Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
File: NNUZJHQCvPvfDs6QIK1kYi6dO64.mft (raw, json)
Hash identifier: U9HXbPgb4KB42Rop4ToPAfYECbVEkWwZ0BtUNj+jgFk=
Subject key identifier: 67:85:98:27:DE:0C:B2:F0:C2:51:C1:8E:59:37:63:4B:00:36:8B:41
Authority key identifier: 34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
Certificate issuer: /CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Certificate serial: 019D375312105C95058F33BDB21824EA591F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
Manifest number: 1121
Signing time: Sun 29 Mar 2026 02:01:24 +0000
Manifest this update: Sun 29 Mar 2026 02:01:24 +0000
Manifest next update: Mon 30 Mar 2026 02:01:24 +0000
Files and hashes: 1: CuLXTApTY665Qqw5qFqzkskM4Y4.roa (hash: 7Izzut+1ogoYvoMfOGiIDjD5ckHSQdRcpDniAQU0kyc=)
2: NNUZJHQCvPvfDs6QIK1kYi6dO64.crl (hash: DfqF2AO3A9HVN07AZrme/aLk8F9Ux3vWHj1mEx5slAQ=)
3: cIznhG-7FFlY99slwXQBHSyGArI.roa (hash: 6HAUnj4ChowrLAx0R+vc3a/ycSWndHfVoayw20SNgbQ=)
4: f4nPS6ohtqHTChuoe7zsCtGbZk0.roa (hash: sDMFZIqzqP0HnmKISKRvCr3JlZX4SyHrkPjSdRU5xGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:12:10:5c:95:05:8f:33:bd:b2:18:24:ea:59:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Validity
Not Before: Mar 29 02:01:24 2026 GMT
Not After : Mar 30 02:01:24 2026 GMT
Subject: CN=67859827de0cb2f0c251c18e5937634b00368b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b4:bb:28:f9:81:28:c7:51:87:be:1c:5c:3a:
66:72:e4:e6:3d:85:8d:59:45:6d:c1:2d:59:82:76:
0e:2e:ae:bc:0c:93:f2:d2:f1:6d:af:57:dc:7f:e7:
27:98:69:62:fe:47:3d:0f:28:61:bc:e3:40:c6:95:
b9:66:56:0c:01:69:93:16:c5:05:f6:d9:8a:f0:55:
38:5d:92:ad:52:8f:87:d1:d2:77:e4:d3:17:1d:5d:
80:cb:2e:98:31:58:f9:58:8d:66:dd:a1:e3:9b:94:
f9:47:01:e9:d9:8e:64:3a:1e:d9:f2:a8:4b:af:50:
3d:e0:48:08:aa:94:7d:c6:d3:af:7b:61:a6:d8:81:
3c:26:4a:06:10:3b:22:70:20:f6:74:6e:92:75:c6:
7b:50:c9:33:04:df:0c:0c:78:cc:b5:79:42:c3:16:
87:7b:39:fe:af:df:7e:ec:84:bb:5b:86:26:86:65:
66:56:85:28:3a:6f:45:5e:fb:e2:1e:a8:d1:ae:d7:
00:dd:d9:6d:f3:8a:53:b9:9b:97:2a:25:33:aa:4e:
7d:75:69:ea:43:00:c9:18:2f:7e:0f:50:e1:4b:d9:
36:cb:04:a6:72:12:4b:a0:c1:f6:3e:4b:c2:a1:a2:
4a:04:64:bf:f7:01:5e:82:28:26:ae:15:e2:32:88:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:85:98:27:DE:0C:B2:F0:C2:51:C1:8E:59:37:63:4B:00:36:8B:41
X509v3 Authority Key Identifier:
