Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier: IikZx4QHl74BUbKpb3pKk6JnGrEjWhIq1KMMXVgMZXo=
Subject key identifier: 10:23:9A:A9:AD:D1:1F:70:A3:DC:49:07:CA:B8:E0:0B:21:2C:21:39
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 01A1344842F349B614339D4A74E60D13C66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number: 1AA5
Signing time: Tue 13 Oct 2026 08:01:53 +0000
Manifest this update: Tue 13 Oct 2026 08:01:53 +0000
Manifest next update: Wed 14 Oct 2026 08:01:53 +0000
Files and hashes: 1: BJqDDKUUwP-6T-FY6LGOmkQgBFc.roa (hash: Bg8fNp2XsW4hkEUUtvGIjHCnW3BOOuyGWwHhwTGlcFU=)
2: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: jSI0UGcvTweb0cb56OLTrHTc9h6odIANc1BF8SaDNGU=)
3: SUsmu5Ag-4xHGcfy7I-KypJxpsc.roa (hash: n8HW5vZsZRNckM8pkS3Nq4aPiFnPsCjT5rOGpbkWTrc=)
4: VXXJGd4FEOBiTRuvKylQZSh5MPc.roa (hash: 9Lce4m09pJL6B9nHSj0pDfxmZ/8/J6ec+N4whDnZ0b8=)
5: ZuK1S3Ghc42zA0OJKwC9zhMPjd8.roa (hash: qj8u0n4HOzKDi6033J2/YLNKzCyWyCiJX2ywZI9NyUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:48:42:f3:49:b6:14:33:9d:4a:74:e6:0d:13:c6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Oct 13 08:01:53 2026 GMT
Not After : Oct 14 08:01:53 2026 GMT
Subject: CN=10239aa9add11f70a3dc4907cab8e00b212c2139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:1c:13:ec:1b:98:5b:d5:b0:eb:4c:f0:40:
ec:34:00:71:64:9b:5b:09:68:03:09:61:97:ee:25:
ff:c7:3e:4f:be:a4:a6:34:55:e5:6d:8f:f2:90:bb:
c4:1e:80:2b:b2:ba:15:4f:b6:4a:3a:90:f2:fd:59:
ef:d3:df:54:f7:50:5a:35:3f:f4:04:e7:97:80:5f:
cb:22:95:2b:b9:f3:d8:76:a7:23:0b:55:cd:31:60:
a8:20:9b:34:80:a8:4a:e7:10:f8:9d:89:ce:61:f3:
3c:b9:9e:78:b2:65:6b:37:b6:d9:5b:7a:2c:87:fb:
5e:37:4b:49:36:95:f3:1d:04:1b:e5:9d:e4:85:41:
dc:7f:3f:6f:38:43:f3:69:7f:32:91:5b:44:d7:05:
c5:6d:ba:3a:7d:95:11:a7:8d:33:af:14:19:56:35:
ab:93:bb:9f:0e:e1:65:47:d5:98:19:56:91:56:2e:
cd:ef:d9:5c:40:fa:19:ea:23:32:54:6c:77:3a:10:
dc:5a:00:10:a5:20:42:25:73:84:46:e2:eb:76:50:
9e:48:59:51:f3:3c:9f:12:0f:c9:97:81:38:9b:d1:
ac:e0:26:88:10:80:38:91:c8:53:70:c4:7c:32:af:
5a:76:eb:e0:ad:00:28:86:dd:51:f8:5c:c3:1c:81:
54:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:23:9A:A9:AD:D1:1F:70:A3:DC:49:07:CA:B8:E0:0B:21:2C:21:39
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4b:2f:8b:dc:f5:4a:2c:b1:6d:b0:66:31:91:6e:5e:47:dc:
e4:a5:0c:46:7d:ab:17:b4:d3:15:29:38:74:92:f9:d5:bf:db:
3b:b1:f4:bc:90:d1:2b:b6:35:95:46:9f:a3:42:cb:ad:fd:05:
4a:56:74:1f:03:d5:49:0b:b8:c7:6d:b5:0e:b7:09:ce:4f:53:
9a:a8:6d:8c:3b:c1:ca:91:ac:83:e0:f6:c0:28:0d:26:09:5d:
54:cf:c4:df:6c:0e:52:18:c3:82:a5:99:4c:d6:43:ac:e0:88:
06:20:02:e0:fd:f3:c0:d1:c3:ba:97:86:94:37:0c:5b:81:5a:
92:dc:58:9e:33:0a:cb:92:95:af:0b:22:17:36:7c:47:f6:3d:
c7:df:a7:fe:5e:c2:b8:d0:bc:4b:48:6d:a6:db:37:3f:76:f0:
b6:51:f6:4e:d4:ec:86:7c:f6:95:90:a5:94:70:40:b7:be:e7:
91:89:a2:aa:ab:53:4f:75:93:30:c6:ec:07:70:e1:41:09:fe:
67:d3:71:34:59:42:7b:6a:ad:fa:f6:50:b3:d5:3f:40:99:35:
06:03:66:61:96:b7:30:98:e9:7e:e9:24:34:8c:8f:18:a1:af:
8f:b4:4d:db:4a:75:2d:32:53:57:19:df:ce:8d:27:f5:b9:d9:
a5:8e:5e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:16:31 2026 by rpki-client