Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
File: NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft (raw, json)
Hash identifier: 2an2YKRauvvSR84tfjRY52zha8YWwJPYXCIdJWdcWqI=
Subject key identifier: F9:8E:E8:25:BE:E7:14:DE:03:16:A5:83:0B:8A:B8:E6:16:C9:66:1B
Authority key identifier: 34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E
Certificate issuer: /CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
Certificate serial: 019CAAC60BC6202CA12ED657F2F4B9543A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
Manifest number: 1426
Signing time: Sun 01 Mar 2026 19:00:31 +0000
Manifest this update: Sun 01 Mar 2026 19:00:31 +0000
Manifest next update: Mon 02 Mar 2026 19:00:31 +0000
Files and hashes: 1: NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl (hash: W057rsulLtCnDQaxgEE8pPug7xcpCppXLCoz3ObUQL8=)
2: yLkWfOZ9pwRHBarKKNZ4fHLFIcc.roa (hash: svQPIicQF6L4iRCTdIy2JhuS8+4OxhvfXxWW++0FFdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:0b:c6:20:2c:a1:2e:d6:57:f2:f4:b9:54:3a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
Validity
Not Before: Mar 1 19:00:31 2026 GMT
Not After : Mar 2 19:00:31 2026 GMT
Subject: CN=f98ee825bee714de0316a5830b8ab8e616c9661b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:d3:ec:7f:96:e3:72:a5:44:29:9c:33:5d:
f5:ba:0f:a0:0c:6d:da:bf:71:9f:02:2e:b4:cb:da:
e7:5c:05:d4:1e:3f:09:e4:54:4f:d4:6a:dc:33:d3:
46:66:cc:5e:4d:7b:58:af:ee:d2:09:7e:c7:02:b4:
73:54:6b:b6:85:9d:76:21:65:38:0e:ba:5a:4c:7b:
28:96:38:e5:ea:7a:4d:73:f4:10:bc:ef:bf:db:4b:
2b:c0:dd:82:36:83:b9:f1:13:33:63:b8:ca:db:52:
72:24:f9:54:18:2e:e8:13:54:16:2f:18:d5:55:1f:
13:fd:58:73:51:3b:47:f4:4d:aa:50:ba:8f:c0:2d:
a4:ca:4a:ae:f3:ee:88:d4:47:d9:be:3d:e9:c8:a6:
4e:2c:4f:30:a4:70:ca:e1:f3:4d:36:18:54:74:d4:
9a:75:f9:8d:3f:ff:7f:98:ad:40:34:bb:c3:f7:38:
94:e7:76:d1:7f:2e:9c:da:82:cb:3c:21:ea:ac:dd:
e5:2e:e0:fe:ef:7a:73:f9:88:4d:70:71:b3:99:8d:
5f:dc:4f:95:d7:32:3c:4a:9a:52:07:90:c0:9f:ce:
7e:bc:33:d2:92:0e:58:e2:8d:a9:ab:6a:de:ff:4e:
17:e1:6d:11:61:ad:5f:f1:87:45:22:41:97:f7:59:
e9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8E:E8:25:BE:E7:14:DE:03:16:A5:83:0B:8A:B8:E6:16:C9:66:1B
X509v3 Authority Key Identifier:
keyid:34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:01:49:a4:c5:62:da:d7:53:e9:8c:58:62:6e:28:92:5e:f3:
ed:dd:59:60:a0:ea:40:64:de:b5:53:9a:3d:93:5d:4c:0d:e9:
84:34:02:fa:cd:79:f2:d8:76:9e:06:98:e0:2f:d5:e6:96:3e:
44:6c:ac:b2:de:a3:be:6f:b5:96:f7:dc:e1:ec:f1:07:e7:69:
c4:06:56:11:5f:d7:8c:ad:be:1c:10:f2:21:ef:4b:54:dd:4f:
21:27:81:eb:13:24:e6:38:d5:f1:91:40:24:37:ef:22:d7:47:
83:1d:f8:1b:02:7b:be:3e:1e:94:d3:7b:67:74:4a:73:6a:e7:
74:b8:22:a3:b6:3a:a1:c4:66:c9:49:b5:13:c3:d0:0e:ca:d5:
fa:0a:7c:6f:93:91:4c:7c:c2:5a:ae:35:8b:99:36:12:12:3f:
43:6f:69:ec:86:7a:f9:a6:03:fa:d4:e6:1c:3e:af:0d:55:11:
80:1d:d0:16:e4:5f:6e:76:17:d7:75:5d:66:1b:6d:f4:8c:4f:
2e:ea:12:97:fb:63:cd:99:bd:03:ae:eb:37:b3:be:c6:24:b2:
f7:f4:79:d8:77:37:6e:a2:32:51:ee:58:cb:1e:0e:be:42:c3:
9b:5e:6d:d7:48:b4:e9:2d:d7:31:df:4b:d6:15:58:d3:a0:f5:
87:af:12:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:18 2026 by rpki-client