:da:59:78:b3:8c:57:f3:cc:9e:dc:6b:7d:c9:18:82:
59:ec:60:c2:7b:3e:c4:71:cf:f2:44:97:8d:cf:6d:d8:d3:15:
33:79:9b:01:fa:8c:6b:b1:b2:64:ae:89:29:f6:0f:a2:ee:6e:
a7:ae:fb:1a:63:c5:72:40:9e:31:9a:90:29:1f:86:46:51:04:
55:24:64:1c:1c:b0:87:da:2b:dd:fd:57:7d:d6:44:d4:eb:60:
43:54:c7:30:8d:34:91:d6:e3:d4:f6:00:d1:69:9b:88:fc:9d:
bc:9f:3d:44:ae:b7:d8:84:2e:3e:b5:dc:d2:a8:5e:83:cc:39:
61:b7:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:04 2026 by rpki-client