Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json)
Hash identifier: OWCTVUVla4vVpb5VK7sJzpVpMH1vtm/Tb8tU0yrvn8I=
Subject key identifier: 82:81:5B:E1:E0:F1:E6:25:CD:69:D1:1C:41:08:1B:52:70:3E:5A:3E
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 01A03DBB5F9718A729C8EE60E2C1829D814F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
Manifest number: 14C4
Signing time: Wed 26 Aug 2026 11:01:24 +0000
Manifest this update: Wed 26 Aug 2026 11:01:24 +0000
Manifest next update: Thu 27 Aug 2026 11:01:24 +0000
Files and hashes: 1: 4l82aU37AqmgAJlyCPGwmnooDcg.roa (hash: IgTUPhE8nSCBnJ2HPZrElAawWv50u6q/sojixDH5raQ=)
2: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: frrSl38kEkuB5ef1lpUfq972LDFDGTRXWsM+ARMUoho=)
3: hZf5u0QbS1XG7PsEyRnhTDo6HjI.roa (hash: 3UtzjBeSVvMSTFyNhnUR4ZuKLONPZvV6PMClfmnPEuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:bb:5f:97:18:a7:29:c8:ee:60:e2:c1:82:9d:81:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: Aug 26 11:01:24 2026 GMT
Not After : Aug 27 11:01:24 2026 GMT
Subject: CN=82815be1e0f1e625cd69d11c41081b52703e5a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c4:a1:6b:f9:eb:ae:c6:4f:79:69:4f:c5:97:
09:f7:b2:0f:7a:c4:a3:d2:ec:1f:40:57:9d:72:ee:
d0:89:a8:0b:dd:c7:4c:a2:6e:0c:a6:bb:3f:50:33:
3b:0e:8c:9c:01:fa:4c:31:d1:5f:7f:a0:b6:e2:46:
2e:2f:80:20:d1:24:17:66:1b:d8:56:f9:73:98:fe:
b6:5f:80:86:dd:3a:a1:58:ed:b3:30:0c:8c:76:c4:
f4:b7:e0:7d:18:b1:f6:b6:ad:42:2b:b8:68:a3:95:
36:e0:9e:72:9e:88:3b:6c:7f:0c:e8:ad:e6:47:01:
7c:71:0c:ad:2b:52:10:4c:ca:6b:ff:da:80:33:16:
eb:fd:4d:64:af:51:03:c6:4d:59:bd:5d:64:9d:47:
74:bb:36:d8:c9:c9:88:a5:51:eb:7f:b3:be:3f:41:
bf:88:9f:d7:16:49:99:3e:5d:ee:13:35:62:27:ee:
68:c9:ef:d0:f4:08:c5:92:bd:ea:33:da:b2:c8:81:
6c:04:81:58:eb:72:56:32:94:d2:22:78:4e:88:7d:
1f:88:3b:9b:50:a4:40:c0:f7:3f:2b:6d:30:61:79:
f5:ce:8a:3d:64:2f:4f:65:48:1a:09:1a:72:71:7d:
b3:f0:2a:44:33:86:b5:76:18:3d:25:0c:6e:33:8c:
15:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:81:5B:E1:E0:F1:E6:25:CD:69:D1:1C:41:08:1B:52:70:3E:5A:3E
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b3:aa:79:87:b0:75:a3:16:e5:b8:da:87:67:8a:e8:5e:7f:
70:d5:f3:c6:5b:da:93:46:18:de:f0:b2:66:ba:38:c9:6f:a2:
12:91:39:0b:30:02:d0:ca:d6:77:4e:09:c0:62:79:f4:9c:9c:
99:25:f2:f4:cd:fa:39:65:a4:72:72:2d:20:83:54:d5:71:f0:
44:3c:7b:34:ad:87:4e:65:8a:21:f4:d6:05:6c:35:94:6f:55:
06:cc:04:f8:df:2d:19:27:1b:c1:03:dc:87:70:43:ca:4f:b3:
66:56:fe:c3:75:0a:5a:03:fc:20:60:80:81:9c:ed:3b:10:ad:
f4:07:52:e8:12:fe:34:af:f6:a5:43:b9:27:8b:7b:1e:ca:63:
e4:72:af:ca:f1:5d:ea:71:52:5d:3c:1b:ca:e0:4b:b2:c7:39:
07:f7:d0:d3:13:83:16:19:6a:c9:ba:36:0a:b5:8f:48:df:20:
72:b8:ae:a0:5d:b3:ca:8c:cd:58:5f:a0:a8:65:10:4e:fe:e7:
bd:2a:37:fd:0f:52:91:b7:76:df:c1:6e:fb:ee:0d:2e:bd:db:
88:3a:13:0d:3c:41:60:fe:5b:12:e7:19:08:4b:a8:54:14:c5:
e6:38:a9:6b:74:11:43:c4:d4:ab:df:3d:36:2c:23:36:61:f0:
f2:78:3c:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA9u1+XGKcpyO5g4sGCnYFPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NWI0ZjdiNGExNmRiOWU5MjRmMDkwOGNlZTNkYTI2ZjIy
YWQ0ODEwHhcNMjYwODI2MTEwMTI0WhcNMjYwODI3MTEwMTI0WjAzMTEwLwYDVQQD
Eyg4MjgxNWJlMWUwZjFlNjI1Y2Q2OWQxMWM0MTA4MWI1MjcwM2U1YTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sSha/nrrsZPeWlPxZcJ97IPesSj
0uwfQFedcu7QiagL3cdMom4Mprs/UDM7DoycAfpMMdFff6C24kYuL4Ag0SQXZhvY
VvlzmP62X4CG3TqhWO2zMAyMdsT0t+B9GLH2tq1CK7hoo5U24J5ynog7bH8M6K3m
RwF8cQytK1IQTMpr/9qAMxbr/U1kr1EDxk1ZvV1knUd0uzbYycmIpVHrf7O+P0G/
iJ/XFkmZPl3uEzViJ+5oye/Q9AjFkr3qM9qyyIFsBIFY63JWMpTSInhOiH0fiDub
UKRAwPc/K20wYXn1zoo9ZC9PZUgaCRpycX2z8CpEM4a1dhg9JQxuM4wVmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKBW+Hg8eYlzWnRHEEIG1JwPlo+MB8GA1UdIwQY
MBaAFDRbT3tKFtuekk8JCM7j2ibyKtSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUt
NDA4NThiOTVmY2Y1LzEvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8zNmE5YWYtMGQ2YS00NWUzLTljYTUtNDA4NThiOTVmY2Y1
LzEvTkZ0UGUwb1cyNTZTVHdrSXp1UGFKdklxMUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7OqeYew
daMW5bjah2eK6F5/cNXzxlvak0YY3vCyZro4yW+iEpE5CzAC0MrWd04JwGJ59Jyc
mSXy9M36OWWkcnItIINU1XHwRDx7NK2HTmWKIfTWBWw1lG9VBswE+N8tGScbwQPc
h3BDyk+zZlb+w3UKWgP8IGCAgZztOxCt9AdS6BL+NK/2pUO5J4t7Hspj5HKvyvFd
6nFSXTwbyuBLssc5B/fQ0xODFhlqybo2CrWPSN8gcriuoF2zyozNWF+gqGUQTv7n
vSo3/Q9Skbd238Fu++4NLr3biDoTDTxBYP5bEucZCEuoVBTF5jipa3QRQ8TUq989
NiwjNmHw8ng8uQ==
-----END CERTIFICATE-----
Generated at Wed Aug 26 15:13:21 2026 by rpki-client