Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3b80a8-24b5-458d-b173-8db6ae2a46fc/1/NKuVkYx_iSMAkN_CiSwgO1X5o4M.mft
File: NKuVkYx_iSMAkN_CiSwgO1X5o4M.mft (raw, json)
Hash identifier: JE1sBEg9qYEAY9R0CMOmbUx31AaazgbnMEO2vH2HmLI=
Subject key identifier: FA:CA:36:3F:1A:27:74:97:7A:96:03:F8:96:99:4E:A9:98:1D:9F:51
Authority key identifier: 34:AB:95:91:8C:7F:89:23:00:90:DF:C2:89:2C:20:3B:55:F9:A3:83
Certificate issuer: /CN=34ab95918c7f89230090dfc2892c203b55f9a383
Certificate serial: 019D3977BC352376B6E26872ABC64000B6FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKuVkYx_iSMAkN_CiSwgO1X5o4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3b80a8-24b5-458d-b173-8db6ae2a46fc/1/NKuVkYx_iSMAkN_CiSwgO1X5o4M.mft
Manifest number: 0A
Signing time: Sun 29 Mar 2026 12:00:41 +0000
Manifest this update: Sun 29 Mar 2026 12:00:41 +0000
Manifest next update: Mon 30 Mar 2026 12:00:41 +0000
Files and hashes: 1: CQs1UTNUfaUBaVxbf6xQS277dlw.roa (hash: T0NoNtVdfhrQcQ8RZ4b3NYCt5Ti281b11SoeG0yzMHA=)
2: NKuVkYx_iSMAkN_CiSwgO1X5o4M.crl (hash: B2KNZrDFZ3kxtWHYTLAtrtcXFb1YuxcVjX4Na1Pckn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3b80a8-24b5-458d-b173-8db6ae2a46fc/1/NKuVkYx_iSMAkN_CiSwgO1X5o4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/3b80a8-24b5-458d-b173-8db6ae2a46fc/1/NKuVkYx_iSMAkN_CiSwgO1X5o4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NKuVkYx_iSMAkN_CiSwgO1X5o4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:bc:35:23:76:b6:e2:68:72:ab:c6:40:00:b6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ab95918c7f89230090dfc2892c203b55f9a383
Validity
Not Before: Mar 29 12:00:41 2026 GMT
Not After : Mar 30 12:00:41 2026 GMT
Subject: CN=faca363f1a2774977a9603f896994ea9981d9f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fc:48:a8:61:44:66:4e:ca:c7:82:65:04:7c:
e9:05:9e:ab:cf:66:2a:7a:cb:34:0d:ee:db:09:77:
69:3c:94:57:0c:e1:dd:59:dc:20:e0:11:fb:34:25:
00:46:66:43:75:56:e6:f2:c1:c9:bc:12:ab:6d:7c:
e6:7b:57:30:ff:07:18:41:c1:32:d9:68:4c:fe:d1:
49:1d:22:1d:69:5d:18:71:ac:d7:59:a1:0c:85:02:
0f:95:ed:ae:a8:99:0b:40:0c:e2:c5:78:df:4e:88:
ce:d5:70:6e:94:af:56:cb:fd:e2:b4:c4:b0:d2:05:
1a:23:28:f4:a0:45:b7:1b:a6:e3:c9:1c:82:9f:92:
96:2b:88:d6:ce:a6:cc:45:dc:43:8d:6b:2a:b8:81:
d3:53:be:24:02:73:ad:5a:eb:b7:28:6d:40:93:10:
30:9b:06:40:e9:da:e0:9e:17:d8:32:66:2c:67:ab:
19:36:24:43:33:8a:48:4f:e9:a0:35:2a:8c:c0:d1:
68:9f:6b:d1:21:bc:ce:c7:fa:6d:09:61:ea:f3:f3:
e9:77:cd:44:ad:6e:4d:d0:fd:7b:51:b0:63:34:92:
74:48:a8:0f:c1:d6:30:d4:f1:09:91:a8:76:4d:c2:
b9:de:de:65:31:2d:91:9a:32:e4:a4:63:14:12:89:
d4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CA:36:3F:1A:27:74:97:7A:96:03:F8:96:99:4E:A9:98:1D:9F:51
X509v3 Authority Key Identifier:
keyid:34:AB:95:91:8C:7F:89:23:00:90:DF:C2:89:2C:20:3B:55:F9:A3:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKuVkYx_iSMAkN_CiSwgO1X5o4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3b80a8-24b5-458d-b173-8db6ae2a46fc/1/NKuVkYx_iSMAkN_CiSwgO1X5o4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3b80a8-24b5-458d-b173-8db6ae2a46fc/1/NKuVkYx_iSMAkN_CiSwgO1X5o4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:29:18:db:61:c3:57:48:a6:e5:d9:b9:e5:b7:1f:e9:42:47:
c2:0c:9d:9f:06:69:d8:e1:d7:f3:8b:fe:31:94:2e:6f:e9:86:
53:ec:26:c8:65:4d:34:db:be:74:32:59:f6:58:85:92:0a:d3:
ee:ad:c1:4e:fb:57:6b:eb:24:ef:59:dd:b5:8d:0f:ba:dc:78:
63:f9:3e:d0:e6:76:69:7a:85:ce:ea:a6:04:65:88:79:f2:39:
38:b2:3e:c5:cd:d5:1c:59:fe:40:5d:6d:01:b1:d9:b5:28:86:
fb:97:0e:58:9d:b7:fe:56:db:cf:8a:6a:8b:3f:f8:59:1f:8e:
fb:e0:d1:5b:41:cf:cc:9a:a7:f6:af:ea:cd:77:84:65:19:78:
91:2f:7b:4a:8d:86:5d:c2:48:0a:a1:b9:2b:54:36:aa:5c:c0:
c3:2e:f4:ab:21:5d:2a:bd:2b:f4:7e:08:1b:55:87:4a:c6:d0:
a6:15:d7:b2:51:27:18:5f:7d:46:b4:ad:0e:6b:3e:2a:7a:a4:
0f:fd:82:63:4b:92:be:f9:86:6b:c1:cd:47:d0:e5:df:69:e0:
a8:ec:98:d4:ad:ab:60:61:79:b9:ed:c2:03:1d:d1:6a:59:b1:
65:54:f1:69:33:6b:d9:aa:38:7a:52:60:66:d2:52:1b:c0:1f:
a4:59:35:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:37 2026 by rpki-client