Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier: RMzY+8/0K1wDvQFJgtyMyCC1xP3MEo6Ve4sIw11TMCM=
Subject key identifier: 85:20:4A:A2:65:62:95:0B:93:2F:61:4D:DF:12:A8:D5:C7:10:9E:0B
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 019E31BC4370F7B02A349E130AB50558FFA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number: 1916
Signing time: Sat 16 May 2026 17:01:22 +0000
Manifest this update: Sat 16 May 2026 17:01:22 +0000
Manifest next update: Sun 17 May 2026 17:01:22 +0000
Files and hashes: 1: BJqDDKUUwP-6T-FY6LGOmkQgBFc.roa (hash: Bg8fNp2XsW4hkEUUtvGIjHCnW3BOOuyGWwHhwTGlcFU=)
2: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: 9OFYuz0tU8qKh9iMg7jcE++xAV+aZ0fomkoh3Z5PwNE=)
3: SUsmu5Ag-4xHGcfy7I-KypJxpsc.roa (hash: n8HW5vZsZRNckM8pkS3Nq4aPiFnPsCjT5rOGpbkWTrc=)
4: VXXJGd4FEOBiTRuvKylQZSh5MPc.roa (hash: 9Lce4m09pJL6B9nHSj0pDfxmZ/8/J6ec+N4whDnZ0b8=)
5: ZuK1S3Ghc42zA0OJKwC9zhMPjd8.roa (hash: qj8u0n4HOzKDi6033J2/YLNKzCyWyCiJX2ywZI9NyUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:43:70:f7:b0:2a:34:9e:13:0a:b5:05:58:ff:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: May 16 17:01:22 2026 GMT
Not After : May 17 17:01:22 2026 GMT
Subject: CN=85204aa26562950b932f614ddf12a8d5c7109e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:67:bf:30:e5:8b:e8:8a:8b:be:0c:1d:a3:13:
92:b4:a5:0d:bb:6f:4e:8b:07:27:ae:30:f4:09:3d:
13:65:d2:9e:87:a2:fd:cf:a5:89:34:15:f3:36:c0:
46:21:da:f5:f0:93:ce:ea:6a:c9:1c:29:56:c2:b8:
63:79:5a:4a:67:da:7c:d1:05:e9:e4:03:2a:68:d1:
a7:1b:05:b1:8e:12:05:cf:1d:75:08:a3:4f:0e:cf:
d4:57:f3:b6:4c:d1:6f:4d:39:70:b3:d6:4b:5c:9d:
ff:8b:87:31:3a:bd:a7:0a:02:88:0f:3d:c6:95:51:
ac:28:35:3d:ef:f2:2e:53:58:4b:fe:cd:be:29:33:
0d:72:4b:7a:0a:c5:01:71:95:e9:ea:a3:c8:61:4c:
c3:0b:d0:a9:17:98:6c:46:9e:e3:fa:aa:bd:cd:07:
ab:d3:04:82:8c:91:7c:78:a0:53:bf:93:ea:9e:9f:
da:9b:1b:bf:3a:55:7e:dc:e2:3b:a5:43:e8:41:de:
7b:07:72:29:0d:0e:95:37:66:7b:43:ff:5d:3b:ce:
f8:5b:e6:40:71:d9:67:0c:a5:65:f3:ee:5d:8c:b5:
20:71:82:3a:6f:92:ac:ec:3a:8f:f0:59:97:e3:01:
ef:21:83:39:a2:ba:89:d5:34:9f:64:ab:d3:97:82:
7b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:20:4A:A2:65:62:95:0B:93:2F:61:4D:DF:12:A8:D5:C7:10:9E:0B
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:52:fb:56:73:6f:9e:60:1d:53:2c:29:1e:40:12:de:68:e8:
d2:c6:b9:20:4a:8a:bd:ea:9c:fb:57:d9:b0:f3:b1:39:7b:c8:
93:d8:dc:0c:3e:f1:c8:8e:65:83:f4:93:33:b0:3a:c3:ee:29:
d8:42:67:58:c2:d0:e3:98:3c:28:c6:60:a6:e6:25:ca:2d:e7:
20:6a:a9:b1:c5:d9:18:ce:e7:b7:1e:66:d5:39:26:5a:f5:60:
70:60:6d:53:c8:3c:a5:4e:53:b7:43:ac:28:4f:5d:b7:51:34:
b3:8c:3c:b3:97:0c:b9:c3:8a:8e:f8:66:41:d5:c5:a5:81:10:
30:38:73:6c:f9:29:72:c4:f6:f0:a5:f9:19:26:a2:49:32:1d:
d8:5c:ef:c7:ad:60:3a:d1:dd:62:9e:07:1a:32:16:ae:09:c9:
56:a0:2d:ee:95:88:07:31:ed:26:5c:0e:20:23:56:92:e4:c9:
16:7a:97:23:be:9d:6d:75:e8:61:89:7a:79:a9:20:f0:44:7d:
34:55:b5:06:31:30:47:17:e9:a1:a0:e0:55:44:30:4a:27:39:
76:7e:ea:c0:57:17:7e:34:b1:74:d5:8f:6a:fa:5f:6e:f9:56:
6f:f8:fb:f1:25:ba:d2:fd:0d:c2:d3:5a:db:b9:5b:be:d7:e2:
e1:b4:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:31:44 2026 by rpki-client