Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier: bK2e4wc+edKVh8ACMtIgevg/drp2Ishc+1gbg9l4nr4=
Subject key identifier: CD:8C:1D:41:4F:AB:DE:3B:38:BA:51:CC:C5:B4:61:0D:BC:B3:C9:FF
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 01A0201E308CFE17CDCD6567A0B01991D86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number: 1A16
Signing time: Thu 20 Aug 2026 17:00:44 +0000
Manifest this update: Thu 20 Aug 2026 17:00:44 +0000
Manifest next update: Fri 21 Aug 2026 17:00:44 +0000
Files and hashes: 1: BJqDDKUUwP-6T-FY6LGOmkQgBFc.roa (hash: Bg8fNp2XsW4hkEUUtvGIjHCnW3BOOuyGWwHhwTGlcFU=)
2: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: b4GZzbKzi5zXsWzZuBPBl2TANYvrPLp4hdj+L8TN58w=)
3: SUsmu5Ag-4xHGcfy7I-KypJxpsc.roa (hash: n8HW5vZsZRNckM8pkS3Nq4aPiFnPsCjT5rOGpbkWTrc=)
4: VXXJGd4FEOBiTRuvKylQZSh5MPc.roa (hash: 9Lce4m09pJL6B9nHSj0pDfxmZ/8/J6ec+N4whDnZ0b8=)
5: ZuK1S3Ghc42zA0OJKwC9zhMPjd8.roa (hash: qj8u0n4HOzKDi6033J2/YLNKzCyWyCiJX2ywZI9NyUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:1e:30:8c:fe:17:cd:cd:65:67:a0:b0:19:91:d8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Aug 20 17:00:44 2026 GMT
Not After : Aug 21 17:00:44 2026 GMT
Subject: CN=cd8c1d414fabde3b38ba51ccc5b4610dbcb3c9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f8:7e:a5:26:b3:68:72:63:83:44:a5:af:e1:
b0:54:c3:e7:92:51:eb:3c:7a:be:6c:30:e5:9e:c3:
98:ad:42:d9:70:ac:b3:ce:c2:32:e7:32:2a:7a:c5:
3f:5e:2c:01:62:3c:e2:14:11:68:1f:4c:61:e0:b7:
7d:d1:f4:f8:36:48:69:07:ab:6f:22:d3:24:75:6c:
9f:1f:60:1a:09:78:b7:22:2f:96:87:95:ad:90:95:
5f:08:18:9c:97:ca:3f:54:bd:d3:66:fb:e7:23:69:
21:13:ac:24:6a:b6:9c:e0:a3:dc:35:30:2e:78:8c:
fc:2f:6e:d1:ee:e4:70:0d:a3:82:af:ad:a4:b8:60:
90:5d:dd:16:45:ab:8d:66:18:3e:58:30:25:63:83:
f8:06:98:ba:e2:73:60:5d:8b:60:b1:4a:f1:4b:0c:
d8:bb:b3:36:fe:fb:54:ff:5a:f8:36:e5:f7:6a:bc:
59:9f:7d:73:58:36:b3:93:2a:2e:eb:ba:24:3f:fd:
4e:9e:e9:ae:58:a1:ae:5e:b4:2b:37:69:f1:bd:c6:
aa:41:d0:a2:62:ff:94:01:c4:0d:dd:ec:e8:40:26:
47:de:66:e1:75:88:25:93:f1:b7:8f:a2:b2:ec:65:
40:56:c9:65:77:39:40:d5:d9:5e:fa:89:2e:f6:aa:
e8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8C:1D:41:4F:AB:DE:3B:38:BA:51:CC:C5:B4:61:0D:BC:B3:C9:FF
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:70:2b:47:05:72:d9:85:3f:44:e4:b9:ae:7a:bd:b1:20:c0:
88:d0:eb:fb:31:9a:68:11:80:e3:31:94:da:cb:ec:69:35:aa:
30:d0:44:c5:bb:69:09:76:63:85:59:87:34:63:27:e0:8e:f6:
ac:79:55:ab:ba:d9:05:1c:a2:4d:40:44:36:d9:bf:d9:1b:6f:
5b:5b:f9:4a:01:89:e1:fd:d1:1b:0b:62:05:d6:ed:e9:42:4b:
b7:cc:ba:c8:e7:b7:52:dd:ec:44:50:54:d1:e5:42:95:16:06:
4c:f8:7a:4e:37:ca:12:c3:10:fe:34:77:db:97:bd:6b:46:9f:
8e:3c:38:a7:77:0b:a8:8e:ae:78:67:40:2c:e3:3e:31:41:26:
64:02:cd:cc:18:c5:ff:8b:ad:da:d5:e4:7f:f3:ff:7d:f2:1b:
74:71:b8:5e:e6:3e:8e:4c:f3:7f:dc:c3:74:da:33:c2:6d:2b:
d5:ad:31:73:b5:1a:b1:f6:1a:e0:e9:82:f7:6d:de:9c:75:0e:
5e:98:d7:ec:a0:59:93:b8:00:00:5b:90:f3:6d:a6:59:a1:83:
ad:84:2c:ed:6d:19:e2:a3:ea:30:a6:36:92:24:6e:02:12:53:
2e:05:b3:e6:f2:29:19:08:97:3e:01:b4:31:a2:00:b1:41:63:
31:2a:bc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:56:14 2026 by rpki-client