Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier: d+pO2gQTqqh//OM8efDxLAyxqk48PyFT0UlcHyIQ9Ic=
Subject key identifier: 3A:D6:70:80:E5:8F:6C:6F:4D:7C:AF:5B:8C:3D:FA:25:46:E7:54:97
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 019CAD905FC8BE65973F4DA796DE8C3AE930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 08:00:45 +0000
Manifest this update: Mon 02 Mar 2026 08:00:45 +0000
Manifest next update: Tue 03 Mar 2026 08:00:45 +0000
Files and hashes: 1: BJqDDKUUwP-6T-FY6LGOmkQgBFc.roa (hash: Bg8fNp2XsW4hkEUUtvGIjHCnW3BOOuyGWwHhwTGlcFU=)
2: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: 8np4bpIrHQSyfvPCEKi1Og2BRTdc5gKUHz8P/cZeGrs=)
3: SUsmu5Ag-4xHGcfy7I-KypJxpsc.roa (hash: n8HW5vZsZRNckM8pkS3Nq4aPiFnPsCjT5rOGpbkWTrc=)
4: VXXJGd4FEOBiTRuvKylQZSh5MPc.roa (hash: 9Lce4m09pJL6B9nHSj0pDfxmZ/8/J6ec+N4whDnZ0b8=)
5: ZuK1S3Ghc42zA0OJKwC9zhMPjd8.roa (hash: qj8u0n4HOzKDi6033J2/YLNKzCyWyCiJX2ywZI9NyUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:5f:c8:be:65:97:3f:4d:a7:96:de:8c:3a:e9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Mar 2 08:00:45 2026 GMT
Not After : Mar 3 08:00:45 2026 GMT
Subject: CN=3ad67080e58f6c6f4d7caf5b8c3dfa2546e75497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:64:99:c5:6f:f4:a4:db:f8:cf:1f:46:2b:39:
e8:73:4c:f6:57:aa:e9:55:5c:96:80:a1:bf:cf:06:
67:01:72:0a:bc:51:24:45:a7:a7:62:00:44:77:12:
08:72:e8:d7:f5:1c:9e:ca:40:ca:39:50:3e:4f:6d:
d4:9e:8f:b9:ce:bf:90:19:3a:31:22:d6:f6:e6:5d:
8b:0e:cc:d2:2c:ad:79:43:46:79:1f:72:32:3c:09:
a3:df:15:cb:25:f1:02:29:e0:8c:15:6d:1d:be:7c:
5e:05:07:e8:7d:cd:d6:0d:cb:49:c4:2e:ce:86:bf:
49:68:4e:e4:5b:3a:98:71:58:3f:7c:be:fc:4a:88:
a1:57:8a:a1:68:72:25:71:8b:f8:0e:20:01:85:c3:
a1:73:97:da:90:7a:d7:d9:67:1b:18:8c:7d:5b:90:
52:47:f4:7e:29:5b:0f:6b:35:ef:95:e3:3c:1c:e3:
5c:e6:8b:f6:5b:dc:b9:34:1e:7f:0a:75:96:1b:4a:
9f:8d:40:9f:4f:5d:f5:f9:55:a1:e3:95:8e:f0:b7:
59:6b:64:49:a0:67:04:fb:0d:94:5d:14:c9:be:da:
ef:50:df:c4:2c:7e:92:77:8c:65:c3:20:ee:da:8f:
55:15:28:8f:64:b8:73:77:58:72:70:80:6d:9a:54:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D6:70:80:E5:8F:6C:6F:4D:7C:AF:5B:8C:3D:FA:25:46:E7:54:97
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:42:b2:7c:a5:3b:2e:98:83:3c:65:cf:2a:7e:92:3f:3c:4c:
48:bb:d3:7e:ea:ea:c3:34:ae:91:ed:32:3a:7b:a3:4d:6a:80:
cb:08:14:31:f9:36:65:2f:18:84:c6:39:86:59:01:0a:5f:2e:
b0:ee:0f:eb:f8:5f:bd:bf:4f:58:08:e4:a1:cb:17:b7:94:43:
c2:e3:50:46:59:f7:33:ee:a2:5a:fb:6f:21:df:2c:49:ba:58:
eb:ce:a7:9d:e1:57:33:ff:11:10:38:99:cd:d7:62:be:14:6d:
59:a8:10:93:9e:b3:06:86:0d:be:99:88:05:0d:d1:4a:fe:7f:
ab:de:ed:9e:40:22:3d:ea:3c:db:6b:7c:46:28:ed:75:2b:00:
19:94:a0:02:3f:02:eb:30:f7:be:d1:9e:d9:a9:00:84:10:ac:
10:d7:1a:ec:e7:5a:32:95:c2:ce:b8:50:b8:b9:9c:95:90:e7:
94:e2:d9:0a:ca:a7:99:6b:44:c1:65:7a:94:6d:9c:93:a5:7c:
fe:3c:b1:f7:fa:cd:c7:6a:94:7f:98:20:85:a9:e8:92:54:d2:
8a:81:68:25:2c:43:f6:e9:3c:08:02:df:31:95:e8:4f:52:f2:
f1:06:cd:f1:da:3d:72:f4:bc:9e:20:7d:60:0b:2f:a6:26:15:
5c:ca:44:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:37 2026 by rpki-client