Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier: 0ThK2c/H4Lvf9szYa3XHwvCoJ9auIb504IT1GgB0b+Y=
Subject key identifier: D0:C0:81:94:DA:ED:0B:21:75:79:01:40:6E:AA:38:FC:26:56:EB:3E
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 019D389C08F7D724BD167DB968B64F0865D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 08:00:43 +0000
Manifest this update: Sun 29 Mar 2026 08:00:43 +0000
Manifest next update: Mon 30 Mar 2026 08:00:43 +0000
Files and hashes: 1: BJqDDKUUwP-6T-FY6LGOmkQgBFc.roa (hash: Bg8fNp2XsW4hkEUUtvGIjHCnW3BOOuyGWwHhwTGlcFU=)
2: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: z6cXEC7xFJ4eKSJ1iTmpvILIVLR6Ox1Cn+VfuHyMMpY=)
3: SUsmu5Ag-4xHGcfy7I-KypJxpsc.roa (hash: n8HW5vZsZRNckM8pkS3Nq4aPiFnPsCjT5rOGpbkWTrc=)
4: VXXJGd4FEOBiTRuvKylQZSh5MPc.roa (hash: 9Lce4m09pJL6B9nHSj0pDfxmZ/8/J6ec+N4whDnZ0b8=)
5: ZuK1S3Ghc42zA0OJKwC9zhMPjd8.roa (hash: qj8u0n4HOzKDi6033J2/YLNKzCyWyCiJX2ywZI9NyUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:08:f7:d7:24:bd:16:7d:b9:68:b6:4f:08:65:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Mar 29 08:00:43 2026 GMT
Not After : Mar 30 08:00:43 2026 GMT
Subject: CN=d0c08194daed0b21757901406eaa38fc2656eb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d2:2a:1f:b0:10:74:98:60:f8:f0:17:10:a3:
a5:94:a1:cd:49:35:37:91:52:ad:ac:82:e4:e0:64:
ef:fe:cb:e8:b5:20:d4:48:18:5b:79:a3:7f:d3:75:
73:97:3c:a1:a6:77:50:ce:c2:a4:f7:dc:58:ca:1e:
5e:01:49:da:22:21:ca:b0:85:80:c8:5a:9a:12:f0:
ac:45:6f:c1:ac:52:b6:ba:f7:cc:10:f9:c8:16:d0:
57:f3:ba:9e:02:34:56:ef:47:9d:8a:0b:39:f2:bc:
11:09:51:8d:55:f1:ee:42:50:2a:8c:22:3f:32:51:
cb:6d:4a:d6:c8:f7:d5:84:33:8c:99:8f:cc:4b:de:
bd:06:15:0f:3b:74:87:65:0a:80:a2:6b:26:ea:0e:
71:b4:62:c2:0a:7f:b1:8d:2e:39:78:c0:5e:35:14:
ba:62:5c:a4:54:ef:95:98:98:fd:b5:0e:07:66:ae:
4a:de:35:61:b2:14:7f:2c:23:f1:6b:6e:c3:e3:d0:
f7:97:cd:c7:76:f7:ed:2f:ec:85:1c:fe:25:2d:a7:
80:75:77:b8:88:48:a6:32:e9:31:54:1f:64:81:03:
9e:0d:a4:ca:85:87:cc:45:d3:bc:fc:c3:13:4c:6d:
0f:cd:9e:8d:ce:69:13:e7:6b:0c:10:2c:bd:12:2e:
a8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C0:81:94:DA:ED:0B:21:75:79:01:40:6E:AA:38:FC:26:56:EB:3E
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9b:a5:60:2e:7c:6f:a9:d4:f0:b3:07:99:32:ec:3a:fc:c4:
6d:67:5f:fe:41:88:66:a7:ae:ba:2e:9d:4a:14:e0:d6:ce:ed:
ad:ae:f9:f6:57:8a:9a:63:18:70:a5:9f:56:68:b6:b9:2c:45:
dc:e7:8d:93:d1:ba:ac:ff:18:f5:d5:94:aa:8b:fa:f1:21:be:
e6:ff:ae:4e:3d:dd:19:f1:cb:66:7d:23:14:10:40:53:a4:8b:
00:f6:11:34:68:b7:7a:c1:4a:3f:3c:bc:f2:6c:10:c0:0e:34:
70:c3:65:03:f5:32:8d:e8:51:29:98:03:44:7a:f8:8e:5e:de:
e1:a6:ca:e6:a5:49:53:26:22:07:9f:38:3e:1e:4c:66:88:0e:
7e:99:fa:96:d5:26:79:35:59:52:bb:5c:7f:03:01:52:4f:99:
c5:82:aa:bc:e4:02:bc:39:24:e8:cb:78:52:18:a2:2e:17:24:
dd:a5:13:3b:82:95:ed:0a:ec:df:a4:b7:3a:4f:bb:76:08:e4:
c7:54:a3:f8:d9:7e:40:2d:2b:58:49:36:da:72:f5:67:a0:df:
02:e8:a0:6b:29:73:26:cf:c9:e3:a2:90:2d:66:50:de:b5:6a:
85:ff:14:8f:d2:2e:de:70:ba:2b:1d:c3:e9:37:ed:6f:a3:1e:
fb:82:75:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:38 2026 by rpki-client