Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: 3dnA5r8I16IcZKdLWFX6NVKCmPnyfzWNJllnSqAjoH4=
Subject key identifier: 14:1A:1E:48:24:4D:04:99:85:A2:30:72:2A:7F:07:80:F7:6B:69:01
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 01A0C934449AD8A5F963C3D8A4C193052AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 05D3
Signing time: Tue 22 Sep 2026 13:00:40 +0000
Manifest this update: Tue 22 Sep 2026 13:00:40 +0000
Manifest next update: Wed 23 Sep 2026 13:00:40 +0000
Files and hashes: 1: 1a2w5_LzpzoweEi0kL3e8rXuwEw.roa (hash: Uznzi70zArzLc6sT1YufT+KJGM9lJIIJ4gfkTYxhtAs=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: +2O+v260Zmhs/n/4k5TrVeEtbPhF5qvrvSCNG7ZJfqU=)
3: TUYlFT-dUBjSF5MwO5c5SHo_-PA.roa (hash: yDE5fT46PoSW/d5/n8et57tOUUfO/M0RS358RxhsJ3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:44:9a:d8:a5:f9:63:c3:d8:a4:c1:93:05:2a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Sep 22 13:00:40 2026 GMT
Not After : Sep 23 13:00:40 2026 GMT
Subject: CN=141a1e48244d049985a230722a7f0780f76b6901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:34:28:00:97:c5:44:c2:6d:e3:65:3c:80:
54:ab:28:26:11:84:55:ce:d6:47:89:5e:00:8b:78:
60:8e:e8:07:77:9a:67:3d:ac:66:4a:12:7c:23:e6:
9b:66:32:02:3a:69:42:4e:aa:cc:41:52:47:87:f1:
af:20:af:4e:4e:d2:b7:a6:b0:a2:a5:06:5c:f6:c5:
b0:26:3e:fa:2c:7e:53:48:b2:61:78:49:0b:0e:ed:
60:45:ff:ba:5b:4a:f3:f3:da:a2:e6:a7:a4:d9:28:
12:d7:e9:6d:b4:71:90:8b:81:0b:51:b4:e1:cf:7b:
b3:c1:2b:61:d1:9f:db:f0:c6:05:cc:a4:67:61:e1:
1a:3b:36:ac:09:06:c3:23:a7:b5:6e:35:48:70:01:
fc:3f:e3:b5:ee:de:b0:e6:0e:35:cc:18:de:c9:aa:
c9:f4:83:39:60:47:92:93:a7:bb:a5:50:29:0d:8f:
6d:2e:4c:c4:85:0b:34:29:32:1d:b0:32:32:a5:fa:
0a:c9:c9:d4:50:c7:ab:d1:3f:cc:b2:5f:7e:20:8f:
05:8e:80:e1:03:5f:c1:ae:aa:3e:c8:df:53:50:28:
1d:f8:3f:68:ef:da:06:55:df:65:3d:11:ca:39:ac:
e8:7b:c3:df:ce:24:c7:ba:2a:cc:7a:fd:21:a9:30:
97:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1A:1E:48:24:4D:04:99:85:A2:30:72:2A:7F:07:80:F7:6B:69:01
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:82:fc:2f:b7:c2:5e:ed:8b:14:70:0f:a8:7d:0c:ed:bc:14:
04:98:af:0b:5c:a2:27:55:96:19:b9:64:83:44:f6:71:15:a1:
e2:a0:68:11:13:ca:c3:7e:32:7c:57:91:e9:9d:3f:8d:d2:e6:
0a:92:c3:b2:d9:45:ff:9e:a4:fd:4e:23:d5:e4:92:75:0c:d6:
ec:bc:2a:ba:95:eb:8c:95:56:0a:b8:6b:1c:5d:1e:48:cd:d1:
09:38:4a:94:dc:e5:90:06:4b:b9:a1:93:fb:d5:70:f7:03:fa:
f4:f0:ba:e0:16:78:46:1f:3c:4b:74:9f:53:d2:2a:67:44:20:
8f:e7:ab:15:fc:ce:96:a2:29:d5:f1:07:08:14:67:5b:d1:08:
9f:cf:4c:99:3b:67:54:1b:df:2a:cc:c5:07:84:b3:27:7d:7f:
dc:79:f5:46:23:86:09:1b:ec:48:44:b4:ee:85:8d:0b:12:c2:
0f:7d:4d:b4:26:08:8d:80:08:6e:9f:38:53:f2:05:4d:d9:c2:
19:98:62:79:cd:9e:eb:c4:8c:34:a9:5d:ec:fa:f0:f7:cf:ca:
c8:ad:78:23:96:74:6d:33:c3:cd:94:47:d9:74:f3:1e:bf:07:
2f:de:f2:d2:83:93:a4:2a:b5:62:33:a5:d7:13:3e:00:b4:48:
b7:fb:09:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:08:25 2026 by rpki-client