Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier: 76ebk9UEk268lv3YkajW0PuLyQBYtLwabpIEaHe0VCM=
Subject key identifier: 9A:1E:49:A9:DD:C5:38:0A:55:89:E8:CA:F0:7C:D4:E9:7F:ED:10:63
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 019D389C4445DA0C389522E0E072CFF3BE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 08:00:58 +0000
Manifest this update: Sun 29 Mar 2026 08:00:58 +0000
Manifest next update: Mon 30 Mar 2026 08:00:58 +0000
Files and hashes: 1: ABmYN8QB4vtJgGHfuupaZ7vq_DU.roa (hash: zGb7TzIU0CGn680nSZCYZpGRTlBYHFYI+vyCKo6WS0Q=)
2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: NI5yW3FyKA1wkRji9hupKeIzrSj2Vr8751/tbQhAaEY=)
3: Oii3V-7piYCPzs0_dSiKYPboBMk.roa (hash: Ilo1v9IIMxIQYILX+1PmPseCaQDDpP2GLZh2OKOVwAU=)
4: zFAiybQzQxds72WdUATD8g4BEjw.roa (hash: cy5FFDk0mqzxC2rHBMlzxFOlZHb2KlFrT4hf9F2Oo6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:44:45:da:0c:38:95:22:e0:e0:72:cf:f3:be:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Mar 29 08:00:58 2026 GMT
Not After : Mar 30 08:00:58 2026 GMT
Subject: CN=9a1e49a9ddc5380a5589e8caf07cd4e97fed1063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:81:8d:88:75:bf:6e:a2:3e:2f:c1:73:57:
fc:65:e0:ac:c7:79:53:72:ea:8a:cd:21:92:ff:a6:
7c:f2:38:66:10:d5:43:fd:52:b7:cf:1d:90:fa:55:
7b:15:13:f2:b3:d0:68:d0:1b:1a:ae:f5:52:57:e5:
54:59:0b:68:f5:cb:e4:77:df:c6:4f:81:67:f0:c4:
05:5d:36:26:8f:a5:20:6a:53:a8:f0:73:f8:78:31:
b3:f6:dc:8f:68:6a:c8:72:08:61:ea:96:c5:d1:70:
b6:86:5c:92:6c:c1:d3:b8:f3:4b:10:0a:70:aa:dd:
36:fe:48:03:c0:f9:d7:31:e1:6d:c1:71:91:3b:90:
79:ce:ad:09:2d:87:ca:dd:3a:10:92:bc:d4:ae:c8:
f4:ce:91:43:55:56:44:7c:77:9f:66:78:2d:98:1e:
61:54:69:f1:15:30:c2:6c:ea:53:ca:28:88:5e:8b:
98:b1:02:ee:b2:f6:98:e7:7d:f5:aa:f1:20:ea:ef:
ff:9c:3c:fd:72:a4:8b:46:2e:7b:27:ed:db:6e:45:
cf:ab:79:c1:ae:00:32:d9:40:a7:cb:7c:77:af:c2:
3b:55:37:91:3b:c9:41:b0:a0:e5:12:aa:64:bb:42:
f4:b4:d7:62:42:7e:ab:e3:ad:97:ff:07:f2:d2:67:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1E:49:A9:DD:C5:38:0A:55:89:E8:CA:F0:7C:D4:E9:7F:ED:10:63
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c7:c4:b1:ef:a0:e9:75:39:65:e9:ec:4e:f3:ae:f1:e6:c3:
54:ec:fb:36:42:ca:99:f4:97:ff:90:63:25:91:48:71:1c:5a:
a1:6b:40:1f:8d:d5:7d:a6:6b:a5:ea:2d:b2:ef:a8:bf:97:ca:
1a:23:e3:df:61:f4:01:9f:5d:27:d5:15:5b:0b:bf:cd:3a:60:
a9:c5:b7:5f:5b:02:b2:a2:be:81:53:ce:7a:95:6c:29:e1:81:
20:48:59:09:49:38:14:6c:71:ad:c3:ba:0f:03:1d:8a:d5:67:
e5:84:b5:8a:e0:77:4e:13:0a:73:57:cd:c4:ba:df:0b:51:51:
9a:17:8b:24:ba:bc:c2:68:30:2f:88:b6:4c:f4:2b:c3:98:67:
d8:21:f1:ee:f9:6b:60:af:ff:46:fd:f2:d5:a5:17:8a:45:ed:
29:48:8d:fb:05:ff:ad:0b:2c:fc:ef:0d:6a:8d:d3:e5:fd:5d:
69:dc:c4:49:8c:e8:bf:5f:13:b4:72:a5:e6:34:3c:5d:42:85:
6f:ef:4b:53:cf:2b:9c:2e:84:fc:8c:20:6d:7e:ff:d9:e4:28:
68:ca:7d:fa:9e:d7:ef:b1:90:6a:43:ab:e0:df:94:70:03:f4:
bf:d1:34:04:f4:ae:d2:80:a4:80:6c:cf:f9:ad:11:87:1b:24:
17:b3:e0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:41 2026 by rpki-client