Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
File: NXMLuLJiPn9lphY2BNHIX5EGKI8.mft (raw, json)
Hash identifier: x1VXP480ltFaybh93bCZmidaFj4S7EkP92zABT3IJLo=
Subject key identifier: BB:B9:32:96:10:C0:B0:69:2D:9C:06:96:EE:0C:BF:83:33:A6:69:E6
Authority key identifier: 35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
Certificate issuer: /CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Certificate serial: 019CAC7DC32E9EA62A952F5CB26C7BE4FF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 03:00:48 +0000
Manifest this update: Mon 02 Mar 2026 03:00:48 +0000
Manifest next update: Tue 03 Mar 2026 03:00:48 +0000
Files and hashes: 1: 1QEtaADIkxg0J4jUBwcM-NwBxwE.roa (hash: ZLWa2BfquBdnPKlK4MjamELUpCL/T5o3OhU6GIUiAbA=)
2: NXMLuLJiPn9lphY2BNHIX5EGKI8.crl (hash: MV1ZchJB2aIIllscBgB7D1SMlwlVMzmL6zrOV+GlBa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c3:2e:9e:a6:2a:95:2f:5c:b2:6c:7b:e4:ff:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Validity
Not Before: Mar 2 03:00:48 2026 GMT
Not After : Mar 3 03:00:48 2026 GMT
Subject: CN=bbb9329610c0b0692d9c0696ee0cbf8333a669e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:e1:8e:17:64:1f:a1:73:dd:1f:43:80:9c:
66:c2:a3:8c:ca:78:5d:7f:8a:e8:2a:74:48:87:e0:
50:f7:ac:6f:94:83:33:c2:0b:12:14:91:45:af:a7:
85:4b:49:e7:ba:59:5b:07:2e:64:27:b1:cc:54:68:
d2:6f:60:51:e5:90:9a:dd:da:d6:44:d4:71:1f:47:
8f:bc:87:c0:ba:e9:81:0e:c2:27:dd:b3:f8:bb:f5:
05:28:c9:a1:f9:01:6a:23:b8:6c:ad:9a:89:f3:52:
4d:55:69:36:54:93:e0:71:7e:42:ab:af:61:f9:4c:
09:ad:0d:38:ad:26:4b:5e:10:34:6d:e4:63:82:02:
ca:a7:30:9a:da:0f:14:58:19:c4:71:86:d3:72:d4:
94:61:2b:06:b1:95:bf:04:65:85:43:bd:31:96:b9:
6d:51:c9:8c:5b:5d:c0:56:e9:e7:b7:d0:b5:ba:c2:
cc:d6:d3:b0:bb:36:9d:ea:91:96:bc:7e:9d:57:f9:
ca:07:ef:62:01:46:1f:54:3d:d6:7d:3d:0f:07:0d:
ea:35:74:c8:32:12:0f:ec:96:d3:ad:ce:f7:90:bd:
48:55:01:0a:a7:8c:5d:d5:32:48:d5:c3:af:c6:7a:
19:1e:13:05:4c:80:0c:1c:8a:11:bc:8b:68:55:c1:
9b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B9:32:96:10:C0:B0:69:2D:9C:06:96:EE:0C:BF:83:33:A6:69:E6
X509v3 Authority Key Identifier:
keyid:35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:31:12:11:97:c0:d0:a0:8e:e6:be:6a:6f:64:da:06:d4:46:
1d:66:72:22:99:e2:07:d2:d0:99:5b:2b:70:68:3b:33:1b:49:
08:73:e2:4a:a9:54:4e:db:77:41:9b:ee:b4:c7:1e:ee:94:6e:
38:ec:bf:8b:9b:dc:25:f9:d4:a1:e1:e8:f6:02:56:8b:a2:95:
f9:55:70:6f:44:bf:37:e2:a7:e2:62:f1:e7:44:c6:0b:7b:23:
b6:20:6b:e6:5b:a0:6b:b5:0e:93:bf:25:ff:20:f2:c2:9c:79:
bb:08:fa:9f:fa:e4:2f:f9:2a:2f:e7:66:b4:a4:40:2f:80:5b:
79:f3:a4:df:5a:2f:4b:3c:35:c9:0a:e5:38:e0:6d:1b:c8:96:
97:96:7b:b0:46:3d:f9:f5:a8:90:69:48:25:46:3b:f1:27:56:
63:d7:8e:b0:a4:37:bc:07:f1:6b:ae:d9:5d:a7:71:35:f4:6c:
70:d3:30:ff:c4:dc:ee:5b:2a:89:96:6f:4d:af:ed:b9:b3:c1:
a9:54:05:d1:93:d4:20:d8:cd:18:ce:51:a1:1d:96:a3:70:14:
38:c1:7b:48:3d:4a:bb:89:0a:3c:a2:e9:9b:2b:c2:92:e9:78:
91:0d:86:2e:e1:17:e7:87:cb:ba:97:c9:e0:90:24:fe:b7:97:
d7:20:45:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:34:40 2026 by rpki-client