Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File: NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier: FH0V91h5KlGffztKlKOXiDuCD6H4ROnBAbZ39y+/yag=
Subject key identifier: C3:EF:8B:CB:8E:BF:39:50:84:DA:EB:A8:E8:3D:71:72:FB:F1:FA:77
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial: 019D394167F4D22A9F9EE112099B25E50C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number: 05BB
Signing time: Sun 29 Mar 2026 11:01:20 +0000
Manifest this update: Sun 29 Mar 2026 11:01:20 +0000
Manifest next update: Mon 30 Mar 2026 11:01:20 +0000
Files and hashes: 1: 0oG7Wuq3ZAAXzg6P-qV_HWGeUWE.roa (hash: tl6rHSJSg3BOoepWWn4g5EPuRgVKzjqvlpZ/rZDE8k0=)
2: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: xLLifrvouf971X1/OwGMvCV4624oAmAHylVo1T6+Zis=)
3: wC11yeUerTWiyRWDCng4spCl8qM.roa (hash: /IMrg/w5VKSBqu/JYOwX3ZqxJnQBurW+kq0gnHVnWjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:67:f4:d2:2a:9f:9e:e1:12:09:9b:25:e5:0c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Validity
Not Before: Mar 29 11:01:20 2026 GMT
Not After : Mar 30 11:01:20 2026 GMT
Subject: CN=c3ef8bcb8ebf395084daeba8e83d7172fbf1fa77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:c4:d5:65:d5:a4:49:e2:e6:ce:aa:fc:67:
6f:ef:c1:64:51:5b:5a:f6:3d:55:dd:78:a0:4a:c0:
9c:b2:98:6b:54:3c:de:d9:66:02:35:e1:86:bc:c1:
69:02:7e:a9:00:da:5b:fd:5a:f1:e7:ff:74:ee:47:
31:b1:c7:87:dd:34:0d:6b:05:8c:0a:dd:63:cb:32:
75:e8:5c:c1:94:22:b8:28:2b:29:7a:d7:40:bc:20:
1b:86:db:34:2a:8c:c5:53:8a:cc:90:d0:fa:3a:3d:
98:79:7e:a3:7c:b1:7f:3c:ca:c4:fe:50:0d:2d:cc:
97:72:55:12:90:86:09:a8:90:27:be:ad:00:64:8e:
41:26:38:a2:7b:1f:58:8b:d9:8a:10:52:b4:9c:91:
62:89:4e:d8:d9:5d:7f:e1:9c:71:1e:12:da:09:e9:
68:40:a3:5b:df:3f:68:cf:ad:7e:93:e6:a2:dd:21:
36:87:47:e7:b5:99:c3:7d:ce:1b:04:4f:73:4e:bd:
63:19:b9:72:8e:e6:ef:af:8e:c7:f5:92:5b:3f:cb:
2c:52:4b:c5:78:0a:4b:ea:82:24:e8:da:ae:01:e3:
4c:87:54:75:3b:26:ce:c9:9d:3e:88:88:f9:85:7b:
0b:d8:06:d3:02:a6:99:76:36:85:06:13:38:03:72:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EF:8B:CB:8E:BF:39:50:84:DA:EB:A8:E8:3D:71:72:FB:F1:FA:77
X509v3 Authority Key Identifier:
keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2d:47:15:30:f9:a7:d2:79:70:49:52:fa:8e:19:7a:13:79:
f6:ce:97:ef:35:93:6c:52:d9:5b:0e:45:d9:e4:be:1c:db:27:
62:bd:32:c5:f8:38:f2:ac:ae:55:27:b3:29:52:ee:cb:73:bd:
b3:03:d4:63:7e:3a:51:20:a7:1a:71:26:24:89:24:64:79:5b:
d2:84:b7:d3:02:45:f4:2a:7a:9e:15:14:48:12:2d:c2:c9:48:
fb:c3:58:4b:38:7a:e2:23:4b:aa:4a:64:50:2a:6d:ec:66:f6:
60:90:dd:46:3f:3a:5c:b9:70:cd:63:d1:ee:0c:2a:af:2e:88:
8a:79:43:5f:17:4f:03:5c:6a:4d:4b:a1:d2:0a:8d:e6:0f:57:
5d:3c:58:4e:55:fd:f5:37:64:42:42:41:9a:0a:c9:0c:fa:bc:
09:2a:c0:73:9b:77:7e:40:da:6b:c2:ad:da:7b:c0:52:f5:5e:
e1:cc:43:d5:a6:fd:82:84:6f:54:61:ce:69:b3:92:6b:4b:f4:
c7:20:82:04:86:b7:6b:12:3f:ec:e2:3e:91:fb:fa:df:36:50:
40:0d:58:8d:65:77:f2:e8:ee:5f:97:d0:4d:4f:20:65:10:84:
aa:02:7f:6e:c8:58:1e:1e:be:9c:75:c0:2c:d3:86:3d:b2:9a:
1b:33:dd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:20 2026 by rpki-client