Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.mft
File: NLMfafzU7VExoTlBfOtyA1c7dHs.mft (raw, json)
Hash identifier: TIFxE5wgkYRAo0M9GDTQJZayaZV7OdnsxCVF6VBFiu4=
Subject key identifier: 45:AB:AF:79:29:51:F0:09:ED:CB:A1:7C:B8:F5:71:F8:97:D1:0D:91
Authority key identifier: 34:B3:1F:69:FC:D4:ED:51:31:A1:39:41:7C:EB:72:03:57:3B:74:7B
Certificate issuer: /CN=34b31f69fcd4ed5131a139417ceb7203573b747b
Certificate serial: 01A0DBAA1A6EC26133C9B8F0182E930D46BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLMfafzU7VExoTlBfOtyA1c7dHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.mft
Manifest number: EB
Signing time: Sat 26 Sep 2026 03:02:33 +0000
Manifest this update: Sat 26 Sep 2026 03:02:33 +0000
Manifest next update: Sun 27 Sep 2026 03:02:33 +0000
Files and hashes: 1: J5RHrIsN5ZhpMMsoWyOwOm0tf0k.roa (hash: zkDVkJoPYShr6OXV8fPBb2NBPcUAp8SMVnGkrnquQLQ=)
2: KxVm34lNwlkrW5qrAU5Pjsony_E.roa (hash: Cv1CrCyZqmGqKdKvIPVNc1SNxI2ozAn85+sLNV8uOnE=)
3: NLMfafzU7VExoTlBfOtyA1c7dHs.crl (hash: x2r/7cLxgs4wPuXRuguxcIflfpGrX5rcc1hleDXkJGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLMfafzU7VExoTlBfOtyA1c7dHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:aa:1a:6e:c2:61:33:c9:b8:f0:18:2e:93:0d:46:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b31f69fcd4ed5131a139417ceb7203573b747b
Validity
Not Before: Sep 26 03:02:33 2026 GMT
Not After : Sep 27 03:02:33 2026 GMT
Subject: CN=45abaf792951f009edcba17cb8f571f897d10d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:ea:58:07:89:cc:e1:ab:c9:ac:36:76:64:
37:70:a4:f0:25:f8:e0:1c:4c:1b:66:c2:0d:b3:7d:
6b:1d:34:fc:61:95:7e:e6:fb:ea:2f:35:a2:b1:46:
54:63:ec:d4:88:cf:f1:27:b4:c2:93:ed:28:f2:7f:
fd:6a:84:a4:5a:99:e5:10:86:fe:bb:a0:54:f4:78:
27:b0:6f:58:87:ac:fe:93:8c:0e:3e:d1:c8:33:d6:
b8:31:83:6e:2c:f4:fb:8b:51:42:de:66:1d:2e:c6:
0f:02:7a:83:58:82:28:af:75:70:c2:ac:50:cb:d2:
9b:65:02:d9:62:bd:51:cc:a5:60:83:ab:52:f1:77:
f5:3c:a8:ae:3a:91:4c:82:a0:97:14:48:63:bd:e7:
9f:e6:a1:a5:27:8b:cc:b9:4b:34:f4:35:61:8f:42:
aa:ce:80:dc:bb:5e:9d:fe:55:e9:15:4f:8a:ed:d0:
86:a1:7a:9a:ab:d2:76:ff:be:f2:86:19:7b:32:c9:
77:4f:e7:44:19:68:8f:86:43:e1:18:7e:ce:be:3b:
08:81:ec:94:fc:83:9d:5e:61:35:e9:f7:24:62:f4:
26:ac:8d:f4:96:8e:93:76:4f:52:ff:88:84:b2:c7:
a2:87:8e:20:ea:c8:d8:25:82:39:6d:30:e3:97:01:
73:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AB:AF:79:29:51:F0:09:ED:CB:A1:7C:B8:F5:71:F8:97:D1:0D:91
X509v3 Authority Key Identifier:
keyid:34:B3:1F:69:FC:D4:ED:51:31:A1:39:41:7C:EB:72:03:57:3B:74:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLMfafzU7VExoTlBfOtyA1c7dHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/NLMfafzU7VExoTlBfOtyA1c7dHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e5:f3:81:a3:bd:6e:09:35:46:cc:ea:81:ad:47:f5:31:28:
b2:62:80:6d:61:7d:66:6c:c2:d0:8c:0a:52:d1:c3:bc:9c:fa:
3a:bb:43:98:ec:5e:68:99:a5:27:ec:0d:07:d0:94:e8:aa:3b:
9c:6f:74:85:57:c2:19:66:61:c9:82:fe:ed:9e:aa:92:6d:45:
d6:ff:97:bc:84:7a:ad:18:1f:ec:61:0c:2a:75:89:e3:f8:11:
52:3f:2e:cb:e4:d9:a0:d0:37:8a:b0:f6:af:02:c9:47:d0:bd:
aa:d8:af:65:c5:3b:f3:2e:b6:16:46:22:82:68:4c:55:56:b1:
16:65:08:f2:bb:da:40:67:1b:45:03:2b:62:c6:9c:2f:57:1a:
02:f9:27:d9:93:78:3f:1b:8c:a5:03:9e:d6:fd:4e:5a:2e:b0:
70:d1:21:2c:74:2c:0c:fb:05:3b:26:43:b1:38:1b:4f:aa:19:
98:ba:88:b8:78:da:6c:d8:99:1c:c9:65:95:3c:0d:bb:c8:6c:
0c:62:c0:b6:3c:d7:6d:ce:8c:a1:40:85:39:3a:97:b1:1a:c9:
4d:de:ad:ff:c5:62:81:aa:bb:26:97:ab:4e:2a:2a:da:a3:fd:
41:70:e5:08:41:fe:eb:4f:8a:b4:a9:6f:70:f9:61:ab:1c:7e:
48:df:6c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:03:32 2026 by rpki-client