Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.mft
File: NAXWyGBbqbCNP4T1peWW4l_n0tI.mft (raw, json)
Hash identifier: x7H48fbjFUZFKBs24lcfhvYQtUC5ipSC0MLWoMGZO6w=
Subject key identifier: 70:A3:38:7A:EE:F0:C6:05:2A:A7:9E:3B:72:9E:61:BE:64:6B:62:BD
Authority key identifier: 34:05:D6:C8:60:5B:A9:B0:8D:3F:84:F5:A5:E5:96:E2:5F:E7:D2:D2
Certificate issuer: /CN=3405d6c8605ba9b08d3f84f5a5e596e25fe7d2d2
Certificate serial: 01A0889E296397E9F755843801B64D067FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAXWyGBbqbCNP4T1peWW4l_n0tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.mft
Manifest number: C0
Signing time: Thu 10 Sep 2026 00:01:01 +0000
Manifest this update: Thu 10 Sep 2026 00:01:01 +0000
Manifest next update: Fri 11 Sep 2026 00:01:01 +0000
Files and hashes: 1: NAXWyGBbqbCNP4T1peWW4l_n0tI.crl (hash: 7RVYSSuiJXClIUF6LnWLCnS+GkBSk9nkZG1HrFQc63w=)
2: PoFYEuGutgHouWVg8Cb0Pk33vYA.roa (hash: X3Xo/sCZdu/v1GpBzfkHVMeep0fNTMPQZJIhKRC0j0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAXWyGBbqbCNP4T1peWW4l_n0tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9e:29:63:97:e9:f7:55:84:38:01:b6:4d:06:7f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3405d6c8605ba9b08d3f84f5a5e596e25fe7d2d2
Validity
Not Before: Sep 10 00:01:01 2026 GMT
Not After : Sep 11 00:01:01 2026 GMT
Subject: CN=70a3387aeef0c6052aa79e3b729e61be646b62bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:31:14:f2:ab:18:e3:50:b8:bb:2c:a8:17:
b2:63:66:de:49:79:e2:2d:a8:27:07:77:f3:c8:f1:
0f:57:6a:56:2c:5e:02:dd:86:66:ae:3f:55:0f:0b:
26:9e:20:87:4c:b3:bc:f2:74:0e:88:cb:5e:49:8d:
dc:c6:3f:dd:e8:e8:e5:e9:2a:44:ea:86:db:99:ae:
0f:eb:ad:b8:ae:c4:aa:ef:dc:95:0f:51:ac:b6:d5:
c8:1a:71:74:b9:5f:a4:f9:35:b1:a3:65:c1:eb:04:
be:35:bc:0d:d6:3a:d1:0a:82:30:9d:c7:ea:c4:4e:
57:12:c0:ec:d8:c4:57:f6:e7:55:8a:c4:e0:d9:1c:
a5:d4:7d:ea:e9:7b:de:84:f0:7d:37:db:62:79:43:
a8:c7:f4:69:ee:fc:e7:39:f9:ca:cd:9d:28:a0:33:
b7:d9:fa:8d:20:b2:bc:f7:09:36:1f:eb:3c:5e:22:
e9:e5:94:d3:3e:0c:cd:8a:0a:54:4b:06:bf:22:af:
db:fc:34:7c:f7:d8:35:f2:3b:93:89:4f:ce:dd:da:
b3:cc:d8:e1:b4:3d:b0:7c:df:b8:59:81:36:de:aa:
fa:f3:b9:5d:c4:14:c0:c5:96:c6:f9:c3:08:34:9a:
b1:7e:32:e2:1b:bb:72:96:c6:38:fb:3e:2e:63:53:
6f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A3:38:7A:EE:F0:C6:05:2A:A7:9E:3B:72:9E:61:BE:64:6B:62:BD
X509v3 Authority Key Identifier:
keyid:34:05:D6:C8:60:5B:A9:B0:8D:3F:84:F5:A5:E5:96:E2:5F:E7:D2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAXWyGBbqbCNP4T1peWW4l_n0tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1a:d4:ff:4a:0e:7f:33:a0:d4:6b:41:0b:fd:60:30:62:78:
bc:a2:1a:66:b4:fd:c5:24:e0:05:50:5f:e3:f4:ea:95:d1:e3:
42:cb:6c:1a:88:28:cc:af:5f:05:9b:66:43:b7:e6:ea:a8:76:
1c:df:5b:bd:cc:5d:47:a5:34:a1:32:3b:07:25:02:e2:06:a6:
f7:49:c3:db:45:d9:b6:c6:25:21:a7:f7:81:9e:4c:a8:e7:8b:
13:d6:59:43:78:57:55:1b:c7:af:a2:ae:fe:ce:06:2d:04:de:
88:2f:30:0e:bf:25:42:7b:4a:c2:4c:e3:ca:c2:31:e8:8b:c4:
13:05:1c:c3:f7:18:d1:f2:af:17:7a:cc:57:04:9a:16:68:6e:
e0:6c:4c:ba:c5:5a:a1:eb:e1:d7:93:af:9b:d9:b9:ac:c9:6c:
3b:2d:9a:4d:21:ef:6a:38:53:cc:9f:10:53:2a:ba:6d:bf:06:
98:32:82:69:52:3b:59:51:40:d0:a1:14:ac:97:13:87:46:07:
21:b5:48:9d:1c:20:06:59:d7:be:cc:cf:db:6e:63:ee:5d:6a:
e3:db:af:67:79:ad:24:62:94:77:53:ad:5c:d2:90:2b:ee:42:
92:62:55:64:a2:52:42:b3:60:d9:7a:e8:d0:85:b5:ff:91:a2:
aa:53:c9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:12:41 2026 by rpki-client