Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
File: NXAXpX-ccN-vZpOjJLumhne4ePM.mft (raw, json)
Hash identifier: vNLLsLfYWkSy4ASGAMObpArm7wOf3PPszh2Vfqng2l8=
Subject key identifier: A4:62:7A:13:96:AB:36:7D:ED:5A:26:37:05:1A:85:8B:8F:7F:CA:AD
Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3
Certificate serial: 019CAAC674FFE00F099FDC8B73EB66A391B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:00:58 +0000
Manifest this update: Sun 01 Mar 2026 19:00:58 +0000
Manifest next update: Mon 02 Mar 2026 19:00:58 +0000
Files and hashes: 1: 1-sDBo1h39Efa-H3ly5K8_3PMd8E.roa (hash: nnHWf61PhBu5tpbkXsvcIaf2sAJomeNe4RjS/qDyEu8=)
2: NXAXpX-ccN-vZpOjJLumhne4ePM.crl (hash: qO7gvZUQGrt3Tu+/PhanBBemhbDwwarast2d7xu8o2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:74:ff:e0:0f:09:9f:dc:8b:73:eb:66:a3:91:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3
Validity
Not Before: Mar 1 19:00:58 2026 GMT
Not After : Mar 2 19:00:58 2026 GMT
Subject: CN=a4627a1396ab367ded5a2637051a858b8f7fcaad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:b2:8f:e5:42:1e:2b:bb:d0:e3:b0:bd:df:
62:d2:c1:53:7f:da:b4:e3:7f:de:ca:e6:08:27:5f:
bb:60:f3:73:7c:57:bc:c8:ba:b2:25:f2:99:1f:b3:
55:63:38:6d:9e:f9:ca:54:14:38:a5:ad:5e:1e:8f:
ad:d9:95:8a:7d:d7:31:c8:e3:34:d8:98:df:f2:3b:
74:87:b5:45:0a:96:c9:04:f9:10:8c:f6:66:11:bf:
ad:03:2e:99:18:eb:e9:af:cc:4a:41:48:c5:61:88:
e6:51:92:d1:56:6b:22:6f:7d:42:0b:c3:11:d0:ae:
e1:19:d9:2e:a0:d7:38:2f:9c:64:f5:e9:5f:0b:5a:
b5:34:94:10:ec:96:29:f7:c4:bc:f2:d3:da:c0:97:
35:da:f4:0d:83:eb:fd:18:8c:bd:58:f2:57:64:0a:
46:fb:83:e4:dd:89:07:71:6c:21:06:d6:49:eb:9e:
90:91:ad:06:13:e9:d9:f9:ca:71:14:3b:d2:94:19:
f5:4e:cf:28:80:d5:e3:13:16:76:3f:80:7c:dc:99:
44:d0:c4:3a:dc:13:27:7d:33:9a:7c:db:bf:06:e8:
fa:13:e9:1c:44:1f:d8:df:ab:79:fd:e1:94:c0:21:
06:25:5c:52:b9:ec:e7:c5:94:d4:75:68:2f:14:72:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:62:7A:13:96:AB:36:7D:ED:5A:26:37:05:1A:85:8B:8F:7F:CA:AD
X509v3 Authority Key Identifier:
keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:55:f5:bd:da:35:0e:4f:60:11:e3:a8:7f:2e:6e:61:34:b3:
e1:d9:4b:3f:72:1c:55:24:69:64:69:9d:d2:e1:3b:6e:ac:8b:
2d:5a:da:57:b1:7a:e4:25:f0:6a:24:f6:ef:4d:d9:49:d7:50:
b4:4e:63:30:d4:b5:96:89:85:05:b0:4b:0a:51:83:4b:c2:7f:
df:fd:8f:5d:49:7b:54:e6:69:15:e4:70:ae:ab:09:22:52:a5:
5f:87:d5:aa:20:2e:d9:2d:b8:ba:40:9b:c3:60:00:9b:b7:04:
b8:ca:af:f9:7d:2d:d9:44:7a:7f:73:20:d5:91:5a:b6:bb:df:
3f:9d:4a:e0:33:2c:76:10:e4:49:95:49:e5:25:90:53:be:35:
23:fc:f3:f7:da:74:fd:e2:d2:30:63:41:59:c2:45:e6:2e:4d:
70:41:e2:3f:d2:fa:4f:94:ba:82:47:4b:47:1e:17:22:79:7e:
18:58:ab:c6:62:b7:44:0d:bd:99:28:85:8b:9f:c9:fb:b9:96:
97:65:a9:cf:31:04:59:d2:2f:e6:8c:49:a9:94:c8:11:81:d1:
5b:7d:cb:d2:c2:a7:41:89:da:6c:ad:30:f6:3b:a8:7b:e8:cb:
a8:2e:dc:82:3d:ed:9b:51:b4:60:c7:07:3a:29:cc:73:34:2c:
15:c0:73:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:37 2026 by rpki-client