Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
File: NcClulvILiDgRvu1TAZYBvTHtqE.mft (raw, json)
Hash identifier: 8l+3nIcDMJ/wrejSfc/tdDk4v5XQrnlgHsBSOJxeE04=
Subject key identifier: 36:69:8A:4E:87:91:2F:97:22:F3:F5:2A:83:6C:02:F8:A4:84:57:40
Authority key identifier: 35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
Certificate issuer: /CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Certificate serial: 019CABD90DCD6D8F0A503E744CB07FDF9C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:00:54 +0000
Manifest this update: Mon 02 Mar 2026 00:00:54 +0000
Manifest next update: Tue 03 Mar 2026 00:00:54 +0000
Files and hashes: 1: Gc2XvyP01-fby2wIcpCQAXK9NNI.roa (hash: TqTwmJ2kXyM/+f6YO1uN50U7uVnjd7tFzIbHZN9RIuA=)
2: NcClulvILiDgRvu1TAZYBvTHtqE.crl (hash: u8ubwVwZb204wE366u9T9C7pGZ+lkhkjPR+qLYeo69A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:0d:cd:6d:8f:0a:50:3e:74:4c:b0:7f:df:9c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Validity
Not Before: Mar 2 00:00:54 2026 GMT
Not After : Mar 3 00:00:54 2026 GMT
Subject: CN=36698a4e87912f9722f3f52a836c02f8a4845740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:9c:74:fe:b6:bb:e4:4c:70:6d:75:46:67:
cf:ee:87:49:ab:e9:50:78:98:74:a8:95:51:bb:90:
20:b5:46:f5:34:28:40:70:e5:9d:68:1f:43:90:ac:
40:67:76:bc:6e:51:4b:09:04:a3:c9:e9:d2:50:3b:
bc:13:a9:bb:d4:bc:cd:bd:11:ae:d3:85:0e:34:c0:
33:ce:87:6f:3d:14:60:56:ce:b6:ea:28:a5:9f:fb:
22:98:69:43:43:15:5b:e9:9f:23:1a:0d:74:c5:96:
c8:97:67:f3:68:e9:22:d1:a6:2b:a4:16:29:cd:de:
4a:d7:19:38:08:1e:15:22:79:e3:55:33:7c:f3:98:
c0:30:b6:24:fb:21:54:53:1b:17:91:2d:8c:f8:8d:
7b:5d:23:8e:be:c0:38:e8:78:20:0e:e7:b5:87:06:
e2:65:0c:4d:6a:1c:ed:7e:b2:29:d2:7d:38:db:f7:
0a:37:72:aa:00:12:7e:10:c7:4e:5e:34:9d:4b:f0:
b7:b0:45:59:4f:e1:9e:7c:8b:c0:42:3a:ce:6d:0e:
47:83:a2:c5:31:db:87:f0:68:bf:66:89:68:00:88:
17:ec:6e:77:0f:11:de:52:eb:c2:93:c2:ed:a5:73:
e3:5e:13:c3:15:93:3b:a3:e3:ce:d5:39:05:94:59:
95:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:69:8A:4E:87:91:2F:97:22:F3:F5:2A:83:6C:02:F8:A4:84:57:40
X509v3 Authority Key Identifier:
keyid:35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:19:32:a3:11:d9:e3:15:d9:25:41:9f:9c:b1:fd:1f:c0:85:
05:bc:d7:48:ff:49:d3:d7:8a:6a:f7:61:11:ad:f8:c2:63:15:
dc:57:42:b0:44:ac:5a:4c:03:c1:8f:5a:3a:fc:a0:d5:dc:9a:
74:ee:b1:c5:49:69:e7:df:4d:02:7a:51:88:0a:a9:1a:a3:c1:
f4:7b:0f:2a:54:00:9d:0f:e6:56:72:5e:b3:05:68:43:fb:13:
d9:7e:a2:9e:fd:d4:b6:22:a2:71:08:60:92:dc:cb:3e:4f:05:
e6:8e:f9:1a:7f:37:6d:1a:25:04:1a:ac:03:77:ee:6e:1a:bc:
a5:e6:4a:8d:8c:20:95:34:95:ef:03:ed:4f:76:4e:27:4d:c9:
0c:19:74:2d:b6:ab:7d:71:46:98:4a:2f:26:6f:5c:29:44:04:
38:1a:3c:80:38:3d:9e:7e:e9:fa:52:80:bc:eb:df:9e:94:9b:
75:47:08:80:89:c3:6f:fe:78:22:b1:89:f2:57:9f:4c:8a:6e:
47:c5:c7:bd:5d:11:c1:54:11:11:15:b0:a3:2e:86:a7:77:f7:
10:57:29:44:31:ce:09:43:2a:aa:82:a2:4b:ac:90:67:b2:2e:
4d:fb:89:22:8f:ea:c7:ad:1b:94:0d:b9:58:9e:3a:81:2d:66:
df:66:d7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:09 2026 by rpki-client