Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
File: NA5TAUvwOK3g13rmeP9t80ylPcA.mft (raw, json)
Hash identifier: x1Rtz+erNZRMepXFrMtDqgIcCuQy+XoAswouXX3XIOU=
Subject key identifier: EB:25:3B:C1:1D:C3:F8:D2:D2:37:D8:E9:21:2B:4B:76:09:33:DE:5E
Authority key identifier: 34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
Certificate issuer: /CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Certificate serial: 019D37525195AB2A935F2AEAC212E628959A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
Manifest number: 0835
Signing time: Sun 29 Mar 2026 02:00:34 +0000
Manifest this update: Sun 29 Mar 2026 02:00:34 +0000
Manifest next update: Mon 30 Mar 2026 02:00:34 +0000
Files and hashes: 1: NA5TAUvwOK3g13rmeP9t80ylPcA.crl (hash: w/eBQ84wrG7phAjvIWf9rE0+Oxf4QcDrBebK3G1CX0k=)
2: y0EXH7ROarOi9kpgsz591gLVxK4.roa (hash: k4u5/XxA6Sf9mSKxl8oxoWnS212/XxShJpEKu6orXMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:51:95:ab:2a:93:5f:2a:ea:c2:12:e6:28:95:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Validity
Not Before: Mar 29 02:00:34 2026 GMT
Not After : Mar 30 02:00:34 2026 GMT
Subject: CN=eb253bc11dc3f8d2d237d8e9212b4b760933de5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:b3:d2:db:ac:ec:d1:39:07:a7:30:8a:7a:
c9:4d:ae:31:17:da:d9:7b:65:01:10:b1:81:ad:86:
51:6b:77:5f:76:dd:e3:65:af:7e:b4:27:53:5f:fa:
12:58:b2:61:d0:1e:8a:c6:f0:d7:f3:00:01:5b:f0:
46:df:b1:63:0d:cc:4e:0e:51:37:d6:c1:22:23:33:
8c:2f:bb:51:f3:29:92:44:c0:98:ee:54:8c:99:bc:
39:42:f5:c8:4a:39:71:bc:67:ef:ff:a2:bc:23:b5:
ca:1b:8f:77:a3:c9:19:92:95:e4:34:7d:16:bd:c3:
21:a9:be:c5:6e:29:b1:83:5f:ec:9d:20:fc:07:5a:
6a:30:a6:d4:27:d2:09:2f:b9:7c:56:4a:a2:2c:a3:
6d:11:df:2c:e6:af:d0:6f:09:b6:89:cf:70:3f:f0:
9d:4e:b1:7c:7f:cd:c5:60:87:7f:fd:14:25:6a:cf:
10:d6:eb:19:ae:21:c0:14:3f:7c:06:79:f0:32:7d:
63:1b:10:1b:c9:56:5f:b4:a9:c4:f9:b9:d2:72:08:
80:4f:94:f6:f0:1c:56:17:91:3f:81:bb:53:fb:0a:
d0:44:8d:f9:0a:61:c8:b0:c2:f8:4e:41:cc:e7:4e:
fd:89:c9:31:be:fc:a3:02:74:dd:fc:98:2c:9f:d2:
fd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:25:3B:C1:1D:C3:F8:D2:D2:37:D8:E9:21:2B:4B:76:09:33:DE:5E
X509v3 Authority Key Identifier:
keyid:34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3a:a1:3b:34:82:93:6f:15:fa:eb:c5:a6:39:ea:65:17:ea:
c8:33:ff:20:5f:7c:ba:8f:b9:83:ce:b0:4e:fa:12:60:45:1d:
6f:19:44:76:f3:48:4b:09:fe:ff:9a:77:67:fc:b0:71:9c:c2:
36:05:27:04:0f:d6:74:7a:87:96:45:93:02:72:57:ad:4a:0b:
60:af:dd:f5:68:0e:68:6e:7c:7c:57:18:92:66:52:a5:85:6d:
44:e8:0d:b7:5f:9e:de:71:1b:56:88:a3:c9:46:db:52:f6:78:
8d:cd:b9:28:b8:97:eb:bc:56:a7:fc:26:f2:8f:d3:69:69:f6:
4d:ec:7e:96:dc:76:57:e6:f5:56:c4:e8:7e:76:b0:bd:e0:ef:
cf:e5:fc:a0:17:ee:e6:48:12:4b:11:55:5d:27:35:96:3c:dc:
d9:aa:ed:cd:44:6b:ea:77:a7:e7:83:49:3b:8b:30:4f:f6:8f:
73:54:6d:1c:b3:f5:bf:69:9c:d3:c8:12:9a:79:5f:40:37:4b:
31:e4:96:23:46:84:40:79:87:b0:9d:2b:ff:6d:b4:74:83:49:
dc:95:bc:94:bb:c8:19:e7:0c:42:0b:9c:a8:1f:5f:bc:a5:9a:
ea:5d:9b:5b:59:81:e1:85:99:6d:ce:7a:1b:42:5d:90:57:17:
55:db:cd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:58 2026 by rpki-client