Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
File: NHoE4awkx5d2NHg55RNMmqo4v1c.mft (raw, json)
Hash identifier: CfUjsJyMLDJ3oe6Z/d926Uj05sZdx6Y/It5g5Gz54gM=
Subject key identifier: 3E:87:A0:DB:4E:1D:7B:CA:79:54:D9:23:E8:F0:3B:27:BE:C3:29:BA
Authority key identifier: 34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
Certificate issuer: /CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Certificate serial: 019CADC78620B979DF30608033A23803044E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
Manifest number: 138C
Signing time: Mon 02 Mar 2026 09:01:00 +0000
Manifest this update: Mon 02 Mar 2026 09:01:00 +0000
Manifest next update: Tue 03 Mar 2026 09:01:00 +0000
Files and hashes: 1: NHoE4awkx5d2NHg55RNMmqo4v1c.crl (hash: uKJU6XteDOJ2ALSf5n5d8Gji5alRiy8+/b6cIJdwrrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:86:20:b9:79:df:30:60:80:33:a2:38:03:04:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Validity
Not Before: Mar 2 09:01:00 2026 GMT
Not After : Mar 3 09:01:00 2026 GMT
Subject: CN=3e87a0db4e1d7bca7954d923e8f03b27bec329ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:18:39:16:29:94:45:b3:05:ef:28:b5:a8:
f5:ce:9c:2a:dd:e6:37:64:ca:f6:41:81:e3:10:57:
7c:e6:12:86:45:49:7a:c5:79:72:7d:9d:26:f1:e2:
99:3b:4a:ea:d3:19:c8:97:e4:0a:1c:6c:19:31:91:
e8:cf:2e:9d:ac:5f:c5:13:74:9a:05:e5:02:28:c9:
5b:49:ac:bf:3e:40:01:8d:a1:f8:38:0b:19:12:2d:
15:59:ba:9f:27:c3:0c:62:51:33:36:0e:59:e7:3e:
54:56:8c:b1:18:6f:71:6c:ec:0d:71:e4:8b:d1:d4:
df:44:0f:4f:81:34:fe:3d:b0:e3:67:bb:47:59:15:
55:30:78:64:79:27:9e:27:62:50:56:61:cc:fe:48:
70:b0:82:0a:f6:29:98:b5:23:9a:0b:f8:1b:5e:b6:
aa:89:aa:9e:89:a2:ed:07:c8:27:56:56:f0:75:a1:
b6:52:5c:f6:bd:27:01:b4:bb:aa:f4:0f:f0:72:dd:
de:1e:51:78:f2:86:1e:f6:16:00:b9:9e:a5:8f:94:
f5:32:de:68:ac:83:93:6a:b4:98:f9:de:b8:9f:9b:
48:71:06:02:2e:f0:04:0f:0b:87:80:54:b8:e8:8c:
40:ab:9d:1b:ea:9d:33:64:2a:29:54:ee:ed:dc:09:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:87:A0:DB:4E:1D:7B:CA:79:54:D9:23:E8:F0:3B:27:BE:C3:29:BA
X509v3 Authority Key Identifier:
keyid:34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:dd:ae:a3:1c:5a:c8:2f:56:70:5c:e5:b6:75:b4:de:d7:60:
13:1d:b2:c0:23:d0:18:c4:42:34:17:89:44:08:f3:5c:01:68:
23:6e:d2:ea:7c:97:cc:b9:50:05:76:f6:99:a4:68:5d:67:24:
d8:f3:0a:bd:e1:74:83:86:ec:d6:b0:19:e3:ef:84:01:90:fa:
e3:f8:47:1c:f0:79:f9:67:1e:37:b5:c5:87:8e:27:6c:85:ea:
61:87:23:e5:cd:54:16:b2:e1:38:90:a6:a0:b8:31:47:de:59:
fe:a5:14:9c:5b:37:ea:1d:e8:6a:0c:3a:60:96:0d:7d:00:30:
90:58:04:da:aa:4a:3d:1b:ec:c9:62:2b:3e:7a:5c:02:44:83:
b9:16:e1:b0:a8:1d:f2:af:ea:6a:4c:15:88:e3:8f:c3:4f:9c:
14:1a:8e:66:fd:1f:e3:97:36:d0:90:4f:55:50:f5:ba:45:80:
14:d9:e3:5a:5f:2d:be:8b:e2:f8:bf:5e:df:a2:9f:4f:1a:2a:
f9:fb:c8:1c:0f:1f:9b:59:50:22:66:6b:cb:ed:3a:7a:65:12:
80:ea:8d:ae:4c:73:d6:dc:9a:8c:3d:5a:8f:88:f7:1e:5c:ce:
cc:59:51:50:21:aa:ae:ef:87:da:1c:fd:60:d3:73:6c:b6:32:
a9:71:ac:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:27 2026 by rpki-client