Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
File: NM3lphFF05kuzN7Ht_C4fVZr3co.mft (raw, json)
Hash identifier: rIqkG/zjmTq/FoSWaumEAwP/gGGwl8zRb5CKJGYWfWU=
Subject key identifier: DF:32:08:28:D0:FE:CB:B0:73:1B:F2:7F:FB:BD:7D:1E:43:6E:E3:43
Authority key identifier: 34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
Certificate issuer: /CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Certificate serial: 019D9AABA1E51CD6994010BC25D04D48249E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
Manifest number: 0157
Signing time: Fri 17 Apr 2026 09:00:32 +0000
Manifest this update: Fri 17 Apr 2026 09:00:32 +0000
Manifest next update: Sat 18 Apr 2026 09:00:32 +0000
Files and hashes: 1: 1-IJA-q45HspUpMubIpcnRXcTB8M.roa (hash: JXJRmj3ORBVNFKxWPy8ORXK6nbNNUCsakv/wzqIn0g0=)
2: NM3lphFF05kuzN7Ht_C4fVZr3co.crl (hash: bgilrRlyF3vORdVe5POG9L3XpuXpKtkEvhfp2BYN5+k=)
3: zbYhjs52NqgXZeFMN5zptwYaiMY.roa (hash: KsKrXGzHhE5GBB49wXeoqkTWzCeO3+7rNRAxePZu7qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:a1:e5:1c:d6:99:40:10:bc:25:d0:4d:48:24:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Validity
Not Before: Apr 17 09:00:32 2026 GMT
Not After : Apr 18 09:00:32 2026 GMT
Subject: CN=df320828d0fecbb0731bf27ffbbd7d1e436ee343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:a0:fc:35:9d:6b:d2:40:93:8f:88:c4:55:
03:2e:7e:5a:56:45:5c:8d:11:7d:3e:98:28:7f:f6:
b2:51:a9:e5:c2:14:c1:f9:2e:52:72:e8:32:26:4b:
33:49:bc:53:8c:0d:a9:f2:84:a0:0c:16:0b:a1:bb:
68:eb:fd:93:21:a6:c3:d5:9a:bd:0e:1d:b5:9b:e5:
a6:04:56:8a:9b:b6:47:b6:0b:72:c3:61:03:6a:ab:
e0:e5:f4:3d:57:ab:8b:78:3a:bb:24:4e:26:8f:9f:
f7:7b:ea:90:c5:ab:b3:f4:1b:d0:fc:f1:84:6a:f4:
be:e9:aa:2d:bb:10:c0:e9:90:55:01:6c:9f:4e:98:
3b:e4:ef:66:e9:4f:c4:8d:fa:04:d3:1b:fe:45:ae:
9d:8b:0a:3b:9d:a2:18:cd:9b:ab:b8:22:67:32:74:
dc:39:b1:23:76:9a:0f:66:3f:d5:22:4b:4e:b0:3f:
2f:9b:87:9d:d4:5c:9f:0f:17:05:37:4d:0e:e5:0b:
d4:c4:69:30:a4:80:71:02:bc:48:43:5b:c2:90:0d:
9e:53:6d:1e:ab:10:ea:28:bf:29:87:8f:9d:fe:80:
d3:75:91:ca:61:ba:d8:7f:86:f0:24:7b:c4:ce:0f:
6f:9e:98:4a:99:ae:1c:78:c1:d5:13:8e:ca:bc:b6:
31:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:32:08:28:D0:FE:CB:B0:73:1B:F2:7F:FB:BD:7D:1E:43:6E:E3:43
X509v3 Authority Key Identifier:
