Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
File: NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json)
Hash identifier: tzZTVBx6mnHfIHP7BcnCtSi43O9bxZ0jrTxR3v0V9xY=
Subject key identifier: 8F:E2:D0:D8:59:11:0E:36:83:CB:A4:98:07:77:10:1C:56:32:6C:B4
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial: 019CB7DCDCC52E0CC57D17B9071879FFCDB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
Manifest number: 15B7
Signing time: Wed 04 Mar 2026 08:00:30 +0000
Manifest this update: Wed 04 Mar 2026 08:00:30 +0000
Manifest next update: Thu 05 Mar 2026 08:00:30 +0000
Files and hashes: 1: 5FGHLdK72qHzzMVR761PYkr0_B8.roa (hash: UFVl1rQ+AMtmM2jj8l8YxQbgnT/lIb1Y+3O5KmViWAw=)
2: AaFb4BxfuUv5NeajfZzyZ_pKzC8.roa (hash: nTI1O9abgRlXav6e6wF4qbfd1OvGtpWjUhjV79Bt2Cg=)
3: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: TFNusLbp/60WhYp3oj6fICqzju0OOa0lG1JV/lkEsok=)
4: wTpGtpvYbgK_vun8v_p94uvYUWw.roa (hash: MlwFMoA+ixOAYhXtfytpmcxvQgdxjqKkv8yoqTSG6+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:dc:dc:c5:2e:0c:c5:7d:17:b9:07:18:79:ff:cd:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Validity
Not Before: Mar 4 08:00:30 2026 GMT
Not After : Mar 5 08:00:30 2026 GMT
Subject: CN=8fe2d0d859110e3683cba4980777101c56326cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:02:07:d7:ca:cf:0d:d9:f4:20:f8:b3:69:29:
cc:18:e1:ab:e3:ca:0b:24:cd:20:04:6f:78:57:ef:
8c:14:6c:1e:ed:e9:ba:34:34:3a:b8:e9:d8:0c:31:
14:c3:34:d1:24:75:a4:8d:0c:e9:ac:9d:67:2f:43:
31:2a:fc:49:d5:d5:d6:3b:6e:c0:7f:ac:db:d4:c7:
dd:11:f9:15:13:4e:dc:10:1a:17:56:3e:47:d4:a4:
04:a6:ef:ef:72:ee:a8:4f:e0:ab:47:95:3b:33:a1:
4a:2a:54:ed:17:c2:5c:ed:ea:e5:8a:b4:f1:4c:80:
a7:c4:11:ab:54:a3:df:48:ac:88:b9:5f:95:58:ec:
69:7e:18:d3:a9:9f:73:97:fc:70:60:9b:42:58:3c:
2a:0e:f0:ec:a7:8c:b3:ae:19:e2:78:5c:a3:46:21:
07:dc:7c:28:11:64:fb:0a:7d:af:29:c3:bc:64:d6:
c4:77:69:91:0e:95:90:ef:6b:96:e7:45:eb:a6:19:
6b:99:fc:43:60:5c:cc:60:91:42:7d:2f:d7:c2:14:
28:3a:7f:d0:b4:2c:bc:c6:9a:6b:88:fb:fb:4a:77:
ca:f4:db:1e:3b:c5:95:4e:7a:71:55:49:67:d7:b4:
34:72:f9:50:b1:f6:5d:a0:2c:d9:70:99:d8:ac:0d:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E2:D0:D8:59:11:0E:36:83:CB:A4:98:07:77:10:1C:56:32:6C:B4
X509v3 Authority Key Identifier:
keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:bd:01:e0:91:89:44:bc:1c:d5:59:f7:82:2d:47:fb:8b:c4:
09:4c:84:6a:fd:de:d2:6d:15:0e:b7:7a:be:a8:6a:53:5d:d0:
d4:d5:e2:b3:14:40:f5:d3:09:61:ee:69:e3:77:5a:bd:90:fe:
88:c9:c7:cc:e3:fe:17:6f:0e:fe:61:64:11:8b:3c:fe:17:53:
f5:ab:1d:30:71:6a:58:2d:6b:af:f8:fc:10:46:4b:30:7e:f6:
48:f3:64:32:bd:39:93:78:c3:76:eb:89:25:08:21:bf:cb:c6:
74:88:d9:59:82:a6:ce:7c:ff:0c:83:0c:fd:51:91:b8:a8:47:
9e:26:05:62:60:c6:68:84:43:e0:fd:57:f0:6a:27:d0:1d:0d:
df:b9:24:8c:c3:94:99:bd:85:2f:2a:69:60:de:6a:bb:72:0b:
21:68:50:20:79:4c:13:20:2c:8b:3b:08:03:3f:77:51:c8:93:
84:3b:45:c9:fd:2b:8d:10:c2:d9:e5:66:46:2f:5e:7e:b4:82:
9c:e1:41:24:dd:5d:78:3a:3c:1f:1c:8c:57:b6:d4:f3:b3:b0:
22:28:61:24:04:ed:20:f0:67:60:83:1a:bd:0f:94:27:e6:ff:
28:f0:24:a9:7c:ec:2a:76:c9:c7:77:4a:8d:6e:76:09:40:79:
30:d9:44:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:06:33 2026 by rpki-client