Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json)
Hash identifier: b8nRj7JWdFR8j9Aud5qRd+1pNNAj8LBsZFF1J+3rc04=
Subject key identifier: 9B:A6:23:AB:43:A0:18:E7:3F:51:AC:6C:0E:B6:CA:B0:4B:4C:FF:10
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 019CAC4680F6ECE779D2799E9DAADEEE7098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 02:00:27 +0000
Manifest this update: Mon 02 Mar 2026 02:00:27 +0000
Manifest next update: Tue 03 Mar 2026 02:00:27 +0000
Files and hashes: 1: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: tLt9HOaDDuxqjAbdllC+7nMbpTF4FwTF/rwleuAgOI4=)
2: e4_7yaHSmot34MoxfI-dfeOUQj8.roa (hash: Zla4V4TUPhBrvQzIH/3cu0Byr6xg7FZryKfovqeNwz4=)
3: wVHWp3M4ey0oV4Vvt4IVxUGWwHU.roa (hash: bGvl7Pnh00VzisoVUojSHZYeOEdkkKp2OdrZk5Xs+9U=)
4: z8_dgT6WuAsyinggiWah1gloyzI.roa (hash: Ux7iykUwWC0VnspPLqSHuMbius4UJKLHe67ofj8JFYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:80:f6:ec:e7:79:d2:79:9e:9d:aa:de:ee:70:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: Mar 2 02:00:27 2026 GMT
Not After : Mar 3 02:00:27 2026 GMT
Subject: CN=9ba623ab43a018e73f51ac6c0eb6cab04b4cff10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:5d:af:e1:83:fb:4d:02:77:1a:f2:c9:d1:
0d:80:24:b9:9d:32:c6:29:98:ee:80:ae:81:37:91:
0f:63:dd:07:46:6f:8b:6a:e6:ab:7d:08:d1:f5:ba:
38:78:b5:9b:b9:74:3f:dd:a6:10:78:27:58:70:66:
bc:01:2f:e0:3d:a5:a3:7c:1e:e6:2e:82:a2:a4:f9:
85:ec:d2:29:24:02:40:c0:89:d2:6b:bc:80:b4:ac:
1e:88:b9:58:74:1c:51:69:dd:24:59:a2:f8:e2:24:
47:8a:ce:95:48:6c:80:43:f3:54:ac:8e:7a:c3:54:
f3:7e:21:f2:27:7b:13:90:b0:ad:6e:1e:ae:c3:85:
0f:92:6c:63:80:fc:ce:95:b1:a2:81:5e:b7:b9:79:
7b:6e:62:67:8d:d8:52:eb:8a:3c:2f:2b:52:02:28:
f0:36:52:1f:80:c3:fa:af:57:e2:3a:5e:03:a1:9e:
23:7d:e6:39:68:27:12:5f:a7:b2:2d:b0:70:ed:63:
81:86:29:18:79:96:f0:67:c4:d2:33:93:e0:40:47:
09:b9:64:0e:bf:1c:41:cc:07:c6:1f:22:95:99:db:
c8:d8:df:9a:7f:43:d0:dc:d4:e6:20:bc:00:64:18:
e3:a8:de:69:58:f2:3a:85:aa:67:3f:30:0c:95:6d:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A6:23:AB:43:A0:18:E7:3F:51:AC:6C:0E:B6:CA:B0:4B:4C:FF:10
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b3:fe:07:31:a0:f5:a3:39:ee:34:6c:15:d3:ae:40:c0:32:
56:f7:75:ae:f2:4e:09:61:16:4a:35:dd:be:70:6a:6b:78:79:
1b:21:11:1e:78:b6:06:a4:7f:9e:95:8d:e6:f9:32:81:84:2c:
aa:2f:22:73:2f:90:33:ff:46:0c:ef:2a:99:85:33:85:73:89:
15:a6:a1:51:71:f4:3b:82:93:37:96:68:f1:d8:3b:62:37:84:
29:54:82:11:22:c9:62:61:7f:b4:d0:02:19:da:33:f1:68:9d:
f0:27:f6:0a:52:f6:2c:e5:cd:ad:0c:2e:be:5e:95:3e:9e:ce:
5d:2c:39:80:17:d9:53:52:9c:f6:64:9f:14:13:59:5c:b0:5b:
d4:c8:b1:9c:0a:68:b6:bd:d0:1b:fb:d1:b9:ea:d4:3a:14:97:
02:ba:78:cc:67:6a:96:c0:19:03:e0:bd:8c:b8:18:09:29:d4:
51:7a:ae:42:84:bc:35:b9:99:1f:1b:eb:aa:2d:c1:c3:7a:97:
6d:cb:a1:7c:4c:d7:45:7a:d5:c0:dc:a9:21:62:32:e5:af:6d:
6c:15:81:76:28:50:6b:24:4b:d4:f2:07:ac:50:ce:92:c4:8c:
d0:0d:a7:88:a8:f2:ac:7a:1f:f4:6e:1d:33:b5:a3:37:9f:df:
05:99:87:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:50 2026 by rpki-client