Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier: QBvuk+MIqB6Gz+R1J5+7m4MUrwXQ2iBQKBvgy6P689Q=
Subject key identifier: 5F:5E:6B:39:DB:BB:78:AE:9D:75:0A:01:3C:DB:CA:E2:FA:29:5E:C0
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 019F1D575973018FE129D99457B4043DBEE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number: 1990
Signing time: Wed 01 Jul 2026 11:01:31 +0000
Manifest this update: Wed 01 Jul 2026 11:01:31 +0000
Manifest next update: Thu 02 Jul 2026 11:01:31 +0000
Files and hashes: 1: BJqDDKUUwP-6T-FY6LGOmkQgBFc.roa (hash: Bg8fNp2XsW4hkEUUtvGIjHCnW3BOOuyGWwHhwTGlcFU=)
2: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: OjI4PyZBxFdNNJ05lsBPOsecwG4yQn2Sg1z9FRGMCo0=)
3: SUsmu5Ag-4xHGcfy7I-KypJxpsc.roa (hash: n8HW5vZsZRNckM8pkS3Nq4aPiFnPsCjT5rOGpbkWTrc=)
4: VXXJGd4FEOBiTRuvKylQZSh5MPc.roa (hash: 9Lce4m09pJL6B9nHSj0pDfxmZ/8/J6ec+N4whDnZ0b8=)
5: ZuK1S3Ghc42zA0OJKwC9zhMPjd8.roa (hash: qj8u0n4HOzKDi6033J2/YLNKzCyWyCiJX2ywZI9NyUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:57:59:73:01:8f:e1:29:d9:94:57:b4:04:3d:be:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Jul 1 11:01:31 2026 GMT
Not After : Jul 2 11:01:31 2026 GMT
Subject: CN=5f5e6b39dbbb78ae9d750a013cdbcae2fa295ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:97:da:da:f9:25:2f:65:70:a2:cb:66:f8:
45:e3:b9:74:6a:00:3d:58:82:f0:47:af:46:6b:a3:
29:01:21:a2:ed:f1:d1:e8:7f:12:86:ca:dd:09:d3:
a4:db:e7:2e:9d:24:60:d7:b6:9e:df:bb:aa:d9:fc:
56:71:17:e3:06:c3:62:cd:35:c2:d4:a0:a2:e9:92:
e9:68:ba:41:b0:9a:75:1b:5a:8d:2c:ba:4f:04:cd:
6b:e2:da:ea:fa:7d:a8:e0:65:a0:14:97:3e:e0:3c:
8f:97:e6:41:80:12:82:84:e6:34:13:50:a3:e3:36:
7e:c2:2d:58:ed:ec:a4:e4:86:c5:5c:8e:8d:05:ff:
45:35:2a:e0:83:ea:d5:95:3c:cd:a5:96:4e:63:b1:
1b:fc:4f:32:9a:a6:18:72:ad:41:d1:18:ef:52:c4:
a3:8c:d2:f9:57:77:4d:0b:ca:c3:83:f0:a3:f1:a3:
92:8d:69:9b:44:dd:c1:08:c2:39:09:d2:fd:f2:71:
69:14:1c:fe:e6:d2:69:28:ad:24:7b:f3:5f:5e:c9:
96:c7:75:ab:de:b7:d0:ad:8a:eb:2d:44:8e:93:f5:
ad:d0:de:3e:3c:37:4c:d5:73:91:28:29:a8:05:79:
77:1e:2e:d8:61:de:a4:09:e9:43:4b:44:70:5e:4b:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5E:6B:39:DB:BB:78:AE:9D:75:0A:01:3C:DB:CA:E2:FA:29:5E:C0
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:58:14:f9:7b:83:4d:f5:c5:66:34:86:af:66:db:6b:c2:0a:
4b:65:56:d7:a9:94:02:b8:3e:9a:67:17:f4:30:1b:6f:fb:42:
c4:29:e4:fc:ab:c3:3b:8b:ea:88:04:08:ee:c6:ea:93:b9:98:
57:56:b1:19:f6:eb:35:de:4b:47:6d:42:59:e7:be:c6:14:e1:
98:03:f9:30:3d:06:6f:b1:4a:3b:3b:21:c6:ec:f7:82:52:85:
06:8b:06:a1:e0:1a:e3:8b:39:fb:5d:fd:1d:9a:f5:bc:74:e1:
02:e1:77:40:83:01:fa:da:ba:3d:e1:cf:ab:7b:cc:61:3a:7b:
b2:ab:48:3a:70:3d:ef:c4:d2:8d:45:6e:98:72:a3:74:09:f3:
68:0f:21:6d:5f:40:32:b6:ba:93:b7:f7:ee:54:bb:08:06:11:
38:39:ee:c6:8f:7a:96:00:57:a4:d7:39:d3:80:71:7a:c9:0c:
b7:c5:c8:b5:86:37:70:9a:d3:f2:c3:d0:dd:c7:00:d4:fa:6f:
27:1d:28:13:06:51:34:94:b1:9b:b4:9b:33:78:e3:9f:45:1f:
db:c1:04:a4:3c:59:df:5f:a4:f7:3f:1c:46:2a:0b:0d:70:43:
68:78:95:f8:c0:e7:53:a1:fa:25:fb:ba:3d:50:5f:fa:d8:92:
2a:7f:17:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 18:46:38 2026 by rpki-client