keyid:34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4f:24:75:c5:cd:dd:8b:8f:86:a0:58:b0:66:c1:e9:ff:35:
15:f4:df:26:99:44:b1:61:2c:49:f8:77:74:c9:d7:d3:36:cc:
99:7e:e0:b9:91:7d:8e:9f:66:dc:5f:64:2c:aa:43:57:29:02:
b0:58:10:f9:09:ae:d9:bb:4f:5a:7b:ca:a6:17:2c:fe:ff:5b:
c4:3f:5a:54:e4:9a:24:ca:f0:3e:57:fe:67:5c:18:31:91:67:
c5:36:03:02:9f:e8:b6:55:1f:57:e7:c5:95:46:83:fb:75:c6:
97:99:db:6c:81:77:b8:e3:e2:f1:e4:8b:2b:bc:f9:5f:26:9d:
8d:b0:a0:7d:ae:a4:86:ac:7a:7f:84:f5:0b:ae:91:78:dd:df:
b8:e6:09:1c:52:1e:a8:26:c4:92:33:50:60:d9:31:9b:01:59:
55:41:bb:96:fc:9f:b0:1e:66:1b:32:f1:76:97:24:52:05:38:
fb:c8:97:c8:bc:9d:f6:6b:5e:4f:4d:25:77:fb:18:24:27:6f:
72:c6:87:56:64:74:05:3f:e4:62:45:82:ff:1c:53:24:fc:b5:
a6:bb:04:de:f4:01:cf:c9:91:99:50:11:c8:fa:da:5d:95:fd:
ef:b9:12:ee:fe:6a:e7:3b:30:c5:9b:0e:cd:1c:a0:99:4f:80:
8f:3e:2b:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq6HlHNaZQBC8JdBNSCSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0Y2RlNWE2MTE0NWQzOTkyZWNjZGVjN2I3ZjBiODdkNTY2
YmRkY2EwHhcNMjYwNDE3MDkwMDMyWhcNMjYwNDE4MDkwMDMyWjAzMTEwLwYDVQQD
EyhkZjMyMDgyOGQwZmVjYmIwNzMxYmYyN2ZmYmJkN2QxZTQzNmVlMzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCqg/DWda9JAk4+IxFUDLn5aVkVc
jRF9Ppgof/ayUanlwhTB+S5ScugyJkszSbxTjA2p8oSgDBYLobto6/2TIabD1Zq9
Dh21m+WmBFaKm7ZHtgtyw2EDaqvg5fQ9V6uLeDq7JE4mj5/3e+qQxauz9BvQ/PGE
avS+6aotuxDA6ZBVAWyfTpg75O9m6U/EjfoE0xv+Ra6diwo7naIYzZuruCJnMnTc
ObEjdpoPZj/VIktOsD8vm4ed1FyfDxcFN00O5QvUxGkwpIBxArxIQ1vCkA2eU20e
qxDqKL8ph4+d/oDTdZHKYbrYf4bwJHvEzg9vnphKma4ceMHVE47KvLYxvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8yCCjQ/suwcxvyf/u9fR5DbuNDMB8GA1UdIwQY
MBaAFDTN5aYRRdOZLszex7fwuH1Wa93KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iNDJjNTMtZTA1YS00ZDc3LTgyZWUt
NWVmMzYyMjZhNzY3LzEvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iNDJjNTMtZTA1YS00ZDc3LTgyZWUtNWVmMzYyMjZhNzY3
LzEvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEE8kdcXN
3YuPhqBYsGbB6f81FfTfJplEsWEsSfh3dMnX0zbMmX7guZF9jp9m3F9kLKpDVykC
sFgQ+Qmu2btPWnvKphcs/v9bxD9aVOSaJMrwPlf+Z1wYMZFnxTYDAp/otlUfV+fF
lUaD+3XGl5nbbIF3uOPi8eSLK7z5XyadjbCgfa6khqx6f4T1C66ReN3fuOYJHFIe
qCbEkjNQYNkxmwFZVUG7lvyfsB5mGzLxdpckUgU4+8iXyLyd9mteT00ld/sYJCdv
csaHVmR0BT/kYkWC/xxTJPy1prsE3vQBz8mRmVARyPraXZX977kS7v5q5zswxZsO
zRygmU+Ajz4rzQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:58:09 2026 by rpki-client