Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
File: NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json)
Hash identifier: +lvDVYK9zDf3cO/2cKtwNO6GQSQ1Bvfk3SbG0ShOLhI=
Subject key identifier: B0:53:D4:FE:D1:80:1E:A7:7B:B6:56:90:1D:83:CA:7F:17:9C:87:26
Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Certificate serial: 019CA9EB26F7DE16AA8BAA3ADB45BF200895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 15:01:26 +0000
Manifest this update: Sun 01 Mar 2026 15:01:26 +0000
Manifest next update: Mon 02 Mar 2026 15:01:26 +0000
Files and hashes: 1: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: nFWWAq7oWLDPL+lYlezlycqq9IVOiKJ/lsSglmcu/3s=)
2: h0Ifd57oi9lfBeUdeRd9nSCgSg8.roa (hash: kiI/t9Fma+sRPCboiwT26YcfI7j4ilrF6LxmsduO9hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:26:f7:de:16:aa:8b:aa:3a:db:45:bf:20:08:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Validity
Not Before: Mar 1 15:01:26 2026 GMT
Not After : Mar 2 15:01:26 2026 GMT
Subject: CN=b053d4fed1801ea77bb656901d83ca7f179c8726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:56:cf:5e:4e:6f:bc:b2:20:ad:31:0b:bc:d9:
f6:3c:b2:fb:2a:10:6a:60:4a:b1:6b:70:da:ed:c6:
9c:36:c1:14:1b:79:70:a8:18:3c:2d:48:14:70:c9:
be:d9:e5:58:e2:bd:d5:d6:1c:8a:98:fb:cc:37:13:
72:69:84:61:75:c2:27:0e:a5:a7:30:18:48:5e:14:
2b:b2:b9:02:48:4c:4c:4f:eb:e5:62:fd:26:ee:94:
0c:55:bf:bb:43:e8:3e:da:91:0a:b9:2c:2d:83:e6:
b8:01:0c:79:c0:88:76:f9:0e:98:68:ab:49:e2:b5:
f2:7c:5c:75:c0:46:c1:1f:a4:3b:c6:57:03:c1:44:
bf:99:d8:29:a9:26:18:8a:0c:b4:db:4b:57:cc:28:
5f:ad:74:9f:ac:26:47:a1:41:c3:cf:b5:f5:bd:eb:
41:1a:f8:41:c9:5e:a3:ef:1d:2c:a3:96:ea:fd:1e:
17:48:14:2a:88:e5:04:ad:5c:71:48:59:90:77:92:
80:8f:2b:5e:60:1e:ff:00:18:90:f2:88:eb:2c:17:
61:e1:71:6b:93:12:fa:f6:b3:66:e3:18:f8:d8:be:
4e:07:5b:72:1c:c3:e1:9e:5e:11:3d:b8:d1:47:98:
ed:d0:f1:f7:0f:d6:70:00:d1:28:d2:6c:33:20:a6:
aa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:53:D4:FE:D1:80:1E:A7:7B:B6:56:90:1D:83:CA:7F:17:9C:87:26
X509v3 Authority Key Identifier:
keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:dc:56:e7:f4:1b:53:7a:7e:43:6d:e3:67:83:26:48:4e:ec:
af:dd:66:1e:5e:a6:21:14:2d:e8:bc:ba:f0:d1:a0:fc:e9:72:
74:c6:7a:ea:51:ca:3a:8a:49:46:c5:cd:18:80:7b:0c:ef:85:
4a:e8:e8:55:ed:4e:0e:4d:09:11:56:08:e0:57:e1:bb:12:87:
2a:f5:be:85:59:06:88:e6:13:ce:bc:d6:5a:f3:52:35:bd:22:
f3:ba:37:20:91:1f:2a:dd:a6:72:1c:52:99:2b:0d:64:82:dc:
fc:94:12:c3:38:fe:78:67:ef:82:b0:94:06:e1:eb:2c:2d:1e:
c7:e9:db:bb:d0:9b:dd:53:d0:e7:a8:1d:3a:92:88:32:26:57:
c2:9a:12:83:12:f6:c8:f3:22:fc:16:f1:e0:ba:44:d5:f4:63:
5e:65:ff:37:be:d5:07:08:9d:81:20:0b:14:1a:b2:24:78:05:
43:78:4d:9d:54:d9:15:17:c7:44:90:ee:7d:f3:3e:cc:89:69:
cc:c9:4a:6f:33:24:73:c6:52:30:89:6a:9b:a1:92:c1:97:db:
2a:78:91:6a:8f:3b:8a:bd:fd:48:5e:af:9b:48:56:05:08:2a:
f4:2b:8b:ef:5f:86:96:2b:a9:fb:c9:eb:c4:51:d6:f0:e9:6a:
c1:16:46:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:17 2026 by rpki-client