Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File: NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier: YHNyL5igTL0J8TryPLxRK3YYKikkaV0tPdLz6iEIF50=
Subject key identifier: 4E:0E:32:D3:B0:63:9A:D3:1A:EB:F2:83:BC:F7:58:F4:A1:02:B6:8C
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial: 019CAA594B947485C9E3574FF291CE934073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number: 0571
Signing time: Sun 01 Mar 2026 17:01:44 +0000
Manifest this update: Sun 01 Mar 2026 17:01:44 +0000
Manifest next update: Mon 02 Mar 2026 17:01:44 +0000
Files and hashes: 1: 0oG7Wuq3ZAAXzg6P-qV_HWGeUWE.roa (hash: tl6rHSJSg3BOoepWWn4g5EPuRgVKzjqvlpZ/rZDE8k0=)
2: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: hJPZpFHmozSEh12T9eAd9sijq9LtgrhrbXjxilWqtX8=)
3: wC11yeUerTWiyRWDCng4spCl8qM.roa (hash: /IMrg/w5VKSBqu/JYOwX3ZqxJnQBurW+kq0gnHVnWjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:4b:94:74:85:c9:e3:57:4f:f2:91:ce:93:40:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Validity
Not Before: Mar 1 17:01:44 2026 GMT
Not After : Mar 2 17:01:44 2026 GMT
Subject: CN=4e0e32d3b0639ad31aebf283bcf758f4a102b68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:e5:0c:22:fd:84:d2:a4:a3:f1:f7:8f:8b:
70:a6:83:1d:29:cc:21:72:6e:62:75:08:74:95:bb:
d3:dc:ea:c4:41:8c:5f:66:54:1d:a5:d2:4d:78:55:
25:70:69:8c:0e:10:fa:04:b5:c3:e2:0d:b9:88:85:
80:fb:f7:40:13:4f:eb:6b:fc:ff:a0:75:1a:21:72:
31:96:1e:4f:d2:a2:95:6b:9e:c4:e1:45:c0:a9:f2:
b5:62:98:4f:35:24:e4:f5:cb:da:02:29:5c:9f:82:
26:50:e0:e8:de:7c:e5:6e:be:30:77:da:a6:37:3f:
b8:9d:47:9e:34:dd:c3:c9:ad:d7:c2:a9:d4:04:be:
bc:ba:d3:db:e2:9f:87:a4:64:a1:6a:a0:55:8e:9d:
78:ad:b3:63:4b:97:d2:03:2c:c6:4b:fb:ea:29:12:
0e:af:b4:f0:89:fe:92:d0:55:c0:0e:9d:23:1c:1c:
8b:5b:c0:fc:34:6f:0f:9a:d2:59:9b:9f:7c:45:1c:
b4:c2:3d:65:eb:d5:32:bd:cf:43:0a:13:5a:1d:47:
e4:3f:f9:ad:b9:de:c6:92:a2:92:f2:54:8d:71:34:
b0:31:e8:14:e2:6c:c0:1a:a9:1b:6b:10:26:20:f0:
f9:05:53:e7:37:49:f7:c7:30:d9:46:18:ae:d1:d1:
01:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0E:32:D3:B0:63:9A:D3:1A:EB:F2:83:BC:F7:58:F4:A1:02:B6:8C
X509v3 Authority Key Identifier:
keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:76:49:6d:de:0d:a2:51:4b:7e:a8:aa:52:65:34:98:f4:23:
32:10:b6:69:a7:fa:fb:67:cd:10:0d:3f:66:63:b6:8d:36:de:
26:f2:d2:81:4f:b5:fc:f1:1a:6c:ea:f4:25:ea:85:6c:0c:5c:
dc:78:c6:00:d4:f9:d5:ab:c0:5e:4c:00:d7:b3:0b:de:1e:51:
cb:58:1e:9f:83:29:f1:cf:2b:b3:2f:12:06:8c:2b:98:e7:6e:
90:3c:df:17:f6:bb:7c:01:95:36:89:19:28:df:16:65:c8:b4:
96:1a:71:3b:4b:eb:42:18:a6:f6:12:00:71:5f:4c:eb:8d:2d:
22:c1:16:11:eb:96:fa:48:75:6e:1d:0d:41:94:c4:bf:49:68:
06:90:18:af:95:8f:39:62:26:17:10:14:9d:d3:e9:a2:ff:ab:
fe:65:d9:dc:d1:07:44:b6:7a:05:69:94:30:5f:7c:6a:55:24:
1a:5b:d3:1a:1f:42:6c:b8:06:52:74:f8:90:14:43:c8:4f:69:
7b:8f:79:d3:d6:20:04:9c:ec:1f:f2:db:b8:e9:d8:f7:36:f3:
e9:c7:d6:f5:c3:4c:a1:e3:8a:07:96:b1:c1:f5:90:91:d2:51:
37:67:45:9b:af:b0:20:0b:4b:67:9c:f3:d9:78:25:5b:f9:93:
d0:76:f5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:02 2026 by rpki-client