Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.mft
File: NAXWyGBbqbCNP4T1peWW4l_n0tI.mft (raw, json)
Hash identifier: 8XGkfPdBi0xqsVwMvzMasuO9XvKnSlHjqjEjc+mwEvA=
Subject key identifier: 6A:D2:C5:79:30:73:CD:7C:2D:F9:20:5A:AB:7F:60:21:F1:9A:6F:B5
Authority key identifier: 34:05:D6:C8:60:5B:A9:B0:8D:3F:84:F5:A5:E5:96:E2:5F:E7:D2:D2
Certificate issuer: /CN=3405d6c8605ba9b08d3f84f5a5e596e25fe7d2d2
Certificate serial: 01A183AC7B6E57F80437B068E53C1DDD6F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAXWyGBbqbCNP4T1peWW4l_n0tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.mft
Manifest number: 0142
Signing time: Wed 28 Oct 2026 18:01:21 +0000
Manifest this update: Wed 28 Oct 2026 18:01:21 +0000
Manifest next update: Thu 29 Oct 2026 18:01:21 +0000
Files and hashes: 1: NAXWyGBbqbCNP4T1peWW4l_n0tI.crl (hash: mI/Qrlg+hEWNS0+AnLDYj1uvC7o3wQdcAvsirCyIHlg=)
2: PoFYEuGutgHouWVg8Cb0Pk33vYA.roa (hash: X3Xo/sCZdu/v1GpBzfkHVMeep0fNTMPQZJIhKRC0j0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAXWyGBbqbCNP4T1peWW4l_n0tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:7b:6e:57:f8:04:37:b0:68:e5:3c:1d:dd:6f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3405d6c8605ba9b08d3f84f5a5e596e25fe7d2d2
Validity
Not Before: Oct 28 18:01:21 2026 GMT
Not After : Oct 29 18:01:21 2026 GMT
Subject: CN=6ad2c5793073cd7c2df9205aab7f6021f19a6fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:02:21:c1:45:68:79:5e:89:1a:55:2d:a2:
ad:d9:8d:32:48:0c:2d:9a:3f:08:9d:f2:aa:fc:e0:
93:9a:c1:21:97:a0:3c:6a:70:ec:cc:a6:41:0f:fb:
00:10:df:a7:57:ab:72:0b:da:e8:4b:e4:93:2a:a6:
77:b4:cb:e2:6e:51:3a:b5:53:95:83:ee:13:ea:41:
10:be:5a:cf:64:c2:95:cf:23:e5:90:2e:cc:a0:5e:
75:a6:9b:10:95:33:35:09:cd:d0:dc:90:1e:65:20:
73:08:fd:8a:2b:f6:d6:c5:e9:8f:19:a5:a5:cb:e7:
f8:a9:3a:1e:78:8d:3f:66:08:33:bc:0e:40:a0:6d:
da:14:3f:4f:fe:a2:2b:48:a3:07:c6:5c:e0:88:6c:
92:ae:ee:07:cb:4a:50:8f:7e:e5:26:1b:cc:94:ec:
30:d6:9b:2c:97:28:2c:d1:08:88:41:8d:7a:38:8b:
71:7b:70:f5:a9:e8:b8:a9:f4:82:4d:60:05:12:09:
0f:25:ce:ba:9a:90:6c:ca:48:a9:21:a1:ce:15:d5:
25:08:3c:9e:b9:9c:e3:cb:48:44:7e:d3:89:f4:00:
35:9d:77:41:7f:85:7d:ee:af:87:41:1f:b9:6b:67:
b3:e4:d1:f3:ab:d1:74:89:cf:3c:91:06:33:bd:6f:
97:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D2:C5:79:30:73:CD:7C:2D:F9:20:5A:AB:7F:60:21:F1:9A:6F:B5
X509v3 Authority Key Identifier:
keyid:34:05:D6:C8:60:5B:A9:B0:8D:3F:84:F5:A5:E5:96:E2:5F:E7:D2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAXWyGBbqbCNP4T1peWW4l_n0tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/NAXWyGBbqbCNP4T1peWW4l_n0tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1b:7d:91:d8:e2:57:e2:11:40:11:0a:4f:33:7a:a9:e6:eb:
8a:ba:6c:18:a3:55:bc:b6:f0:c4:8e:fb:ea:af:76:d0:c6:52:
b6:1b:9e:d1:ea:64:3c:01:02:41:21:f9:2c:7a:4d:8c:aa:8f:
1d:e3:ed:40:30:20:48:d2:dd:51:25:d0:9c:bb:12:a4:69:35:
9e:40:a7:4d:7d:0c:11:65:f7:c8:2e:d0:c0:03:be:10:a7:07:
22:4c:bc:52:d4:a8:23:6e:ec:a6:5e:62:3f:78:ec:50:63:cd:
7c:6e:11:92:a1:b1:a9:6b:ab:07:67:6f:2e:a9:55:8d:0e:23:
45:f6:1d:a8:86:38:31:47:68:e5:15:07:c3:9a:f4:26:5e:27:
55:d1:d5:33:34:90:af:02:bb:b5:c1:6e:66:be:87:de:9c:67:
d7:6f:d1:73:e5:05:29:d7:3c:85:1e:b0:8e:ec:d5:b7:94:b9:
29:26:cb:3a:19:98:77:3f:10:20:bc:51:ea:4b:a4:d9:02:9c:
c0:a0:67:61:b0:2d:31:76:73:16:6e:2e:ea:1f:5c:fd:86:fd:
e4:27:e7:84:04:82:00:5d:46:00:99:ca:ef:fb:9e:7e:37:cf:
31:ee:fd:32:f8:4d:36:e7:0b:51:41:4b:11:c8:42:3b:d2:cc:
49:b1:11:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:49:40 2026 by rpki-client