Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: fkHhRqGkG7gSRpyLjtvYVcc4HJSpYClSpUyyiu5Lb1g=
Subject key identifier: 00:CB:B6:7F:9C:97:1E:35:6C:D3:4F:6F:A6:45:AC:01:B6:FF:7E:D3
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 019CADFECD205FB14B336F9542D34C215191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 10:01:22 +0000
Manifest this update: Mon 02 Mar 2026 10:01:22 +0000
Manifest next update: Tue 03 Mar 2026 10:01:22 +0000
Files and hashes: 1: 4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa (hash: Z+M0a2CeBocn+5J0DpLY2Wi61/jCPMoAwEWgcIu3zn8=)
2: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: yCg/Dmnx1Wahw33QYGKcj/LbkyYS9plEJADjcCjiytM=)
3: RxH1gaSjLMp0tnHIqiMkmznCeLE.roa (hash: p4krdNmYmG1wZdtq1raA8Nmp1Uo/DFzB3h6x0GajZ1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:cd:20:5f:b1:4b:33:6f:95:42:d3:4c:21:51:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Mar 2 10:01:22 2026 GMT
Not After : Mar 3 10:01:22 2026 GMT
Subject: CN=00cbb67f9c971e356cd34f6fa645ac01b6ff7ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:ec:d6:cb:b3:36:65:81:ab:bb:d2:13:69:
21:90:eb:4a:74:80:5e:07:b5:cd:25:95:fa:10:af:
48:9a:1d:f3:0e:e2:c3:ba:39:fe:2c:f6:26:21:8d:
94:ff:99:41:9f:eb:d9:0e:ca:f7:ec:30:2d:d3:3f:
22:9d:04:2a:94:b8:9a:f7:1b:6f:3e:d3:aa:0d:c6:
3b:7e:11:f4:63:f6:52:75:2c:37:1e:b8:cd:0b:1b:
12:f9:e3:89:93:0a:d1:d2:a5:f2:cd:37:77:9b:6b:
a4:31:fc:0a:a2:9f:7c:a3:80:49:fc:07:9d:c8:ad:
57:2b:6e:0e:77:59:d4:69:7d:79:08:3e:b4:53:27:
bd:d1:98:2d:ce:25:65:7e:71:a4:29:7c:bc:ad:ac:
15:89:1e:a9:f7:bc:e8:f2:8a:ea:3e:97:29:dd:66:
1f:14:77:b3:26:e4:b8:79:70:52:1a:a4:39:73:42:
bc:76:94:a6:8b:f8:8f:18:b2:9f:53:f7:8a:98:6c:
11:92:56:26:df:a8:56:df:9f:f1:ab:79:e2:da:2d:
e0:91:51:1d:e4:2e:cc:89:2c:25:40:56:83:b2:d5:
aa:03:69:fa:5f:f3:f1:7a:2b:56:dd:6f:3c:ec:24:
41:b8:9f:ad:69:4f:18:2a:bb:f0:8b:71:45:07:65:
c3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CB:B6:7F:9C:97:1E:35:6C:D3:4F:6F:A6:45:AC:01:B6:FF:7E:D3
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:22:53:5b:93:36:25:e0:53:b6:0b:9c:17:47:d0:5e:70:7e:
7e:39:a3:97:fd:cf:9c:73:15:7d:b3:eb:8c:79:9c:f2:7c:a1:
65:b0:80:bf:32:dc:f5:c9:f8:a3:bc:c0:49:7d:9a:dc:73:41:
06:b5:32:fe:fd:78:2a:7a:90:c0:f7:04:46:39:87:a2:98:0d:
b7:02:69:cf:3f:aa:36:41:0f:b5:7e:6e:bd:e1:b4:91:2b:8f:
36:9a:df:80:9b:1e:84:dd:0c:5b:06:b4:9a:1c:8d:e3:71:d8:
a4:89:30:29:45:76:f6:d3:b7:1b:ea:e3:1a:70:f8:61:a4:82:
6f:5c:5b:d8:91:65:fa:ac:33:d9:c9:64:d6:42:5a:2c:b9:a5:
17:2c:c3:9d:73:27:04:bb:1d:30:2b:fe:ca:de:84:0e:85:97:
d1:fc:d6:04:e3:72:16:81:cc:93:2c:ce:3f:6a:8e:4e:8c:93:
94:a2:9e:49:24:9b:b6:be:c6:ce:ed:fc:b2:e5:63:c2:68:26:
04:04:d8:03:10:9e:3b:b8:12:69:6b:f7:b2:7c:40:7d:c5:e0:
8b:31:95:6a:b8:26:72:8e:ae:06:44:11:8b:79:46:ea:c3:f3:
44:ca:34:b6:a2:48:ce:9c:7a:92:aa:24:3b:0e:3a:89:74:f6:
e2:85:04:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:24 2026 by rpki-client