Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: NVzrTeuqcTCwFi10KGKko6iRjCFN8+4oxpaNctM9JQM=
Subject key identifier: D2:47:8D:B5:D0:91:00:84:E3:7C:32:65:D1:8C:B4:F3:96:EA:8B:51
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 019CAED9CBF228983E8AC03937E0956E49C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 14:00:34 +0000
Manifest this update: Mon 02 Mar 2026 14:00:34 +0000
Manifest next update: Tue 03 Mar 2026 14:00:34 +0000
Files and hashes: 1: 7KmiHeTQXRSzn1pRizVCv_INZ1Y.roa (hash: ovjEW9N/bVELgNzaDJYrGYeSdyjGcKIXWsIKwlhcxp8=)
2: 9oyInYSuVnIf7zTVtB6sDcf1XhI.roa (hash: l1RSHVmCnQUWX+RzMHEaP0MGuYdTYp413ef1exVSOrk=)
3: AWHMjmic5cEKV8bVpt2xGeWTmJw.roa (hash: iFYqoLqjFem2aNEBBJqDmHNGhtphtI842p4krYOCFlM=)
4: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (hash: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc=)
5: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (hash: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk=)
6: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: QhNKoM4Pf4LBUK/jPLUjjuxqsRg4ze6fZns4D31dbSE=)
7: opbJdENGQKlgxiw3UzXsb5urRe8.roa (hash: 6DXHz5IMpgCFLQr3dZW4IiHNXv7NbkZD9862/Rjdnts=)
8: qUTKfMDduS5G83IwddW0Srvow3k.roa (hash: cOBAb4cGXrEFXoWSmcqXtalPKxlVlDLrCL2/MXUlMlg=)
9: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (hash: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:cb:f2:28:98:3e:8a:c0:39:37:e0:95:6e:49:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Mar 2 14:00:34 2026 GMT
Not After : Mar 3 14:00:34 2026 GMT
Subject: CN=d2478db5d0910084e37c3265d18cb4f396ea8b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:af:fe:a3:7a:e0:4a:e9:8e:00:dc:6a:3b:
33:74:9e:d6:95:57:7a:c3:0b:c4:17:6e:60:ed:a9:
6a:56:7b:c0:26:e9:ae:bb:47:4b:c5:4e:37:38:a0:
e8:a6:07:98:be:7c:d4:49:db:bf:c7:d2:14:e5:5d:
65:13:bb:f1:c2:f4:e2:38:dd:91:ae:45:a3:f2:25:
77:4a:69:67:06:4e:63:6d:8a:0c:6b:eb:3e:bf:b9:
b8:68:0e:5e:20:5c:91:a7:5d:b0:48:58:a7:39:7a:
37:29:17:9d:aa:02:c2:f1:79:34:9e:89:39:f6:ed:
bf:e2:1e:e4:98:7d:f7:c8:81:d7:eb:a7:58:3a:10:
09:ab:4c:c7:95:5d:7c:81:8b:51:5c:ce:30:3f:4e:
32:83:a5:24:09:d2:31:f6:0b:8f:1c:35:b5:89:82:
bc:6a:75:fe:46:bb:a5:f3:66:20:11:c4:33:de:e1:
ef:34:50:d3:92:b2:ec:dc:19:bc:d0:b6:4f:7c:4e:
94:2b:49:fe:be:0f:2a:46:5b:bd:e4:ac:ca:8b:4c:
e6:b1:0b:4c:5e:92:cf:fd:d3:8c:75:3e:10:a7:94:
07:00:d0:6f:80:4d:57:69:a1:33:b5:bf:ba:71:c6:
49:ba:e4:d9:77:3d:42:f3:85:ed:6c:76:09:01:c1:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:47:8D:B5:D0:91:00:84:E3:7C:32:65:D1:8C:B4:F3:96:EA:8B:51
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:27:7c:22:16:6f:3c:bc:cf:d9:04:9e:46:b3:0e:d2:4f:7c:
0e:eb:fe:18:71:b5:7d:26:fe:7d:a8:b8:d2:0b:0c:7e:3b:d4:
f1:71:d2:84:01:89:1d:e3:66:1a:9c:74:5a:1a:0f:f1:25:72:
e6:5b:b0:77:43:32:2a:11:63:8a:5b:a2:6b:9f:27:9a:66:f9:
c5:73:f4:35:59:f1:cd:e2:60:f5:61:20:4d:35:0f:0a:7b:7a:
a7:2a:4d:39:4d:9b:75:05:66:cc:a1:20:68:5b:a4:e0:8e:56:
89:f7:2d:0a:8c:88:01:b4:98:8c:22:0f:ed:32:73:7d:6c:83:
07:76:e9:bf:14:3b:64:c9:62:3e:e6:21:a8:5f:41:e3:b2:83:
1a:52:27:e2:fd:da:91:64:c3:af:e5:85:93:6b:51:6a:ea:b9:
e5:41:d9:9f:c2:15:a5:b1:eb:b4:d0:51:1f:f6:5c:a3:e9:0b:
5c:9a:f4:20:85:5b:6f:1d:a7:3f:ad:7f:b9:e0:b1:87:5d:45:
e3:3f:5f:37:56:78:6e:db:9a:ea:e6:de:b9:e2:42:a0:b7:8f:
94:f3:d2:08:cc:7f:30:fb:7c:96:5e:05:3c:cc:17:1d:81:75:
20:14:c0:3c:44:6e:bd:eb:b9:aa:7b:7c:8d:f3:71:f8:fa:99:
b9:da:63:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:29:30 2026 by rpki-client