Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
File: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft (raw, json)
Hash identifier: /OZNryn9LBZCfctIKlyWAsslXaaVOvO1B0Cnc5wSBFQ=
Subject key identifier: 22:B3:2D:7A:0C:10:89:D3:8E:AF:A5:61:13:91:7D:DE:21:CE:5C:86
Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
Certificate issuer: /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Certificate serial: 019D394137B2DBCF441BE85A51447C45A47A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:01:08 +0000
Manifest this update: Sun 29 Mar 2026 11:01:08 +0000
Manifest next update: Mon 30 Mar 2026 11:01:08 +0000
Files and hashes: 1: 5MfrvFJHqhqYrR1Oc9h-OkMPeG4.roa (hash: QQ5YRKyPOHLwW62MQSDhBmGI/lB6OrTfowyUhMbXM7A=)
2: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl (hash: r7RIfNMtsz+jrgJUbArirl9vlyK3QgeTlRDdk4HsuOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:37:b2:db:cf:44:1b:e8:5a:51:44:7c:45:a4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Validity
Not Before: Mar 29 11:01:08 2026 GMT
Not After : Mar 30 11:01:08 2026 GMT
Subject: CN=22b32d7a0c1089d38eafa56113917dde21ce5c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:b1:6d:cf:83:b0:3e:ef:82:aa:a2:f8:2a:
3d:f3:60:43:14:70:d9:72:46:31:f5:07:32:b6:97:
f6:0f:e8:38:77:f7:e8:21:8f:f1:91:df:22:e9:de:
db:c9:32:83:1a:e6:11:0a:be:46:c5:1f:4a:21:44:
6b:29:59:34:20:56:45:d7:1d:bd:4a:0c:de:c7:ce:
dd:6c:c7:1f:f5:01:cb:a6:e8:43:99:e7:d7:b4:03:
3b:e4:3f:47:1a:6d:12:a0:53:a7:82:41:8d:cb:d9:
0e:42:a8:13:1f:8c:5a:8d:20:68:54:d3:7b:69:5e:
a7:3b:53:f3:c9:95:7c:8f:26:1a:94:62:5d:c3:83:
99:89:c0:0e:a9:e1:52:37:11:7b:ad:f1:5b:a1:d3:
76:26:d5:16:59:c1:2e:30:dd:fa:b3:10:ae:ae:ee:
9f:f8:ed:a6:24:c5:46:ae:05:4f:64:e2:8e:a5:73:
4e:37:2c:89:ff:06:4f:19:78:ab:46:5b:96:7b:88:
34:c3:8c:88:1e:74:0f:bd:d3:69:07:86:67:aa:b4:
cf:82:82:ac:5e:8b:96:db:e4:f9:fa:31:65:cb:8b:
3c:6b:33:6c:12:4a:48:0c:da:81:65:a0:76:ca:62:
51:62:d8:06:2a:50:42:72:c9:52:8a:9f:56:ae:d8:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B3:2D:7A:0C:10:89:D3:8E:AF:A5:61:13:91:7D:DE:21:CE:5C:86
X509v3 Authority Key Identifier:
keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7c:48:2a:6b:ee:61:2d:fa:70:74:18:c2:91:83:78:f2:14:
ee:3f:9d:d9:f9:9b:a0:98:0e:22:e8:3f:5d:6b:b4:8e:4d:ff:
10:a2:62:b9:63:e2:72:9f:6f:a7:e2:ba:62:42:cf:1f:ad:45:
1b:97:51:d5:ad:8c:99:4e:1d:ab:46:54:0d:10:cb:23:1c:c0:
9f:61:10:8f:50:a2:5f:cb:ef:49:82:03:4b:85:97:72:df:fe:
60:d4:ed:af:e4:6d:1e:df:bf:fd:fa:f7:bc:e6:0f:76:a9:44:
b9:74:2e:44:ab:65:4d:26:5d:13:f7:93:73:23:eb:37:4f:78:
1a:cb:93:36:76:6f:f7:32:5f:ae:8d:f9:dc:67:87:a5:90:56:
3f:c5:36:d9:d7:08:7d:22:c9:9d:9c:ea:4b:15:30:40:04:e6:
b0:d9:ef:9d:22:80:67:c2:26:f4:40:93:4a:c9:be:c9:fd:e6:
43:fa:be:11:18:89:89:0e:2d:ef:33:1c:ba:d8:6e:03:f9:0c:
d1:e8:b0:d4:a9:4b:29:a6:cf:80:00:d9:05:6a:1d:86:29:f3:
99:c1:59:b2:14:e7:a0:1f:22:62:d8:f4:5d:34:04:60:79:f2:
ec:9e:9c:2a:28:1d:c5:6d:21:f9:f9:f0:f8:74:8c:dc:10:d1:
8b:d8:06:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:55 2026 by rpki-client