Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
File: NM3lphFF05kuzN7Ht_C4fVZr3co.mft (raw, json)
Hash identifier: KW4bGsih4pGZhgOvB+o2yjn3/20W6UGzZxS+cpPKHtE=
Subject key identifier: A5:07:C4:BD:1A:7C:EC:7E:D7:85:09:FB:5A:70:EF:CF:81:A8:0C:D9
Authority key identifier: 34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
Certificate issuer: /CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Certificate serial: 01A0C9A1DB59DCD81DE7AD3E2AE2E0E1F1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
Manifest number: 02FD
Signing time: Tue 22 Sep 2026 15:00:22 +0000
Manifest this update: Tue 22 Sep 2026 15:00:22 +0000
Manifest next update: Wed 23 Sep 2026 15:00:22 +0000
Files and hashes: 1: 1-IJA-q45HspUpMubIpcnRXcTB8M.roa (hash: JXJRmj3ORBVNFKxWPy8ORXK6nbNNUCsakv/wzqIn0g0=)
2: NM3lphFF05kuzN7Ht_C4fVZr3co.crl (hash: ijd20q1ydWNc8BRt+dbqtQ0E5kZ49n0nfuMwyr2qH3g=)
3: zbYhjs52NqgXZeFMN5zptwYaiMY.roa (hash: KsKrXGzHhE5GBB49wXeoqkTWzCeO3+7rNRAxePZu7qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:db:59:dc:d8:1d:e7:ad:3e:2a:e2:e0:e1:f1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Validity
Not Before: Sep 22 15:00:22 2026 GMT
Not After : Sep 23 15:00:22 2026 GMT
Subject: CN=a507c4bd1a7cec7ed78509fb5a70efcf81a80cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:75:9d:bd:b2:e6:f9:97:77:f7:82:59:3f:
18:39:c2:90:c6:07:88:66:47:7a:60:db:c5:69:91:
32:9e:59:60:53:0c:8b:29:9c:ed:9c:81:92:75:90:
72:7a:61:05:47:d0:ec:a1:4d:58:d1:2a:0b:5e:41:
9e:64:0c:f2:a6:2e:07:1e:71:1b:8c:24:07:37:b1:
9c:39:6d:04:50:ff:62:b2:d9:f7:58:4f:df:e5:74:
e7:b2:a8:1b:de:68:ed:7e:49:90:30:90:c1:5b:3b:
95:64:e4:6d:48:4a:1c:a8:2d:4d:99:f7:05:33:db:
8a:75:05:b5:00:72:f2:85:df:4d:de:a3:c2:52:a8:
08:1c:88:93:9f:82:d0:19:9a:ca:c7:dc:89:5b:fb:
3c:2b:48:e4:bd:ab:3e:d9:77:9a:95:7a:22:52:80:
50:82:9c:ef:45:aa:03:46:60:bf:c0:f2:b4:5b:d5:
9e:5b:ba:a5:ba:21:19:50:c7:b5:dd:f3:cb:a0:6f:
18:9d:8a:bb:03:6a:a1:74:1c:67:46:20:12:5a:25:
6c:d2:5d:48:7d:0f:d3:0d:d3:81:39:b8:e2:b9:cd:
f6:f1:3f:3d:bf:8d:6c:ac:d5:ee:d2:18:af:c7:3b:
48:99:3f:07:20:d9:5c:f4:d6:76:70:cd:53:bb:56:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:07:C4:BD:1A:7C:EC:7E:D7:85:09:FB:5A:70:EF:CF:81:A8:0C:D9
X509v3 Authority Key Identifier:
keyid:34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:90:86:49:d4:f8:e0:ba:c9:b7:f4:64:75:f3:5b:fe:09:96:
7b:7e:13:d6:b2:16:e6:10:24:eb:d3:2f:7e:f2:81:a0:3f:9c:
33:22:03:ad:e8:8b:08:fe:e2:55:0e:2f:75:07:e5:21:e9:f8:
14:92:06:aa:22:80:a5:b8:e9:a7:79:36:19:f8:67:55:18:32:
35:5e:92:5e:df:f9:78:d7:5a:33:4d:ff:c3:5f:1c:0a:d6:8c:
a9:5f:61:c4:58:38:b6:a2:5b:01:7d:22:bc:d3:3b:da:51:1f:
fa:53:6c:53:9f:4e:f7:25:3a:a3:7c:24:15:f5:58:0f:02:3d:
1e:f9:80:27:f4:5d:7a:9c:d8:5f:7a:39:02:af:78:26:42:02:
db:18:43:18:43:90:f1:69:fc:96:e3:2f:b0:9f:e5:35:e7:2c:
6b:50:d9:2b:27:37:ed:18:04:60:ec:c8:ae:dd:93:6b:3f:59:
c7:36:1f:29:c8:fc:32:8a:fa:cf:bd:e4:cf:62:28:61:7f:bf:
55:97:d1:f3:2b:76:55:54:91:f9:0a:80:59:52:f1:8d:7e:57:
2c:f1:2b:17:0e:54:82:dd:ab:4a:47:91:0c:6a:74:de:71:4c:
8a:74:21:c9:43:f0:bb:32:e5:9e:84:3a:24:15:60:02:fb:90:
95:76:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:41:26 2026 by rpki-client