Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier: TrA2WWFxWJAyWkLqKRFOWE7+u0MM3i7NWKd9MraQg1s=
Subject key identifier: 2C:A7:21:C7:A3:D2:B5:25:B9:11:71:33:8B:9D:36:F8:73:5E:63:C9
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 019CAB6B2644EE75A9AF53436A67B8085810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number: 184E
Signing time: Sun 01 Mar 2026 22:00:51 +0000
Manifest this update: Sun 01 Mar 2026 22:00:51 +0000
Manifest next update: Mon 02 Mar 2026 22:00:51 +0000
Files and hashes: 1: 93UVF_CSKr9HS2r9ivD-x0ZdZcA.roa (hash: fggiKiNlO1nsG4KLwAlscuPV1NUEC9Woors8sqJhB4M=)
2: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: XapxsWz1mQgSCG5aZOTSUg/GBi3D/5rRPAXq8NLORDg=)
3: OK_s7EBfpgZbjIrvUoVqzpWaoEw.roa (hash: zZg+oBq+g5DuaneD38ld2ueNobqmEDE+dyirbFmQtoM=)
4: Sompo4sxvvROdjoZfiDq50faXfk.roa (hash: gEMQmsxvILpWDS8TIsfBnFHT3cfYRB4Lsa8x41J62hY=)
5: VxowdBzPqof9vzEqLjnkNBo4yck.roa (hash: OTDMhBcP+WbUFYsB8km0x2Ap8UBhFkwcBM0NKVz08Uw=)
6: dXyU9dvy-RL56kxAeM9aZtX19b4.roa (hash: Qdhb2+QEBYW0iPhxNt+tJQ5NTdnCyw9dULNf6sBX/ds=)
7: oJ2ks5YNwiHAq9WzT5_4e1nkYaE.roa (hash: bo5UpeN+wQ6nH/bLCuevf6K58UPiHvne75tCF8e9eKo=)
8: t1vkmCK8KzwYpdaOj2Z8K8WRkuE.roa (hash: cQGDZLaCNeANHuWk60qBEto7tZ5K0Q991hBY/3JdECg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:26:44:ee:75:a9:af:53:43:6a:67:b8:08:58:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Mar 1 22:00:51 2026 GMT
Not After : Mar 2 22:00:51 2026 GMT
Subject: CN=2ca721c7a3d2b525b91171338b9d36f8735e63c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:0c:f8:91:9c:ad:b4:3f:9f:6f:d9:30:76:
e8:83:e8:f2:7a:ac:ed:b4:47:39:66:b6:bb:c5:60:
6e:2b:65:a0:ba:9c:ed:b7:e7:0a:8d:93:43:32:31:
de:ed:7a:28:05:d6:99:35:8d:09:1b:7a:5b:03:e0:
e2:a8:28:d3:17:f6:b4:3c:af:e2:86:15:03:ee:03:
0e:a9:c8:3e:d5:27:59:b2:52:5f:7f:14:6c:40:fd:
d7:5d:64:12:29:9e:35:a6:a5:82:6a:bc:eb:2f:ff:
6c:3d:8d:4d:8f:ad:7c:d9:aa:a9:64:ba:03:15:3e:
8a:f0:7a:d3:9a:2f:e5:31:08:16:00:0a:3f:14:e6:
28:0a:37:22:b8:2f:ca:2b:83:58:fe:62:e5:49:ae:
5f:85:86:8b:d2:22:cc:5d:d9:1b:be:b3:b6:83:c4:
80:0c:75:bf:dc:2c:5d:e1:4c:d9:52:f3:c4:6d:88:
67:6a:bf:68:c1:3d:a5:eb:96:8c:cc:f3:4b:be:87:
a5:71:2e:13:00:91:68:62:73:ce:ea:9b:39:ec:c2:
ce:d1:55:5e:be:c6:b5:d0:42:cf:bf:97:70:4f:df:
d9:df:a7:7a:4d:24:77:c1:35:0f:0e:d5:da:17:5f:
ab:c5:66:dd:8a:53:9a:97:56:63:e0:63:ca:95:13:
20:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A7:21:C7:A3:D2:B5:25:B9:11:71:33:8B:9D:36:F8:73:5E:63:C9
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8b:96:9f:bc:81:94:6d:91:a6:74:4a:71:52:7c:e2:d0:9e:
3c:c3:38:e6:f0:df:b9:47:56:73:e3:88:94:af:bc:8c:da:3c:
e4:41:44:70:b4:e0:2d:8d:d0:42:b0:ad:63:e0:76:69:bb:85:
17:1a:f6:9c:a2:ee:e9:f0:0a:97:da:11:f1:07:35:2e:96:f5:
75:33:45:ba:33:0c:9c:b2:88:ea:fd:82:83:95:a8:ed:3e:f4:
fa:ce:d7:ca:5a:d5:08:87:c6:b7:d1:f5:1f:a9:fd:95:02:fa:
4b:2c:8e:61:fb:7c:e0:d6:26:0a:6c:60:9c:b8:bd:b4:3f:43:
02:d4:56:01:01:e9:6c:07:aa:d1:15:87:4c:af:df:5b:19:b2:
35:70:9a:83:05:8e:2c:b4:ed:24:e7:30:d1:e7:a0:f3:01:12:
aa:67:45:9e:1d:d5:64:5e:9a:a7:a3:b7:1b:11:d7:76:c0:2d:
95:91:3e:46:b0:b9:3d:74:57:ad:10:7c:d4:81:f0:1e:37:23:
30:e2:9b:8f:d4:06:c8:9d:3b:0f:61:cb:f8:be:cf:5c:54:7f:
68:a1:0b:ea:51:31:c7:80:14:2c:06:43:eb:75:6b:67:fd:44:
29:65:14:12:2d:60:34:83:bb:ea:41:ba:24:43:5e:e5:ba:e5:
36:9b:93:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:55 2026 by rpki-client