Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: EMDAgDCFqEq3fxOhkC52Osdm7YlvxxC0pyw3EnYcDEs=
Subject key identifier: 6F:39:10:9F:4C:B0:27:66:EA:F5:58:67:18:B9:9B:B6:59:3A:23:B0
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 019CAEA3022DB739801C15B692E3421B40E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 03B3
Signing time: Mon 02 Mar 2026 13:00:44 +0000
Manifest this update: Mon 02 Mar 2026 13:00:44 +0000
Manifest next update: Tue 03 Mar 2026 13:00:44 +0000
Files and hashes: 1: 1a2w5_LzpzoweEi0kL3e8rXuwEw.roa (hash: Uznzi70zArzLc6sT1YufT+KJGM9lJIIJ4gfkTYxhtAs=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: X18GwKTV5/EjubxEHtGh9N3iLxX/6Yd291FS3znbsU8=)
3: TUYlFT-dUBjSF5MwO5c5SHo_-PA.roa (hash: yDE5fT46PoSW/d5/n8et57tOUUfO/M0RS358RxhsJ3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:02:2d:b7:39:80:1c:15:b6:92:e3:42:1b:40:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Mar 2 13:00:44 2026 GMT
Not After : Mar 3 13:00:44 2026 GMT
Subject: CN=6f39109f4cb02766eaf5586718b99bb6593a23b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:28:bc:0d:bc:d8:18:65:31:f3:ff:3e:eb:
58:44:35:a2:3c:6f:68:14:46:d4:f9:08:1a:d5:94:
47:c2:c9:18:ca:05:55:5a:2b:3c:f4:44:09:b6:d4:
95:8a:26:bb:f2:04:be:7e:b3:e4:ab:11:c5:46:f3:
bc:95:99:35:fd:ee:7c:7c:e4:c5:5c:37:fb:00:d6:
4e:ee:55:ec:3e:be:d6:69:4f:14:6b:4b:88:d5:bc:
26:32:70:f9:5e:52:31:86:e4:c5:13:a6:c4:4b:77:
0e:35:af:68:b3:d6:15:fb:75:b6:a7:83:84:09:95:
b1:89:49:6c:7c:da:47:96:fc:92:fb:ba:0d:ae:20:
28:d0:85:1d:91:02:b2:11:7c:bc:3c:2f:78:99:18:
57:ab:f6:34:fe:3d:1b:49:11:7d:22:78:17:0f:35:
2a:2a:fe:02:26:97:17:e0:81:8e:16:73:ff:dd:59:
20:2a:1e:9f:77:a7:63:de:92:e0:96:73:da:ae:14:
18:85:56:2a:57:5b:cf:65:26:fb:53:c3:12:c5:15:
54:01:a7:8c:88:ae:49:b8:c0:62:7d:e9:97:03:cc:
ee:93:c4:83:70:b7:21:ef:0c:7d:eb:42:5a:80:1f:
8a:43:17:1c:97:c5:38:a8:97:ad:12:2f:fa:7b:50:
5b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:39:10:9F:4C:B0:27:66:EA:F5:58:67:18:B9:9B:B6:59:3A:23:B0
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:56:ed:2e:57:f4:3a:e2:72:52:9f:68:02:72:14:c1:0a:7e:
85:ef:ff:5e:f3:59:10:22:68:94:ce:d1:f2:fc:37:b1:a4:b0:
f1:84:8b:d6:c6:0d:73:96:9b:6b:b8:2c:2a:5e:eb:f4:8e:77:
1a:54:fd:08:e6:28:79:10:37:8d:11:23:cb:4a:1e:74:16:05:
6e:67:f9:04:1a:8e:0e:dd:4b:17:14:90:0d:24:5f:13:a9:87:
3d:53:f9:95:8d:b6:5f:62:3c:3e:a2:f5:86:17:0f:aa:ea:3c:
66:93:e3:f8:85:96:40:95:4f:4c:12:a8:c2:39:0c:4b:fe:f7:
5e:9c:fc:f3:60:1e:62:15:e7:97:70:c4:8c:dc:4a:48:df:5d:
32:aa:0f:3b:74:36:03:be:4d:e5:0e:29:a5:c7:4a:6f:bf:a9:
fe:3d:91:d2:cb:56:c7:a2:8c:39:be:c0:73:0a:6d:f9:84:f1:
a0:0b:30:e1:0a:ef:70:d1:31:2b:3d:30:c0:39:c5:1c:ca:79:
13:ed:42:d4:72:bb:ce:3d:54:f1:c2:36:9a:2c:cf:02:d1:46:
c5:8c:3c:c4:df:b6:ca:a4:8b:53:29:68:a8:40:b7:da:ed:f5:
21:95:34:7b:7c:67:30:6d:98:10:2c:5d:7f:40:4a:e1:d0:72:
7f:6d:87:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:07 2026 by rpki-client