Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
File: NLjV-ROFaLUssJNuK0yU93zleuw.mft (raw, json)
Hash identifier: XDQ8oZkzvk0vwRl43DFJBa0KxRD6tGYP2jBGNdzIbE8=
Subject key identifier: 52:4D:B0:C3:D5:3C:06:35:ED:6C:C0:B5:DF:5F:A7:B7:E4:7D:B7:55
Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
Certificate issuer: /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Certificate serial: 019CABD98C9B517F7F6F9D0F90F1788FEE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
Manifest number: 1580
Signing time: Mon 02 Mar 2026 00:01:27 +0000
Manifest this update: Mon 02 Mar 2026 00:01:27 +0000
Manifest next update: Tue 03 Mar 2026 00:01:27 +0000
Files and hashes: 1: 2qExfB805-R2i4AdQ2Nza5P_ogA.roa (hash: I7bRoDVEoiwuKeHZcRlXKBPzc5ivPBkAnRRWojlZ0Wc=)
2: NLjV-ROFaLUssJNuK0yU93zleuw.crl (hash: qI2uKRDVyTFYkzZTQqoxvpDDGtqeSuFoZEKHAy9Cs/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:8c:9b:51:7f:7f:6f:9d:0f:90:f1:78:8f:ee:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Validity
Not Before: Mar 2 00:01:27 2026 GMT
Not After : Mar 3 00:01:27 2026 GMT
Subject: CN=524db0c3d53c0635ed6cc0b5df5fa7b7e47db755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:13:19:4c:25:d8:0b:dc:1c:2b:e3:9e:b6:b6:
bc:f0:d6:40:0d:f9:4b:d9:e0:5b:1e:d1:50:47:3a:
4a:28:e6:99:a9:39:e3:7c:fb:fb:e8:35:e9:be:0c:
36:77:17:75:44:ae:9f:c9:78:58:68:ba:83:f9:29:
ab:2b:8f:63:0f:55:e2:15:82:b3:9a:17:a5:07:93:
d4:c6:bf:3a:05:59:dd:85:96:d0:db:cd:c1:8d:f9:
34:3d:fd:e7:db:20:88:4a:41:1a:e2:58:1d:6a:a6:
97:29:d5:95:01:88:4a:e3:3d:3a:2a:eb:82:dd:8a:
2d:00:ca:d2:6d:06:ff:9b:6a:27:b6:92:44:53:de:
a1:18:87:71:74:eb:41:4c:e5:46:cc:06:9d:10:ef:
71:d5:8f:59:32:86:12:80:f4:19:75:1f:10:6a:d8:
5e:06:e0:73:f8:93:16:de:24:d6:83:58:d2:c2:dd:
07:c8:13:3b:96:82:75:fc:8c:b0:43:be:30:75:4f:
f8:96:d2:a4:d4:84:94:1d:35:cf:62:1a:3d:0f:6d:
cd:92:9c:82:b1:02:4c:3a:47:ff:f9:99:58:aa:46:
42:94:c1:e8:02:7b:fc:02:bf:bc:70:b5:6d:16:ac:
f0:b9:b7:f0:cf:1a:e9:11:78:1b:e7:9a:34:2c:c9:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4D:B0:C3:D5:3C:06:35:ED:6C:C0:B5:DF:5F:A7:B7:E4:7D:B7:55
X509v3 Authority Key Identifier:
keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:10:44:0a:60:09:73:2d:83:77:5b:36:70:56:ac:95:26:f0:
c7:96:8a:42:ae:07:d5:72:5b:04:83:71:41:f6:da:18:02:dc:
de:ad:20:26:af:98:6f:e2:3e:5f:e1:5e:30:11:95:a1:2d:d9:
48:52:d0:20:5c:90:f5:c2:d3:77:97:e9:2c:08:8e:8e:07:b5:
e2:a7:4c:b1:1f:be:66:ba:38:39:b8:12:52:90:69:6c:22:35:
a0:cb:b7:41:c5:ed:d4:0a:86:54:a4:ee:e6:33:76:07:9f:5f:
4c:54:b1:91:a9:af:9d:52:13:bf:7c:b5:4e:81:93:59:f7:81:
af:90:a4:85:73:80:74:5e:d9:68:c3:62:a9:66:55:04:91:0d:
a5:1b:98:7f:98:46:86:3f:b8:ee:c7:db:cf:92:38:c9:6e:84:
e6:b1:e3:80:4d:e1:11:96:12:f3:83:7c:d5:44:e1:a7:98:c9:
23:41:e8:5d:83:16:2b:c9:db:8a:1b:74:24:61:a5:90:9a:c5:
b5:16:ad:96:68:64:fe:44:38:b3:7a:ce:30:c2:cc:3f:9f:6b:
bb:5b:b0:75:13:2e:8e:8e:27:9f:92:e8:91:d8:09:1b:4a:a3:
b0:a2:98:ca:0d:c7:ca:bd:5a:f4:66:2c:37:49:bd:d2:81:26:
e9:f3:20:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:34 2026 by rpki-client