Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json)
Hash identifier: LXnDo4umk2HwnLtZQwgqLDrxDhQmE9KblLBqQW/R5qo=
Subject key identifier: 8B:C0:23:A2:EE:47:64:65:BE:20:E4:A2:F3:6B:C5:EC:52:3D:DF:79
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 019F1265108A257159845AE88B53980BD747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
Manifest number: 1429
Signing time: Mon 29 Jun 2026 08:00:40 +0000
Manifest this update: Mon 29 Jun 2026 08:00:40 +0000
Manifest next update: Tue 30 Jun 2026 08:00:40 +0000
Files and hashes: 1: 4l82aU37AqmgAJlyCPGwmnooDcg.roa (hash: IgTUPhE8nSCBnJ2HPZrElAawWv50u6q/sojixDH5raQ=)
2: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: BmZBDP1zPFfuOtuuMQ0AoiWLtxEUjd/Xg/apxo8l0F4=)
3: hZf5u0QbS1XG7PsEyRnhTDo6HjI.roa (hash: 3UtzjBeSVvMSTFyNhnUR4ZuKLONPZvV6PMClfmnPEuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:10:8a:25:71:59:84:5a:e8:8b:53:98:0b:d7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: Jun 29 08:00:40 2026 GMT
Not After : Jun 30 08:00:40 2026 GMT
Subject: CN=8bc023a2ee476465be20e4a2f36bc5ec523ddf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:1d:28:78:97:62:6d:2b:12:d6:e9:60:d9:
6d:cc:59:39:37:25:53:0d:54:73:fd:19:60:c0:39:
3a:ba:66:c8:2a:f1:bf:9c:e3:e8:4b:92:db:ca:08:
df:6d:c2:a9:bb:c6:35:a4:1b:a7:f5:d7:30:6c:44:
9c:7d:1a:3b:71:a4:8f:bc:be:8a:27:80:62:21:c9:
4b:1f:1d:f5:81:0f:de:35:76:21:d9:7c:d8:cc:55:
30:32:30:2c:25:2c:d9:54:15:16:00:af:91:1d:2b:
36:96:5e:30:15:17:cf:66:3b:e1:c0:6e:0e:9d:ea:
55:60:cd:13:fd:8b:5e:27:ce:97:a4:b4:b3:fe:1b:
cd:89:e1:e4:f3:7b:fb:c3:0e:11:97:9d:e1:16:d9:
87:e5:63:fb:f4:2b:30:5d:c5:c9:07:f1:1f:b1:a2:
f6:a9:90:32:66:03:fb:31:97:62:10:c6:b4:1a:ea:
52:58:88:81:27:4b:a4:9d:43:a4:d2:a9:4b:ec:8d:
ce:0a:50:26:19:97:5b:41:b4:6f:08:60:a3:45:40:
1d:d0:6d:25:c8:30:96:27:6a:5d:e0:3f:11:c9:90:
4c:71:a8:45:10:68:e2:68:3b:0f:51:39:3f:70:54:
fd:94:56:30:94:c8:0c:c6:8a:43:89:bf:8c:33:1a:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C0:23:A2:EE:47:64:65:BE:20:E4:A2:F3:6B:C5:EC:52:3D:DF:79
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:25:2b:de:23:2a:fc:9b:90:51:40:60:41:ce:2e:37:20:3b:
55:e1:9d:97:f3:32:dd:87:ae:ae:04:5a:89:86:9f:83:90:a6:
a1:6e:b5:6f:76:0b:a3:c2:fb:cd:ae:fd:44:f1:aa:ba:43:8c:
08:90:ca:1f:56:21:07:7a:0f:f7:c9:84:79:ba:e7:a5:2c:37:
7f:1e:d8:95:6b:05:62:17:d5:43:12:0f:fa:07:3f:65:25:ee:
16:71:35:54:71:9e:f9:67:00:bb:34:ab:f0:1e:e0:e8:2c:bf:
32:2e:dc:2a:01:71:f7:76:7b:3e:00:12:72:50:01:04:7f:09:
f7:b4:d7:5d:86:0d:9a:3c:b3:b0:f9:2a:cb:a3:fa:bf:0e:7e:
c7:8b:d2:0f:49:4e:da:44:48:17:d0:9f:00:90:1d:95:97:1d:
39:9d:dc:0b:d1:54:df:af:aa:26:cd:91:59:bd:05:23:1f:b3:
15:d9:6c:72:b3:31:8d:71:3a:74:25:62:c9:3f:bc:e8:5c:12:
99:76:2f:51:de:65:8e:59:11:f6:fa:03:a6:3f:52:14:7a:61:
71:0b:9f:50:26:f5:fa:1c:3e:4e:6e:d5:8c:f5:ff:c4:25:3a:
ea:f9:c5:06:29:33:0d:5f:0b:55:84:82:d4:7b:54:7d:7f:0a:
b6:fc:cf:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:10 2026 by rpki-client