Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
File: NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft (raw, json)
Hash identifier: s/xsH0+SU5Z9r8C0nzUliDlYpcIXOhojRwcf9SP6f7M=
Subject key identifier: AB:9C:83:D8:3A:62:24:98:49:B3:F6:71:F1:71:7B:4F:31:39:92:D4
Authority key identifier: 34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
Certificate issuer: /CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Certificate serial: 019CAF112E38938AE09ACC3F3A04681D6B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
Manifest number: 0DBE
Signing time: Mon 02 Mar 2026 15:01:04 +0000
Manifest this update: Mon 02 Mar 2026 15:01:04 +0000
Manifest next update: Tue 03 Mar 2026 15:01:04 +0000
Files and hashes: 1: NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl (hash: VvHgak6dQn+q1hHlm7pgqwMKaaZwPkcXl6UPZT8Y43I=)
2: d0hB3sr_J40CjN3DPScI5WDQSFY.roa (hash: ZEZewkOpSdtKFHUVQXPwxArZxLY7Jpp1t6GgLUjAr+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:2e:38:93:8a:e0:9a:cc:3f:3a:04:68:1d:6b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Validity
Not Before: Mar 2 15:01:04 2026 GMT
Not After : Mar 3 15:01:04 2026 GMT
Subject: CN=ab9c83d83a62249849b3f671f1717b4f313992d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:5c:c9:89:1f:03:61:53:bd:e3:e7:14:36:
08:25:3b:41:d6:dd:f3:c0:8a:51:cd:5f:6d:02:d6:
67:ff:4e:a3:6b:ad:87:2c:53:55:74:fb:b2:3b:0b:
d8:3b:80:18:50:87:b5:92:92:e9:4e:f0:33:6c:ad:
f5:5e:5d:0f:13:94:40:eb:59:82:c6:5f:5e:bb:5a:
2d:f4:52:e8:0d:93:57:ac:ce:6b:b2:8c:20:de:ff:
f7:10:54:d9:6f:ee:d4:91:34:02:85:7d:d5:de:b8:
36:01:42:52:bc:57:17:af:b1:86:83:7b:98:45:87:
b4:3a:f9:b0:4b:c6:2b:17:d0:6e:ea:5b:54:a9:74:
6b:3a:7b:1b:d1:8e:6a:eb:72:56:59:20:88:52:4e:
95:45:d0:83:a9:e3:b0:b6:5a:fd:1c:ad:a8:e1:45:
67:27:a6:c3:71:24:d8:fd:6e:3c:d1:9a:28:ab:93:
fd:86:21:90:a7:9e:45:7a:d0:1b:93:9d:bc:42:bf:
3a:50:be:eb:24:92:65:bb:bb:45:58:56:35:87:ac:
a8:4a:d3:6b:fe:50:82:6a:84:76:11:e2:3e:51:58:
78:61:2a:b4:e2:a5:5c:61:ba:27:3f:76:97:35:41:
13:73:c9:99:2c:7a:04:c9:85:38:fd:99:87:64:cb:
d4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9C:83:D8:3A:62:24:98:49:B3:F6:71:F1:71:7B:4F:31:39:92:D4
X509v3 Authority Key Identifier:
keyid:34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ff:ce:88:2e:63:00:df:7c:b4:07:eb:a6:14:82:80:99:72:
03:0b:6c:7b:b2:ea:88:96:7c:53:af:32:62:96:ce:4a:98:8e:
59:46:d0:c3:ed:c1:81:41:f1:93:d7:d2:7b:c8:18:ce:f1:9d:
35:46:19:53:e5:e1:be:f4:0e:9c:f2:18:8f:2a:92:8b:25:c6:
86:bc:16:3a:9c:97:ee:aa:a8:47:6d:fd:50:dd:b2:91:6e:51:
09:7d:2c:10:07:13:b4:1c:b7:39:a4:f0:8c:fc:77:a3:f3:d7:
b3:e3:cc:1c:3f:2f:09:3a:8c:54:74:f7:7b:59:2c:f6:ed:97:
05:a8:e6:cc:95:54:0e:72:b2:61:21:3e:89:9c:be:76:a9:66:
55:b3:f4:f7:3d:84:a5:ec:ee:f6:7b:20:dd:b1:b5:1d:a9:ed:
f2:f8:97:f9:12:ac:38:95:2e:04:87:e5:16:e2:94:f0:7b:e4:
de:4e:38:e8:d5:b6:07:d9:c6:7c:33:44:d9:ce:de:8e:9b:d2:
16:a0:76:f8:51:43:47:2a:53:27:97:96:6a:4e:c5:ed:59:ef:
85:88:f5:fb:a3:ff:6c:7e:14:63:a4:7b:76:37:4d:d2:42:a9:
4b:05:03:bf:ec:66:57:31:32:e5:5d:c1:e5:29:97:97:02:0f:
6e:b3:02:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:47 2026 by rpki-client