Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
File: NW5HRHMdpE8I-l6SxesqR01JqJI.mft (raw, json)
Hash identifier: lcA1DoH855z33OC4zlYo4AV7YUltAytzMyEj/DNtejQ=
Subject key identifier: 57:75:26:85:E4:33:29:BA:D7:AE:A2:BB:6D:25:2C:B0:2F:22:50:27
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial: 019CAEA359304332BC721C97B6081F120ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 13:01:06 +0000
Manifest this update: Mon 02 Mar 2026 13:01:06 +0000
Manifest next update: Tue 03 Mar 2026 13:01:06 +0000
Files and hashes: 1: NW5HRHMdpE8I-l6SxesqR01JqJI.crl (hash: LMSQv9RMSUalyOi4jEE3m2ufKGCJHNheHpppYsIzX4w=)
2: fk9U3XR8wWwd2opanzwEAz6eKk4.roa (hash: 5EeRjXWRWUv9RoV34Pw35rxYHtcF/8u2AEnciChzLxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:59:30:43:32:bc:72:1c:97:b6:08:1f:12:0e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Validity
Not Before: Mar 2 13:01:06 2026 GMT
Not After : Mar 3 13:01:06 2026 GMT
Subject: CN=57752685e43329bad7aea2bb6d252cb02f225027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:a8:9f:d7:58:02:2f:ae:6c:ae:3e:0f:05:
d5:7c:32:e5:f4:b9:f4:2a:2d:11:d3:6b:16:c3:14:
0c:9b:d7:ba:e6:26:0b:fe:91:53:b4:54:f6:9d:37:
30:f2:90:01:0f:07:0e:f9:e3:39:16:ae:c0:a4:f5:
77:6e:f9:98:a8:0b:13:87:cb:ef:75:3e:5f:b5:65:
d8:da:91:3d:d7:5b:d3:f6:e4:51:6c:43:d2:6b:83:
4f:dd:cc:54:80:e9:92:d9:8f:93:fd:ec:cc:33:69:
b7:9a:5f:91:9d:6a:1e:a4:d9:74:ca:1a:84:a7:c4:
c3:40:de:6f:5f:9f:58:fe:29:56:7c:07:3d:b1:75:
60:ec:57:2c:87:49:6b:cb:43:6e:da:72:47:ac:85:
25:71:62:cb:cb:be:bf:e8:09:91:b1:f6:80:f9:2e:
dd:1e:e6:f4:2e:d6:b1:10:44:06:89:9a:2d:0b:e0:
a7:e6:34:f4:69:51:f5:db:f7:d5:c7:f3:09:c9:30:
b4:47:45:20:f5:88:af:92:d1:0b:03:66:49:28:1c:
56:86:a4:86:e8:8a:38:99:e4:4a:28:a1:b5:a1:fc:
ad:cd:32:83:ee:2e:8c:80:1b:eb:17:3c:49:af:e8:
d3:ab:e0:bf:5a:7e:81:de:78:93:a4:d6:e5:eb:ad:
7c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:75:26:85:E4:33:29:BA:D7:AE:A2:BB:6D:25:2C:B0:2F:22:50:27
X509v3 Authority Key Identifier:
keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bb:ca:15:c2:87:3f:63:07:4d:91:ae:c0:d1:6e:d0:e0:ae:
19:d4:9a:b5:22:69:97:0b:cb:a7:4c:74:60:55:f3:0a:ee:93:
b6:8f:1f:3e:66:84:8c:99:f6:7a:1d:df:6c:ec:7d:08:26:e4:
e5:c5:c1:f0:3b:2b:7f:80:66:76:17:c6:d8:ec:60:93:ea:13:
23:79:34:1a:e2:27:ba:e4:0a:54:00:b4:03:c6:a5:63:3d:a8:
86:44:86:11:e4:e1:e4:42:5b:07:21:e1:f4:ff:8c:4f:93:06:
5a:91:1f:d3:2c:8e:99:5a:ca:b3:02:bc:d6:73:de:75:65:c3:
b2:3f:0d:5a:ca:a4:43:18:ef:62:3e:fa:1d:02:4f:e1:f1:24:
43:a0:46:5f:68:25:31:a6:0f:6b:0b:a1:3b:96:ee:39:15:9f:
0e:ab:55:46:f8:77:e2:a1:07:e2:c4:35:f2:9e:05:95:83:cf:
0e:f5:a2:ca:f7:a1:45:da:f8:bd:fc:ff:be:2d:c5:8c:5b:4c:
31:7e:bb:b1:82:94:e4:0e:dc:47:85:a4:73:93:e2:f2:7f:3d:
6f:ad:41:b9:fb:ba:e2:5f:05:c8:87:f9:f9:4c:ba:01:32:79:
5b:09:d6:3a:56:d9:d5:31:50:f8:6a:67:2e:5e:e0:12:7c:b5:
13:c6:a9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:18 2026 by rpki-client