Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
File: NXAXpX-ccN-vZpOjJLumhne4ePM.mft (raw, json)
Hash identifier: IIuw1qykfhb00N4afn6pY39KbmnzwK9JLWrlC33URbs=
Subject key identifier: 34:CF:49:25:53:02:AE:A4:5E:4C:D0:CB:3A:2B:35:DC:E9:2F:74:9A
Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3
Certificate serial: 019D39AE62E3F8A60D71B0EDC107A265366D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 13:00:23 +0000
Manifest this update: Sun 29 Mar 2026 13:00:23 +0000
Manifest next update: Mon 30 Mar 2026 13:00:23 +0000
Files and hashes: 1: 1-sDBo1h39Efa-H3ly5K8_3PMd8E.roa (hash: nnHWf61PhBu5tpbkXsvcIaf2sAJomeNe4RjS/qDyEu8=)
2: NXAXpX-ccN-vZpOjJLumhne4ePM.crl (hash: 2+zqDHgJNOxp/c1/3RgdhRvRq+a6UTL11II446KKWKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:62:e3:f8:a6:0d:71:b0:ed:c1:07:a2:65:36:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3
Validity
Not Before: Mar 29 13:00:23 2026 GMT
Not After : Mar 30 13:00:23 2026 GMT
Subject: CN=34cf49255302aea45e4cd0cb3a2b35dce92f749a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:19:a0:3a:f8:74:7e:78:16:a3:c9:10:18:
e3:1e:95:2d:e3:a3:e6:04:1f:a8:63:50:15:0e:a8:
6f:84:1c:9c:07:a3:1b:6b:2d:7e:1a:8b:fe:9a:3e:
a3:c9:ad:52:43:f0:25:fc:97:a9:2e:ce:9b:77:4e:
1d:6b:3c:33:23:d9:b3:dd:b8:24:1d:68:30:2e:58:
e7:98:9c:16:ba:f0:97:94:6e:2d:4d:cd:36:2d:24:
d5:c3:a1:13:46:95:93:ae:75:3c:84:ec:29:5d:56:
61:e2:d2:12:ab:6f:ac:5c:03:68:13:b6:6c:dc:b2:
c8:32:67:dd:2d:fe:98:ed:e6:fc:f1:68:7f:38:f7:
30:8f:9c:b2:52:be:7e:b4:54:93:4e:97:4b:ac:aa:
5c:b3:f3:d8:cd:48:cc:a4:c6:73:bc:f5:88:06:f7:
85:6c:eb:94:bf:4e:b9:53:bc:f1:78:99:ce:20:cf:
92:b9:08:cf:db:55:12:88:30:3f:82:48:ec:d6:de:
f3:57:62:47:d1:e2:0c:46:ff:01:ca:5d:32:2c:f4:
29:e9:7f:dc:3e:4b:bb:b0:28:cc:aa:07:7b:88:ee:
a6:bc:3c:dc:f6:73:2c:0c:39:77:c1:87:a4:21:21:
6a:56:71:23:09:34:83:a2:5a:f4:8b:74:83:ba:e2:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CF:49:25:53:02:AE:A4:5E:4C:D0:CB:3A:2B:35:DC:E9:2F:74:9A
X509v3 Authority Key Identifier:
keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4c:8a:14:f6:bd:74:e9:db:98:3c:ad:87:77:07:c8:fd:66:
46:db:77:da:c2:4e:8c:21:1e:89:6d:c9:bf:80:72:d3:1a:1b:
b6:c0:33:21:95:88:6d:07:9e:6b:3c:32:ae:be:69:25:85:10:
ee:e7:e6:78:1d:f7:84:84:27:35:7c:ea:21:aa:0e:2d:d3:1c:
e4:ed:f6:48:e9:9d:04:43:91:f1:60:20:9a:ff:7e:12:1c:ff:
b9:c7:33:29:77:cd:51:23:04:dd:6f:71:c3:6a:47:9f:ac:97:
55:3a:26:ad:1d:98:08:de:3a:0b:52:c1:cf:82:f6:04:78:dc:
11:02:12:8d:f1:31:9c:b9:f8:01:0d:02:60:86:6f:18:7a:9d:
93:79:83:6e:ca:45:e1:e1:31:48:cf:2a:40:c8:89:c7:8f:94:
dd:4b:23:35:59:9c:aa:b2:eb:b5:23:78:1c:fc:9f:fd:02:0e:
87:60:26:32:8d:d0:71:dd:eb:66:09:7d:95:ed:ca:b0:c4:b6:
6d:7b:7c:b4:a7:1a:45:96:f6:be:38:94:f6:31:e8:3e:82:13:
8e:7b:03:d4:55:18:30:30:9c:25:76:67:5c:d0:54:f7:e3:fb:
1c:a2:e2:46:bf:dc:b1:ad:28:c3:c2:b0:94:be:c9:98:8c:ad:
7b:2f:60:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:56 2026 by rpki-client