Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier: N4Sw/PKGjXT7hGlejjrVQ7khMYwJ7SMw14CYndS9keE=
Subject key identifier: 70:C3:CD:F2:03:B2:69:1F:EB:0C:D7:D3:29:37:2F:44:24:FB:3F:21
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 01A13FDE71B9619417C57E2DAFDB3CC9B178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number: 1AAB
Signing time: Thu 15 Oct 2026 14:01:44 +0000
Manifest this update: Thu 15 Oct 2026 14:01:44 +0000
Manifest next update: Fri 16 Oct 2026 14:01:44 +0000
Files and hashes: 1: BJqDDKUUwP-6T-FY6LGOmkQgBFc.roa (hash: Bg8fNp2XsW4hkEUUtvGIjHCnW3BOOuyGWwHhwTGlcFU=)
2: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: gCmUDhQWCH6nfSK3wnS4Zw67AfDM1uARiiKmQIb57qo=)
3: SUsmu5Ag-4xHGcfy7I-KypJxpsc.roa (hash: n8HW5vZsZRNckM8pkS3Nq4aPiFnPsCjT5rOGpbkWTrc=)
4: VXXJGd4FEOBiTRuvKylQZSh5MPc.roa (hash: 9Lce4m09pJL6B9nHSj0pDfxmZ/8/J6ec+N4whDnZ0b8=)
5: ZuK1S3Ghc42zA0OJKwC9zhMPjd8.roa (hash: qj8u0n4HOzKDi6033J2/YLNKzCyWyCiJX2ywZI9NyUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:71:b9:61:94:17:c5:7e:2d:af:db:3c:c9:b1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Oct 15 14:01:44 2026 GMT
Not After : Oct 16 14:01:44 2026 GMT
Subject: CN=70c3cdf203b2691feb0cd7d329372f4424fb3f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:bb:7b:7a:69:06:61:b8:df:6f:21:2a:97:
3d:6a:d3:54:17:9b:69:97:45:a3:da:24:d7:85:e1:
b9:79:06:c4:5a:52:18:ec:8a:12:cd:49:ed:95:79:
b1:9d:b1:ca:e9:7a:19:33:af:db:ad:06:7f:13:fc:
49:18:b7:1b:dc:da:34:ad:fd:ec:3f:84:1e:8c:5d:
36:52:87:95:8c:ea:2b:45:c7:69:7b:7c:29:15:81:
d2:11:2d:3f:b1:00:ec:12:f1:50:75:e6:1e:09:15:
2b:63:88:61:e0:0b:e7:01:e0:69:60:83:7e:29:b6:
09:a7:60:da:a3:0a:07:e7:7e:86:ee:1b:b6:f9:1a:
7c:14:b9:5a:10:14:5a:73:3b:37:47:69:84:22:1f:
2c:5f:77:84:b5:d6:8d:c3:78:46:a6:28:51:7b:b3:
12:a5:19:09:50:d6:f7:b3:36:36:e7:f4:ee:5d:a6:
d6:cc:3f:2e:e9:53:fb:8c:3e:71:af:f2:ed:91:6a:
92:9e:23:4a:24:43:18:36:ac:70:67:7c:d7:02:16:
18:74:7a:12:f8:b2:8c:40:ff:8f:a1:a1:40:5e:ee:
7c:8d:05:88:44:09:80:8c:e5:81:52:2b:c5:13:4f:
1a:2c:9b:59:e4:52:81:7b:2b:2a:70:17:c3:93:8d:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C3:CD:F2:03:B2:69:1F:EB:0C:D7:D3:29:37:2F:44:24:FB:3F:21
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:48:05:36:f1:1f:b9:73:e6:33:8c:4d:3d:d6:a3:09:9b:df:
91:fd:9f:dd:80:95:e0:67:dc:9f:44:45:aa:f8:a7:5a:34:38:
c6:19:e1:c6:a0:14:c2:c7:c3:35:9d:dc:9b:df:d3:f9:a9:5f:
6f:23:f7:95:bc:61:e8:6e:e9:d2:e9:4e:5e:6e:3c:95:07:02:
74:8c:a5:94:9e:02:69:18:63:47:aa:fa:e6:8f:48:c7:d1:56:
65:81:6c:e0:3d:9e:af:89:1b:fe:e5:c3:51:78:1e:a2:c4:06:
35:af:36:0e:e4:8a:9a:f3:0a:31:9d:e7:be:43:59:ec:f5:d3:
01:f8:fc:d1:d6:ca:69:fa:4a:46:5b:be:75:fa:a1:30:4e:14:
d8:1d:7b:5a:2c:26:26:6b:2c:7b:5b:77:ef:01:ed:4e:e4:bd:
b7:c9:5a:01:bb:12:da:3c:7e:08:01:c8:37:93:dc:62:84:f2:
c9:83:d2:3b:d2:78:d6:7d:88:ce:5b:9e:54:34:9f:a7:a4:bb:
27:13:b2:6c:a7:26:c9:a4:6c:05:a4:c9:9a:75:18:82:7c:ec:
9b:d4:34:50:12:82:10:67:6d:d9:01:20:31:e7:62:15:8a:8f:
20:c7:a1:7c:48:29:cf:37:9a:30:88:27:a9:31:35:ea:40:dc:
ff:0c:fd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 02:08:41 2026 by rpki-client