Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
File: t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft (raw, json)
Hash identifier: sd5/2+Et8dkh6dcXXzhy0iCUfFkpmTUdE0Lm0JYCmiY=
Subject key identifier: 40:65:93:5E:E1:DE:49:E1:F2:52:D4:54:87:B2:BA:3A:D2:5E:8E:12
Authority key identifier: B7:F3:5C:5E:EE:A0:21:F6:0A:FF:33:8E:D6:28:52:E4:C0:3C:57:9A
Certificate issuer: /CN=b7f35c5eeea021f60aff338ed62852e4c03c579a
Certificate serial: 019CAFB56B0B643E40572A73F0A0889B800B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_NcXu6gIfYK_zOO1ihS5MA8V5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
Manifest number: 32
Signing time: Mon 02 Mar 2026 18:00:27 +0000
Manifest this update: Mon 02 Mar 2026 18:00:27 +0000
Manifest next update: Tue 03 Mar 2026 18:00:27 +0000
Files and hashes: 1: ZBLmjHEnNj5CsLTBhAUiBj1hV0A.roa (hash: 3EA6s7k8+iqt8vTemGLaBh1ZR5wfpLsxKHoZaTRSwXw=)
2: t_NcXu6gIfYK_zOO1ihS5MA8V5o.crl (hash: kDAVmvGsVfm+3bPmLMEUw7HQ+4LWCSdTkh9gF+x20NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_NcXu6gIfYK_zOO1ihS5MA8V5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:6b:0b:64:3e:40:57:2a:73:f0:a0:88:9b:80:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f35c5eeea021f60aff338ed62852e4c03c579a
Validity
Not Before: Mar 2 18:00:27 2026 GMT
Not After : Mar 3 18:00:27 2026 GMT
Subject: CN=4065935ee1de49e1f252d45487b2ba3ad25e8e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:e5:63:60:57:2d:cf:37:c1:b9:10:6f:99:
de:b0:92:22:1e:9c:2b:f9:7f:5a:c8:a4:63:50:9a:
28:a1:c7:74:64:dc:e9:8e:e6:c6:91:d5:2b:eb:96:
48:73:7e:fb:e3:0a:d8:02:25:cc:61:6c:18:6d:a7:
83:73:09:bf:fb:de:1d:8c:b7:45:56:0f:a4:a1:10:
93:e7:e0:f9:e9:68:ed:6c:a4:8c:ce:48:1f:79:5f:
17:99:80:d7:87:c2:0f:12:3b:de:7d:91:fa:20:0c:
af:a6:ef:33:4f:96:7d:83:18:c4:d1:da:e8:0e:7b:
e4:a9:51:6f:43:11:e2:a7:5c:43:20:82:47:67:5e:
f1:c0:a9:07:08:d5:32:bf:8e:0f:10:7d:28:b5:d0:
3d:9e:a9:13:6a:7f:fc:f0:97:4f:85:f7:24:ee:e8:
13:3d:f3:2d:24:1c:e3:1d:25:16:d7:ae:46:ba:50:
5d:00:2a:88:b3:48:47:e5:44:39:4d:3c:4e:2d:e8:
64:ee:27:a6:d9:be:79:a8:7c:93:a6:af:e5:3b:36:
87:56:c0:02:89:96:11:0c:cc:e4:94:16:8f:34:11:
cd:e1:a4:4c:51:33:27:2c:98:5a:50:97:c5:57:f5:
3f:e8:4b:6e:b6:7f:ad:c5:95:5d:6e:20:a4:bc:cc:
a7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:65:93:5E:E1:DE:49:E1:F2:52:D4:54:87:B2:BA:3A:D2:5E:8E:12
X509v3 Authority Key Identifier:
keyid:B7:F3:5C:5E:EE:A0:21:F6:0A:FF:33:8E:D6:28:52:E4:C0:3C:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_NcXu6gIfYK_zOO1ihS5MA8V5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:76:73:ea:ce:aa:f6:22:97:de:5c:02:5d:9e:32:af:51:b8:
fe:73:d0:38:64:75:0c:ee:81:5e:a4:e2:7a:8d:ba:f9:32:e5:
64:17:f7:c8:07:75:e0:34:55:78:23:67:49:8a:35:8c:cb:1d:
15:e6:e6:a1:b6:ff:be:af:04:bb:9b:04:39:da:ca:07:d7:10:
71:91:61:52:7c:84:0a:38:46:4c:d0:cc:58:84:0f:45:7c:f0:
d9:07:68:7c:5e:20:b3:d9:0c:1b:23:22:3e:aa:4f:8e:5e:af:
08:17:3e:81:66:b6:83:e1:ed:7a:e4:6b:e6:52:7e:39:59:03:
14:5e:50:6e:52:92:3f:95:c6:d5:f4:6c:65:95:db:df:ae:c2:
34:f9:95:3a:e8:a2:48:61:40:f7:5a:1b:80:72:d5:3e:b5:c6:
88:7c:d8:1f:c8:b8:e6:cc:20:f5:3b:47:b5:2e:4a:e6:e1:01:
9f:9c:ca:de:56:1d:1a:6a:c7:0d:b7:0d:5d:f4:5e:6c:b0:50:
a7:6a:b8:dd:72:bb:fd:b7:ab:25:38:32:8c:03:5a:e7:73:1a:
af:90:e6:cc:47:8e:03:68:85:52:50:70:82:60:70:92:e1:22:
3c:7a:f4:c6:54:33:f0:40:cf:cd:67:b2:5d:b0:00:21:b4:1c:
03:3e:7d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:44:30 2026 by rpki-client