Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
File: NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json)
Hash identifier: FReM1n+fph9GOYuoOV2CXW0G48BLx8eVhiNmc5PwZGc=
Subject key identifier: 4D:AA:C8:C5:A7:96:39:1C:30:39:91:35:0D:06:D0:BF:82:CA:5D:C8
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Certificate issuer: /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial: 019D3940BBE68024C7E0FDE19D27CA20FA6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
Manifest number: 1334
Signing time: Sun 29 Mar 2026 11:00:36 +0000
Manifest this update: Sun 29 Mar 2026 11:00:36 +0000
Manifest next update: Mon 30 Mar 2026 11:00:36 +0000
Files and hashes: 1: 4l82aU37AqmgAJlyCPGwmnooDcg.roa (hash: IgTUPhE8nSCBnJ2HPZrElAawWv50u6q/sojixDH5raQ=)
2: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: MKZKCOrPzyFYF++49wJDfx2jJnsxwF2EpvKlIKnxQ/4=)
3: hZf5u0QbS1XG7PsEyRnhTDo6HjI.roa (hash: 3UtzjBeSVvMSTFyNhnUR4ZuKLONPZvV6PMClfmnPEuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:bb:e6:80:24:c7:e0:fd:e1:9d:27:ca:20:fa:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Validity
Not Before: Mar 29 11:00:36 2026 GMT
Not After : Mar 30 11:00:36 2026 GMT
Subject: CN=4daac8c5a796391c303991350d06d0bf82ca5dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:05:fb:29:d8:80:8f:e8:c8:5e:9a:de:8a:
4b:b3:71:01:ac:c4:43:21:2a:0f:32:58:51:f7:74:
99:d6:2e:8e:e1:a4:0a:47:d4:c6:e4:e8:52:f6:e1:
61:90:cc:19:81:9d:9f:e3:16:42:e8:b8:04:d1:02:
55:16:85:d5:96:b0:27:68:20:f4:6f:96:09:cd:69:
78:8e:db:09:b0:49:78:7b:47:74:cd:5f:44:e4:03:
87:a9:38:20:2a:bc:88:55:73:c5:47:a8:98:35:62:
4c:f1:71:2d:8f:4b:00:d7:c8:6d:4f:ea:06:6e:d8:
b1:ff:f7:53:5e:4a:c5:ee:5a:fd:46:ab:c7:e8:aa:
74:fc:f5:0c:57:f0:f1:1a:1a:96:17:da:8b:88:62:
f8:38:81:8c:71:f2:76:06:2e:0d:c6:b2:22:1f:ba:
f8:c1:d1:45:c5:a8:ed:b1:e4:40:81:9d:9c:59:b0:
28:96:cd:d6:95:8a:20:39:85:bf:07:1c:8e:5a:9c:
69:04:4d:fa:2a:e5:07:88:f5:99:5d:28:cd:62:6b:
27:3d:be:b0:7b:3c:e9:d2:0c:6d:be:25:58:f6:f7:
48:86:c0:8f:3b:7a:df:ee:08:25:ee:5a:1f:e6:54:
78:f6:c1:f9:ff:3f:9f:5e:74:82:65:ca:c9:ea:72:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AA:C8:C5:A7:96:39:1C:30:39:91:35:0D:06:D0:BF:82:CA:5D:C8
X509v3 Authority Key Identifier:
keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:23:4d:f4:eb:93:63:b7:c7:e8:3d:35:7a:63:ac:40:d1:f0:
ab:7c:ad:c5:b7:3e:30:c2:f0:bd:65:17:7d:78:31:26:d0:ad:
39:46:7b:30:07:c4:c5:ca:13:ed:4f:a8:65:e6:8d:81:6f:55:
47:77:89:1f:2b:e9:9d:26:27:61:83:71:b1:58:66:38:4d:96:
2f:53:9c:c6:dc:53:60:95:ef:9e:06:46:5c:73:a5:d8:fe:59:
2e:e1:f7:2e:8e:23:2d:90:18:fe:21:33:48:60:68:a2:9d:48:
af:13:d8:77:c6:8e:da:b4:3e:6a:54:0a:f5:7c:e0:b4:8d:ef:
f0:ae:1a:4b:40:46:cd:a0:09:b0:f9:06:bf:77:9d:76:1c:96:
ae:40:ba:e1:92:46:58:80:8e:23:6b:6c:30:d6:d7:31:f4:13:
1a:7e:96:18:b2:f7:5d:04:10:02:10:64:a4:70:57:f2:38:61:
71:77:c3:2f:90:2d:8f:39:bb:dd:0d:5c:4f:95:f7:51:cf:6f:
ea:8f:df:0b:eb:3c:2f:07:30:a3:0f:bf:5c:5e:70:b6:24:aa:
2c:ec:63:ed:b5:67:80:99:37:76:db:d0:81:2d:1a:a6:99:d6:
b7:51:fe:83:2a:73:c0:13:14:61:cc:9f:cf:80:dd:bf:20:6d:
1d:be:98:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:48 2026 by rpki-client