Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
File: NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft (raw, json)
Hash identifier: dJQ7q35JCIpLTKBuFbz8OvRnaZkqbL+p8UhJ20/oZ8Y=
Subject key identifier: DA:BF:51:CE:BC:D9:A9:8E:6A:2F:14:8F:E7:D1:CF:C0:6A:AD:1B:6E
Authority key identifier: 35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
Certificate issuer: /CN=355608d078d6f31cf79be78736bf884606a17da4
Certificate serial: 019CAD2278E7A267A66D21167AE5B8BF3F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 06:00:43 +0000
Manifest this update: Mon 02 Mar 2026 06:00:43 +0000
Manifest next update: Tue 03 Mar 2026 06:00:43 +0000
Files and hashes: 1: 51g-o2vDOcK7KnBvVJsQtvynygI.roa (hash: bL6lhghOUrnkFE7yuSSie4ePRwrM2EGwTa/emSLxBkg=)
2: NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl (hash: 5b7cIWKFWbEt2oOK8Hvcdynk80uxKQ2wV3pCDmsZFjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:78:e7:a2:67:a6:6d:21:16:7a:e5:b8:bf:3f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=355608d078d6f31cf79be78736bf884606a17da4
Validity
Not Before: Mar 2 06:00:43 2026 GMT
Not After : Mar 3 06:00:43 2026 GMT
Subject: CN=dabf51cebcd9a98e6a2f148fe7d1cfc06aad1b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:04:91:4e:47:60:f1:85:6d:79:7b:27:60:51:
cf:b4:94:aa:4a:90:1d:dc:1a:81:3e:fb:67:37:9a:
bc:88:05:37:ea:36:ad:c9:a7:57:9e:2b:a8:2a:41:
07:b5:95:94:40:fc:31:3c:ab:0f:f9:30:ca:26:f1:
83:95:69:1a:57:08:1b:83:9d:63:bd:e6:d5:d8:9f:
a0:6e:0e:4d:98:e6:c8:1a:0f:54:58:10:ee:76:0e:
b7:45:31:de:8f:02:ff:0c:46:5c:91:eb:25:a5:d4:
20:2f:64:2d:e4:66:d8:2d:20:ad:53:0a:26:c4:75:
94:c3:e6:63:59:68:6d:e1:50:57:52:af:0e:28:7e:
91:7a:32:b8:fb:3c:86:5e:17:8a:5a:b3:c7:57:9c:
c0:7a:a8:7a:06:03:c5:24:81:39:4e:a9:12:8a:52:
c7:e7:52:9b:51:04:33:1b:d6:24:e3:d7:1c:86:bc:
c6:2a:82:4b:a5:15:b0:12:de:9a:72:95:0e:1a:52:
a7:b1:37:45:9b:87:4d:54:66:3b:e5:64:9e:fc:12:
59:34:63:28:38:93:7a:7b:52:b4:51:06:9f:1b:d6:
63:43:8a:63:5c:a4:f7:1a:6e:eb:63:05:43:38:d7:
bb:b7:86:7c:68:55:0a:4b:7f:cc:7f:a8:bd:c5:94:
16:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BF:51:CE:BC:D9:A9:8E:6A:2F:14:8F:E7:D1:CF:C0:6A:AD:1B:6E
X509v3 Authority Key Identifier:
keyid:35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c6:d1:5c:1c:40:3f:8f:47:2b:ce:07:7d:eb:18:c1:db:4b:
c5:30:ea:d9:9b:54:cf:3a:a8:ba:18:64:67:25:ba:cb:00:3f:
fa:7b:92:bc:68:00:d7:46:82:06:91:b2:b5:9c:10:e9:95:0e:
72:3e:9b:9a:3a:bd:76:07:3a:11:57:55:86:2d:31:13:62:13:
c4:9a:12:25:be:54:06:2d:ba:6f:df:6f:7c:be:27:8c:2b:85:
d8:53:51:6f:d7:bb:e9:11:d1:bd:e5:0a:ed:f5:23:85:22:d5:
c3:3d:33:16:03:e3:77:e0:7d:d9:94:9e:a9:bb:65:d9:21:e7:
55:ec:49:ba:ea:fa:9f:bd:19:e8:8f:b0:75:e2:28:86:d8:2c:
b2:b5:90:48:d2:ba:4c:0d:74:a7:3f:3f:69:f9:40:ed:56:9b:
18:c4:fc:90:0d:37:4e:aa:70:c8:90:7c:d1:a6:83:8e:1e:4a:
ff:3d:aa:4f:a7:12:ee:7d:14:2e:aa:45:03:4c:0b:85:c5:d2:
91:db:1e:78:1a:7e:92:d5:0e:84:b3:80:bb:3d:60:f2:6f:d9:
dc:46:c5:90:01:80:bd:44:43:f6:49:ce:ed:ff:eb:ea:d5:b9:
be:07:ea:9c:14:8b:0e:b2:21:16:dc:12:cf:79:90:c8:26:52:
af:8c:10:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:25 2026 by rpki-client