Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
File: NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft (raw, json)
Hash identifier: dAi+0OHk+KNbhDaOU4Srk9pgv1MUm5UsWVJnp/fORYY=
Subject key identifier: 51:C1:9F:D5:51:03:CB:B2:25:DF:28:B6:37:A4:5B:BD:9C:DA:10:F0
Authority key identifier: 34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
Certificate issuer: /CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Certificate serial: 019CADC749EE315C2B3D4F3639646FE3EB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
Manifest number: 0396
Signing time: Mon 02 Mar 2026 09:00:44 +0000
Manifest this update: Mon 02 Mar 2026 09:00:44 +0000
Manifest next update: Tue 03 Mar 2026 09:00:44 +0000
Files and hashes: 1: 7ksTJ_jFitxF4bukC24j3eo_mx0.roa (hash: P5sZaUJcRIlYxIsN9061EjjltvsNE9PdjoK/NkSXYrQ=)
2: NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl (hash: N6UCmY3WIrsWgSYYcAjZs6m6bluknLuLtEP7/xsiKVw=)
3: jSMK0-DQ4LkW8HGxfeOZqpRoUDg.roa (hash: LbCW9qnhO4rcrIcNPyJRkz9sjQKYiVfJkLlpl6db0Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:49:ee:31:5c:2b:3d:4f:36:39:64:6f:e3:eb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Validity
Not Before: Mar 2 09:00:44 2026 GMT
Not After : Mar 3 09:00:44 2026 GMT
Subject: CN=51c19fd55103cbb225df28b637a45bbd9cda10f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:7f:b3:94:98:3d:0b:67:78:83:82:f6:99:
87:ac:63:e7:d4:3c:17:9a:c4:a2:0b:d8:0e:7a:6e:
6d:5d:ee:c1:b2:23:c0:cc:56:b9:a4:62:ce:35:bd:
3e:b6:99:dc:93:b2:78:f3:db:4c:a7:75:c4:1b:e3:
97:6f:a4:ed:73:44:5c:44:b6:12:c6:e5:b0:ed:02:
d4:47:60:b6:17:f1:23:96:be:18:2b:6d:f6:02:c1:
69:50:2a:c1:02:5e:77:e2:f0:72:0b:a9:1c:c1:94:
3a:89:17:27:4b:bd:5c:6a:0f:b8:14:a4:a8:a2:cb:
bb:d3:d2:27:dd:22:c6:fb:9d:ee:10:e3:c8:39:1c:
cf:ff:8d:3d:f2:b3:e0:c0:53:28:47:eb:2a:26:4c:
54:f9:15:b1:8b:48:16:59:f9:71:92:b5:a5:e2:1c:
47:00:4f:94:72:89:c0:9c:44:45:ce:84:78:5f:83:
5b:55:7d:26:75:94:1b:45:f3:22:c8:7e:01:b5:1e:
15:21:45:29:bc:b2:84:a3:7c:0f:c5:b2:18:87:6d:
29:08:4f:c6:b0:4a:1a:f7:81:1e:34:57:a3:e7:00:
40:1d:80:d6:79:23:bb:e2:58:40:50:4f:a2:07:52:
86:da:42:27:7b:dc:14:b0:af:63:50:26:bf:ad:ae:
98:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C1:9F:D5:51:03:CB:B2:25:DF:28:B6:37:A4:5B:BD:9C:DA:10:F0
X509v3 Authority Key Identifier:
