Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
File: NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft (raw, json)
Hash identifier: aJ6fQ2oydczKpeuaR5TyF5/8oecRz9r3hw2DfXpOzlY=
Subject key identifier: CD:78:A9:5D:33:C0:66:4E:D2:B3:2E:B2:47:84:4A:A3:46:A3:37:7E
Authority key identifier: 36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
Certificate issuer: /CN=36135f13abf02fa3fca505d568816afc59334916
Certificate serial: 019CADFE64045A45D6D01FB38449B9119D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
Manifest number: 97
Signing time: Mon 02 Mar 2026 10:00:55 +0000
Manifest this update: Mon 02 Mar 2026 10:00:55 +0000
Manifest next update: Tue 03 Mar 2026 10:00:55 +0000
Files and hashes: 1: NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl (hash: k4j2cu6KwMVynxSGJJLScTwvO7cSLFclwwXoy1RkOt8=)
2: W-HA5m7hemLDXdHbhWk4pSkmXKQ.roa (hash: DFd6jBuLZXEJn0Y04obFpmXz6rYUp0KbjFhguWyn34c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:64:04:5a:45:d6:d0:1f:b3:84:49:b9:11:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36135f13abf02fa3fca505d568816afc59334916
Validity
Not Before: Mar 2 10:00:55 2026 GMT
Not After : Mar 3 10:00:55 2026 GMT
Subject: CN=cd78a95d33c0664ed2b32eb247844aa346a3377e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:2c:ff:77:77:99:7d:4c:77:c0:80:37:fc:
5c:37:37:44:ab:b7:4b:29:45:37:97:60:d0:55:6d:
f2:79:39:33:08:fe:27:ae:0c:c3:36:58:c0:e1:87:
75:62:92:56:7c:e1:2a:f2:59:27:76:56:ec:5d:1c:
8b:67:5d:1e:0a:54:cc:3a:e1:2d:49:89:25:23:bc:
14:04:b7:67:bc:cd:78:df:df:f4:1d:fa:52:26:de:
d2:a2:0a:0a:22:4b:4e:f5:0e:64:2e:83:49:1e:bb:
09:d4:ca:c9:0c:4a:62:88:95:83:9e:32:34:dc:ae:
74:f8:82:31:31:6a:29:cd:ef:49:68:32:24:d2:6c:
db:f3:5c:33:58:ac:9b:a5:d9:dc:27:a9:b5:b1:82:
95:ff:e1:9a:fb:58:bb:24:d0:eb:4f:10:07:52:cc:
b6:62:a1:8f:a1:d1:bd:c2:17:be:2c:19:f7:b6:75:
91:9e:07:ec:bb:ae:97:82:34:90:da:11:ad:30:76:
6a:2b:93:2b:52:20:cf:1a:94:ad:c9:1b:76:36:8f:
5b:b3:a7:20:f1:17:dd:ec:5b:c1:de:55:f3:31:d3:
5c:21:22:c4:a1:34:d5:73:87:fb:75:cc:97:4e:5d:
60:2a:80:55:4e:24:8e:29:32:eb:1e:e3:af:c7:aa:
b2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:78:A9:5D:33:C0:66:4E:D2:B3:2E:B2:47:84:4A:A3:46:A3:37:7E
X509v3 Authority Key Identifier:
keyid:36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ab:a6:ce:0d:6a:33:f3:a8:d9:6a:37:94:44:77:c5:40:da:
8b:00:19:70:c4:93:d3:78:cc:36:05:26:8b:70:09:4d:af:79:
d2:b5:62:74:66:a6:2e:d3:0d:f1:88:ff:24:15:35:70:d0:26:
c2:f3:39:67:8e:18:46:c5:20:f8:d9:5f:1b:69:04:66:ef:87:
9b:55:c7:dd:2d:8b:98:b8:cc:59:e2:c9:26:e2:81:29:3c:b4:
1e:bb:7a:60:48:ac:82:bc:2b:00:35:76:b9:e3:55:09:84:83:
90:7a:07:59:12:a9:7a:79:4b:38:62:65:0e:6d:a6:25:20:84:
6f:0e:24:d6:e2:5b:6e:ec:f7:33:a9:df:89:18:9f:b7:5d:fb:
ec:a3:e1:df:fb:67:61:1c:4b:af:13:ba:6a:84:5d:a4:dc:7e:
ba:ee:df:ba:e5:4d:73:40:4d:cd:9f:0d:fe:d3:af:fa:a9:96:
a9:b5:5f:8e:72:5e:11:ee:f6:42:a7:1d:bf:f3:06:58:56:0a:
17:a3:15:40:98:6c:9d:f4:ca:d2:1e:d6:a2:d8:09:b7:3b:18:
4e:6c:35:a2:63:2e:f4:fa:0c:4e:50:1d:e9:e2:48:b0:91:4a:
c8:68:ec:9a:37:76:85:49:63:ea:50:d1:36:a3:88:05:82:1a:
ee:d8:b3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:21:33 2026 by rpki-client