Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
File: NAd7QemIc-fwb7HfP105xyGxND8.mft (raw, json)
Hash identifier: vdm8HscIeTufY/qUFEvKQVGrDsyHlO9CbPWaMIORgZ4=
Subject key identifier: F5:19:CA:CA:54:35:FC:2F:9A:7D:37:79:60:AB:AD:BC:A7:2A:61:09
Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Certificate serial: 019D3866866EE0027C92C6FE9FA2848742B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 07:02:16 +0000
Manifest this update: Sun 29 Mar 2026 07:02:16 +0000
Manifest next update: Mon 30 Mar 2026 07:02:16 +0000
Files and hashes: 1: 1-V8x_3FzosbTSoBrUqHkMLV-44Q.roa (hash: RPgG1SJlqfEsV732+LedUmH+jks8p7lo8I/jwtQGL9I=)
2: NAd7QemIc-fwb7HfP105xyGxND8.crl (hash: z+f5cCPicKesMWW9Sg6fD4mhps3s3B8qgvyud42ffYc=)
3: crwkgLLFi1G5PStFW-NTuVWRboI.roa (hash: DbnKu1FnYU/F077cUpyCX4xEr0gw1CrOBRGG+CxkZak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:86:6e:e0:02:7c:92:c6:fe:9f:a2:84:87:42:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Validity
Not Before: Mar 29 07:02:16 2026 GMT
Not After : Mar 30 07:02:16 2026 GMT
Subject: CN=f519caca5435fc2f9a7d377960abadbca72a6109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:bf:11:18:0d:6d:1d:1c:ab:a4:ec:60:1a:
4c:07:e7:5b:97:e5:11:77:4d:8c:8f:b5:23:e9:3b:
82:e7:24:2a:66:e9:7c:a9:75:ec:f9:94:e9:8d:ec:
09:05:a9:1a:13:57:3e:1a:96:7f:62:2d:0c:70:43:
2c:06:de:fb:89:50:b4:c7:00:4e:93:e4:ab:51:b4:
4f:ba:42:60:9d:51:78:ac:9b:41:2c:84:1c:de:11:
11:0a:0f:f3:36:43:4d:b3:b3:10:a5:c9:c9:c9:08:
40:7f:cf:c1:ed:58:69:82:25:89:4d:ec:7f:7c:a8:
64:9d:60:cc:eb:88:6d:b4:94:7c:91:75:f5:98:63:
b0:cb:98:07:d8:c6:6c:5f:40:d0:2d:3c:a1:d3:89:
06:ac:3b:18:bd:42:98:ab:18:9e:53:8e:48:a7:f7:
6c:2f:b5:c8:94:b1:3a:58:d1:39:95:89:c8:79:51:
8a:63:17:9e:07:ee:62:47:18:5a:41:77:b4:aa:31:
6d:82:c2:08:99:4a:2a:ec:8a:39:16:be:26:2d:80:
70:06:09:2c:05:2d:dc:94:fb:64:6a:96:e5:ce:e5:
6b:e2:05:92:39:fe:19:f9:f9:2b:b6:65:4e:b7:2b:
50:bd:a0:25:56:ac:0a:f1:cc:b9:a8:18:42:b3:76:
3f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:19:CA:CA:54:35:FC:2F:9A:7D:37:79:60:AB:AD:BC:A7:2A:61:09
X509v3 Authority Key Identifier:
keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f6:4c:05:77:5b:18:dd:e6:66:c5:3b:6f:1c:23:12:b7:b4:
df:4c:80:e9:84:5e:22:cd:bd:cf:05:7b:35:1c:fe:95:d4:14:
2c:fd:fb:19:d8:7a:87:60:ee:68:00:95:8c:3f:ea:2f:60:95:
1a:c0:c7:56:0b:77:63:76:cf:a7:50:60:e5:d9:39:c2:39:82:
6a:a7:51:e5:bc:c7:ee:1b:73:8c:60:46:08:96:80:b9:7d:14:
7b:78:5c:0d:b8:c1:4c:66:7e:6a:81:4b:4f:8e:e3:94:b2:7f:
d6:2b:03:c7:12:db:ed:1b:b0:77:d4:f7:0d:c4:5f:a1:0b:0c:
c5:e2:8f:80:2d:8b:20:30:ba:0b:93:c6:76:14:54:14:8d:6b:
9b:5e:23:bc:fb:91:bb:03:cf:af:4e:5b:1b:e1:b2:78:51:e4:
e4:3f:c8:5d:69:a5:ab:2a:dc:8f:e2:56:1f:7f:4f:f1:52:e3:
1d:7d:71:ea:a9:ef:62:0e:2e:b2:2f:ac:1c:bd:6b:eb:ac:da:
50:ac:38:a6:47:c6:72:49:b5:77:77:c9:76:c3:07:5a:ce:0a:
b8:9a:2e:fc:46:bc:64:4c:bf:49:79:ab:78:de:48:9c:72:ad:
bd:27:1c:94:4a:c6:fd:88:e9:3e:35:3e:4f:92:c4:62:d9:f6:
e6:c3:7b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:17 2026 by rpki-client