keyid:34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:63:ae:c2:05:6a:82:0d:04:4f:0d:b5:63:33:6c:cb:99:a3:
c3:c6:b1:43:6d:df:04:bd:35:ac:18:4f:87:cc:67:32:52:e8:
dc:85:fe:36:57:76:ea:6a:3e:2e:47:73:80:0f:cc:ea:3c:48:
21:74:ad:24:3f:5f:6c:f8:17:72:b4:83:15:d3:65:94:58:16:
09:be:06:94:80:6a:bc:c4:1d:db:5b:2c:0a:46:37:62:fd:3f:
23:ed:46:ec:ce:c8:e3:b5:c0:ae:04:f4:85:fc:c5:d8:dd:df:
d8:7f:19:4f:52:1a:1b:15:68:42:6b:d1:3b:bc:29:34:9f:7b:
1f:f2:ec:2a:ca:cd:51:44:46:29:91:c7:64:9b:8d:fb:98:06:
60:05:3c:a7:b9:63:c9:99:54:3b:99:83:48:e5:ec:cf:ae:5b:
5b:a4:2c:da:76:42:99:fb:fb:df:75:89:03:bd:d7:9d:85:76:
6d:0a:fc:0d:65:6d:a9:61:ce:c2:83:c5:ec:66:52:6d:5c:94:
d8:2e:53:b6:f1:9d:b7:05:ee:99:5b:c4:e8:fc:b0:f4:41:b8:
03:66:30:27:a4:d1:e1:c1:29:08:e3:65:78:e6:d7:13:58:48:
92:25:ba:dd:ca:93:67:36:f4:50:96:6f:0a:49:b2:ca:f4:ce:
ed:0c:c4:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx0nuMVwrPU82OWRv4+sEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZGQ0MDI2ZDI5MGYzMjAxZDI4ZWY2ODRkM2M1YWMxM2M5
NmVjNmQwHhcNMjYwMzAyMDkwMDQ0WhcNMjYwMzAzMDkwMDQ0WjAzMTEwLwYDVQQD
Eyg1MWMxOWZkNTUxMDNjYmIyMjVkZjI4YjYzN2E0NWJiZDljZGExMGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR9/s5SYPQtneIOC9pmHrGPn1DwX
msSiC9gOem5tXe7BsiPAzFa5pGLONb0+tpnck7J489tMp3XEG+OXb6Ttc0RcRLYS
xuWw7QLUR2C2F/Ejlr4YK232AsFpUCrBAl534vByC6kcwZQ6iRcnS71cag+4FKSo
osu709In3SLG+53uEOPIORzP/4098rPgwFMoR+sqJkxU+RWxi0gWWflxkrWl4hxH
AE+UconAnERFzoR4X4NbVX0mdZQbRfMiyH4BtR4VIUUpvLKEo3wPxbIYh20pCE/G
sEoa94EeNFej5wBAHYDWeSO74lhAUE+iB1KG2kIne9wUsK9jUCa/ra6YtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHBn9VRA8uyJd8otjekW72c2hDwMB8GA1UdIwQY
MBaAFDTdQCbSkPMgHSjvaE08WsE8luxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MmE0MDUtMTU5OC00MDMzLThlMmIt
ODc4NTA3ZWQ0NmY3LzEvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83MmE0MDUtMTU5OC00MDMzLThlMmItODc4NTA3ZWQ0NmY3
LzEvTk4xQUp0S1E4eUFkS085b1RUeGF3VHlXN0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWOuwgVq
gg0ETw21YzNsy5mjw8axQ23fBL01rBhPh8xnMlLo3IX+Nld26mo+LkdzgA/M6jxI
IXStJD9fbPgXcrSDFdNllFgWCb4GlIBqvMQd21ssCkY3Yv0/I+1G7M7I47XArgT0
hfzF2N3f2H8ZT1IaGxVoQmvRO7wpNJ97H/LsKsrNUURGKZHHZJuN+5gGYAU8p7lj
yZlUO5mDSOXsz65bW6Qs2nZCmfv733WJA73XnYV2bQr8DWVtqWHOwoPF7GZSbVyU
2C5TtvGdtwXumVvE6Pyw9EG4A2YwJ6TR4cEpCONleObXE1hIkiW63cqTZzb0UJZv
CkmyyvTO7QzEEg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:17:29 2026 by rpki-client