Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
File: NM3lphFF05kuzN7Ht_C4fVZr3co.mft (raw, json)
Hash identifier: 1cvj8ysvlepvrjePAl/z/s36XkrGZ4toyW0stbI0Gmw=
Subject key identifier: D9:74:EF:7E:40:E0:3D:38:69:E4:33:BC:48:21:90:CC:CA:85:F6:CB
Authority key identifier: 34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
Certificate issuer: /CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Certificate serial: 019CAF11130B625F06EDE043220CE57A54D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
Manifest number: DD
Signing time: Mon 02 Mar 2026 15:00:57 +0000
Manifest this update: Mon 02 Mar 2026 15:00:57 +0000
Manifest next update: Tue 03 Mar 2026 15:00:57 +0000
Files and hashes: 1: 1-IJA-q45HspUpMubIpcnRXcTB8M.roa (hash: JXJRmj3ORBVNFKxWPy8ORXK6nbNNUCsakv/wzqIn0g0=)
2: NM3lphFF05kuzN7Ht_C4fVZr3co.crl (hash: rX4WULS6osq+3LPn6DD7k8u4dVsCk3QEINF9KN/+cuk=)
3: zbYhjs52NqgXZeFMN5zptwYaiMY.roa (hash: KsKrXGzHhE5GBB49wXeoqkTWzCeO3+7rNRAxePZu7qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:13:0b:62:5f:06:ed:e0:43:22:0c:e5:7a:54:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Validity
Not Before: Mar 2 15:00:57 2026 GMT
Not After : Mar 3 15:00:57 2026 GMT
Subject: CN=d974ef7e40e03d3869e433bc482190ccca85f6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:97:75:3e:cc:15:b4:b5:da:44:10:fb:67:
88:34:4a:38:d9:86:85:ca:c7:df:b4:75:6d:99:36:
fa:7d:d3:1f:2b:4e:3b:78:49:35:36:1f:56:c2:40:
1f:cd:4f:69:aa:83:ec:2e:92:61:25:c6:e1:92:18:
3c:ac:28:9e:d0:cd:38:38:bb:be:4a:82:85:87:cb:
e1:08:3c:0b:b3:ba:8a:e4:f7:75:96:c2:c2:7b:28:
a3:11:3c:34:eb:64:e5:4e:64:86:ba:f5:8b:34:ef:
1c:66:b5:09:b2:d8:a5:be:77:a9:03:3e:46:4b:14:
62:dd:05:93:cf:77:c1:d9:40:92:0b:44:b2:ad:9d:
6e:9f:1a:66:64:9a:c2:ea:12:b0:8d:18:ce:26:06:
f1:9b:c7:2f:90:bd:5f:fc:27:78:8b:96:2d:7d:5e:
7f:fb:6e:bd:a6:f9:88:b3:5f:a9:ca:14:7f:91:5b:
21:c2:91:7f:4f:4d:d1:62:4f:83:4b:f2:a7:ae:f0:
d0:ca:07:de:e5:18:49:da:db:f2:ca:fd:d3:a6:9a:
2a:e6:45:50:58:fc:cd:32:39:3c:4d:bc:52:34:0f:
f4:84:d1:cb:23:59:ad:48:f0:9f:2d:7e:3d:f4:c0:
56:30:c4:e4:ec:76:26:15:38:9c:65:aa:4a:ba:66:
d7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:74:EF:7E:40:E0:3D:38:69:E4:33:BC:48:21:90:CC:CA:85:F6:CB
X509v3 Authority Key Identifier:
keyid:34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ff:87:d6:bb:7a:c3:d4:3c:93:84:05:f2:29:dd:9c:62:47:
e7:3c:bb:c3:74:a2:e6:c0:16:b2:c0:5d:83:d8:12:9f:33:31:
e6:d9:1f:fc:ca:3b:90:66:f5:d9:c2:f9:17:42:f2:c7:7f:bc:
76:c5:3a:61:9e:d2:1e:29:7a:f4:12:fe:18:c5:e4:75:2c:17:
da:42:3c:f9:2e:1f:5c:d7:7e:38:bb:ec:03:89:bc:1c:19:91:
de:fc:37:61:20:9b:25:30:47:ea:11:58:6a:b4:65:ce:44:3f:
f7:5f:12:8d:41:11:bb:04:8f:50:2d:6f:a5:ff:6e:f9:39:92:
b4:8b:63:8c:1c:cd:b8:f4:bd:11:01:fc:8f:47:76:ab:16:a1:
61:34:cd:00:39:b0:d7:87:29:7a:8c:b8:db:3c:9a:73:69:9f:
ee:1f:11:ff:99:13:a6:e0:ed:89:4f:fe:6d:c7:de:97:8b:7c:
dc:8b:cf:ec:5c:2e:5c:1c:9b:3c:21:54:a0:5e:39:90:bd:6b:
5f:f5:97:8a:56:9a:21:9d:b8:e0:19:5a:a3:bb:1a:37:ad:55:
be:9c:0c:3e:9f:2e:72:27:1b:06:de:24:8b:77:90:e2:7e:70:
3c:f7:07:bb:77:1f:7d:a4:09:56:c1:ba:87:23:cc:8a:9f:32:
3f:e4:90:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:47 2026 by rpki-client