Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json)
Hash identifier: wvv0inxS3SVSNUCYICxAjLG6blhnETm5zMYgl/6JokM=
Subject key identifier: CC:D7:DC:2C:5D:A1:DA:23:7D:48:CA:D3:AF:C5:EC:4E:91:F7:3C:B4
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 019E28B897904B93872AD2FD1E277A4054B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
Manifest number: 13B0
Signing time: Thu 14 May 2026 23:00:46 +0000
Manifest this update: Thu 14 May 2026 23:00:46 +0000
Manifest next update: Fri 15 May 2026 23:00:46 +0000
Files and hashes: 1: 4l82aU37AqmgAJlyCPGwmnooDcg.roa (hash: IgTUPhE8nSCBnJ2HPZrElAawWv50u6q/sojixDH5raQ=)
2: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: p6w6liaEzm33D89vtJkhu6jrR9sgjf3/APBza/ouUEY=)
3: hZf5u0QbS1XG7PsEyRnhTDo6HjI.roa (hash: 3UtzjBeSVvMSTFyNhnUR4ZuKLONPZvV6PMClfmnPEuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b8:97:90:4b:93:87:2a:d2:fd:1e:27:7a:40:54:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: May 14 23:00:46 2026 GMT
Not After : May 15 23:00:46 2026 GMT
Subject: CN=ccd7dc2c5da1da237d48cad3afc5ec4e91f73cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:43:03:29:10:42:e0:2c:69:98:28:4f:cc:
9f:98:dd:ed:9e:cf:62:9f:ca:e6:90:0b:c0:b7:8e:
85:95:2f:b0:b2:fd:4f:4b:5e:98:5d:72:12:f1:9e:
9d:e1:c3:ea:b8:8e:ff:ec:db:64:bc:18:d9:88:1c:
98:30:24:4a:7c:6a:d4:52:b3:52:b2:85:a4:9f:f6:
f8:2b:51:31:da:49:f4:ae:f8:66:ee:f7:c1:4f:67:
5e:7e:03:9f:e4:4f:11:c0:3a:1a:d9:0a:aa:50:e4:
81:11:45:6b:d4:1a:a4:7f:e6:a5:ae:a6:f8:43:c6:
af:6c:89:b6:c3:ce:5c:01:30:68:39:b1:c4:aa:8b:
7c:6d:67:b9:aa:ea:90:d7:97:60:a0:fc:f7:17:1f:
3d:e1:32:5d:57:c9:33:9f:ac:dd:00:bf:b3:06:5f:
ae:e6:23:5d:6a:65:97:8e:ad:ff:9e:4e:1d:3b:cf:
32:14:f4:ae:cd:54:1e:09:13:30:16:c4:c2:27:e8:
1d:ce:c5:82:9f:2f:a1:26:da:82:69:bf:d2:99:81:
06:36:2f:c6:2c:00:3a:0b:f9:5c:10:40:b5:69:e2:
fb:32:b4:1b:59:91:3d:d7:ee:c1:f3:c0:84:a2:64:
d3:06:6a:d2:a3:01:91:82:48:57:42:54:1b:2b:35:
14:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D7:DC:2C:5D:A1:DA:23:7D:48:CA:D3:AF:C5:EC:4E:91:F7:3C:B4
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:89:60:11:9b:2f:c4:32:74:a5:7f:86:f0:65:d5:86:8a:3a:
f3:54:e6:e2:2c:be:c0:0c:5f:81:37:bc:02:59:24:ca:f0:f1:
d1:ea:01:68:44:9a:08:21:ba:30:c7:72:94:ba:93:ea:24:f8:
a7:a9:40:1d:50:cd:26:32:11:29:76:55:77:de:d9:3d:7a:b8:
29:f1:1a:62:6d:0f:87:c6:25:7d:95:c3:ce:cb:bf:e8:2c:e6:
45:8c:16:7b:87:94:e1:c0:a3:f4:83:a5:53:5a:22:8e:83:a8:
98:c4:25:8a:3b:97:23:7a:57:44:0b:53:99:88:21:6d:b0:3f:
71:e6:fc:a1:56:4a:72:64:40:38:fa:19:fe:42:25:66:bc:33:
43:41:46:74:34:4d:ba:b6:a6:19:c5:0c:7c:cb:ec:8d:66:93:
f5:ff:71:b1:66:94:86:3f:c9:e2:4c:8c:82:df:ca:85:2e:10:
f9:36:db:b5:84:6e:a2:1a:3d:96:f1:09:6b:ac:56:56:d1:ea:
a4:8d:1d:6d:62:9f:1f:41:bb:eb:48:fd:67:6f:e6:86:e8:b0:
45:a8:00:5d:3c:92:f8:0a:db:bb:07:f4:f4:2e:6c:74:15:64:
0d:5e:bf:37:a0:69:03:19:e1:18:5f:2a:0c:4e:48:81:b4:a4:
35:e9:ff:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:59:09 2026 by rpki-client