keyid:34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:af:62:1b:e9:db:e1:2e:57:15:2e:43:3e:a7:67:9e:5d:5f:
33:32:a7:7a:ea:28:f0:7d:05:84:60:04:4b:62:bf:47:74:1e:
53:a7:90:ea:fc:b5:fe:2f:6f:a2:f4:a8:e4:13:f4:c3:82:fa:
5a:7c:de:24:3c:f7:61:f1:b1:a0:26:bb:67:dc:17:44:78:cf:
14:48:9a:16:5b:63:31:40:fc:48:c9:3b:25:91:59:53:19:96:
a6:f4:28:96:76:1c:fb:e3:1e:e0:b1:67:93:b5:27:9e:73:9e:
27:b3:32:8c:6c:30:65:79:2d:7b:6d:46:29:5d:fa:e0:7b:f6:
0e:4f:4f:0b:7d:a5:37:39:7a:94:45:03:be:b4:99:c0:58:00:
71:e5:e2:48:e8:44:6c:79:7a:62:6e:83:0b:4c:c2:6a:ad:f7:
6f:77:9e:80:24:8f:ac:f8:7d:c1:df:9a:a2:f7:7d:72:37:6b:
bb:a0:14:bb:a0:2a:9d:78:6e:38:85:6f:84:a8:3f:fa:04:ab:
ad:98:73:52:8f:7e:c3:fd:b5:a9:8a:bb:20:0c:fa:36:b3:99:
03:ad:8b:4c:bd:99:bd:42:a9:4b:38:38:be:23:7b:81:58:c4:
f6:ff:c8:19:ba:6f:a4:3a:de:03:42:1c:75:2c:6c:ed:c3:b1:
5f:d6:5a:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UxIQXJUFjzO9shgk6lkfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZDUxOTI0NzQwMmJjZmJkZjBlY2U5MDIwYWQ2NDYyMmU5
ZDNiYWUwHhcNMjYwMzI5MDIwMTI0WhcNMjYwMzMwMDIwMTI0WjAzMTEwLwYDVQQD
Eyg2Nzg1OTgyN2RlMGNiMmYwYzI1MWMxOGU1OTM3NjM0YjAwMzY4YjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67S7KPmBKMdRh74cXDpmcuTmPYWN
WUVtwS1ZgnYOLq68DJPy0vFtr1fcf+cnmGli/kc9DyhhvONAxpW5ZlYMAWmTFsUF
9tmK8FU4XZKtUo+H0dJ35NMXHV2Ayy6YMVj5WI1m3aHjm5T5RwHp2Y5kOh7Z8qhL
r1A94EgIqpR9xtOve2Gm2IE8JkoGEDsicCD2dG6SdcZ7UMkzBN8MDHjMtXlCwxaH
ezn+r99+7IS7W4YmhmVmVoUoOm9FXvviHqjRrtcA3dlt84pTuZuXKiUzqk59dWnq
QwDJGC9+D1DhS9k2ywSmchJLoMH2PkvCoaJKBGS/9wFegigmrhXiMoiEowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeFmCfeDLLwwlHBjlk3Y0sANotBMB8GA1UdIwQY
MBaAFDTVGSR0Arz73w7OkCCtZGIunTuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMDgxNzktYmU2OS00YzEwLTg2OTQt
ZmJkMzk5YTQ0NzVlLzEvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zMDgxNzktYmU2OS00YzEwLTg2OTQtZmJkMzk5YTQ0NzVl
LzEvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFq9iG+nb
4S5XFS5DPqdnnl1fMzKneuoo8H0FhGAES2K/R3QeU6eQ6vy1/i9vovSo5BP0w4L6
WnzeJDz3YfGxoCa7Z9wXRHjPFEiaFltjMUD8SMk7JZFZUxmWpvQolnYc++Me4LFn
k7UnnnOeJ7MyjGwwZXkte21GKV364Hv2Dk9PC32lNzl6lEUDvrSZwFgAceXiSOhE
bHl6Ym6DC0zCaq33b3eegCSPrPh9wd+aovd9cjdru6AUu6AqnXhuOIVvhKg/+gSr
rZhzUo9+w/21qYq7IAz6NrOZA62LTL2ZvUKpSzg4viN7gVjE9v/IGbpvpDreA0Ic
dSxs7cOxX9ZazQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:56 2026 by rpki-client