Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
File: NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft (raw, json)
Hash identifier: i2HvIiah9fIwMBujj/JmSd0nlAPGDaArQ+F6r+sITF4=
Subject key identifier: B8:4C:24:C9:F3:D0:FA:5F:40:74:22:48:D9:36:26:9F:0D:D7:33:10
Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
Certificate issuer: /CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Certificate serial: 019CAAFD478624AEED1BE717DDF71ACC8B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
Manifest number: 06A1
Signing time: Sun 01 Mar 2026 20:00:51 +0000
Manifest this update: Sun 01 Mar 2026 20:00:51 +0000
Manifest next update: Mon 02 Mar 2026 20:00:51 +0000
Files and hashes: 1: NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl (hash: S/7Trqpp8dZx7GGhjNosM9sQRbETAhtqrgti6+wHXd0=)
2: hWIPowhULMETPFMJ5-_H_ZNBRis.roa (hash: BNHF5BsMBRRalDPKnOb0xVzO7bSBgF7JDrPzIyr5BeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:47:86:24:ae:ed:1b:e7:17:dd:f7:1a:cc:8b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Validity
Not Before: Mar 1 20:00:51 2026 GMT
Not After : Mar 2 20:00:51 2026 GMT
Subject: CN=b84c24c9f3d0fa5f40742248d936269f0dd73310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:56:03:e1:82:5c:ee:4e:48:10:be:6c:3f:
85:a0:45:72:18:19:38:ce:56:ba:78:bb:21:24:5b:
e0:e3:9d:a1:d1:2e:0c:3c:de:c6:9c:01:47:f2:24:
77:42:5b:8f:4b:53:3e:14:05:4a:13:f9:c1:18:8e:
6d:f6:1d:96:6b:e1:a0:90:63:7d:c5:71:ee:5d:69:
4d:96:a9:45:45:a3:74:d5:1f:b6:da:f8:c0:c6:f0:
49:0c:96:17:33:4e:81:29:fc:18:cb:f2:62:0b:a3:
b0:df:e9:fd:75:da:77:cf:00:78:cd:49:f1:b2:13:
eb:39:26:2e:a5:a1:59:79:0d:a4:bc:bb:e9:e4:52:
16:8e:01:d4:64:65:df:11:36:31:c5:97:49:19:e3:
6b:67:6d:f6:5e:28:ed:81:25:a0:e0:65:29:32:a0:
59:c8:8e:25:39:08:71:f4:aa:fe:4b:5d:e0:da:f8:
68:c6:b6:4a:c1:aa:21:65:8c:88:91:39:61:1a:fe:
87:dc:c3:e3:46:55:fd:39:75:3e:d8:7c:87:f2:21:
94:1f:fe:7a:25:e0:2f:fa:05:75:6b:4f:21:ca:e9:
77:6e:a2:cb:49:be:2c:58:ff:33:92:dd:f7:28:03:
aa:2f:a9:1c:d0:e7:6b:0d:b2:67:91:bc:eb:61:74:
f8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4C:24:C9:F3:D0:FA:5F:40:74:22:48:D9:36:26:9F:0D:D7:33:10
X509v3 Authority Key Identifier:
keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8d:4b:b4:e0:61:ec:37:c9:c4:b1:2d:4b:10:5e:a0:51:2a:
f6:1f:af:22:f6:26:06:6c:4b:08:04:21:e8:f8:f6:46:d1:ba:
9b:2a:47:b7:70:c3:70:31:14:00:dc:da:20:f4:b0:37:c5:62:
85:c8:71:07:41:75:28:d3:61:68:17:22:d7:84:5b:3a:ba:31:
5a:2f:a1:e9:45:3d:49:82:ca:43:90:76:ef:15:b0:c0:0d:d3:
29:30:8e:f9:35:7d:18:2d:cd:c1:0b:90:03:24:da:c5:02:70:
1f:20:c4:b7:e0:ff:3c:c4:95:da:f3:33:ca:3d:37:96:47:41:
27:60:37:b8:ae:27:b8:af:48:13:a4:15:1f:66:cb:4d:38:0c:
05:63:57:98:ca:36:c1:5f:2e:b1:a5:2d:43:1c:18:ac:76:9e:
7f:25:e6:2a:60:0d:93:6a:19:1f:7e:6d:65:cd:9a:e9:1d:61:
32:88:84:73:70:e6:e9:4d:93:8b:98:25:6c:f8:d3:cc:c2:93:
43:1c:17:e3:40:15:95:42:2b:e2:98:d9:bd:7b:13:b8:b5:11:
4d:0a:b2:10:b3:f1:ae:0e:bb:56:2d:db:be:29:e2:e6:e0:7b:
0c:7e:c8:97:6d:a8:d1:0f:94:0e:81:94:e6:83:73:68:ef:d7:
67:63:c3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:07 2026 by rpki-client