Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json)
Hash identifier: qlrT2G3UtshjCs9rbS9TQhblR+09uER/6/Du6Ix0OAs=
Subject key identifier: 0B:E7:D4:2F:57:D9:30:03:9E:E1:73:AE:51:2D:8D:7F:AB:B7:C8:70
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 019D3752F4BDC990956CC1DB2A2081971C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:01:16 +0000
Manifest this update: Sun 29 Mar 2026 02:01:16 +0000
Manifest next update: Mon 30 Mar 2026 02:01:16 +0000
Files and hashes: 1: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: PzHMn/8rbuot0giwsfFy/3YjzcWtC1gFcckoS/JzcPQ=)
2: e4_7yaHSmot34MoxfI-dfeOUQj8.roa (hash: Zla4V4TUPhBrvQzIH/3cu0Byr6xg7FZryKfovqeNwz4=)
3: wVHWp3M4ey0oV4Vvt4IVxUGWwHU.roa (hash: bGvl7Pnh00VzisoVUojSHZYeOEdkkKp2OdrZk5Xs+9U=)
4: z8_dgT6WuAsyinggiWah1gloyzI.roa (hash: Ux7iykUwWC0VnspPLqSHuMbius4UJKLHe67ofj8JFYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:f4:bd:c9:90:95:6c:c1:db:2a:20:81:97:1c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: Mar 29 02:01:16 2026 GMT
Not After : Mar 30 02:01:16 2026 GMT
Subject: CN=0be7d42f57d930039ee173ae512d8d7fabb7c870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:29:f0:d2:3c:a4:ae:18:6a:63:c3:d7:a2:
96:36:8b:b4:4e:1a:c2:71:44:15:fe:09:cb:61:f8:
40:36:80:9c:4b:cc:f7:18:2e:80:6c:02:65:39:f3:
30:cc:bb:14:ee:e3:a1:52:b0:22:e4:f6:15:09:cc:
64:d7:75:a3:93:0c:d1:9c:cb:35:fc:2b:58:dd:38:
fa:e9:7c:ee:14:ac:df:b2:b3:5d:88:fb:77:18:fe:
90:66:73:e1:f0:1d:de:76:dd:4b:31:a8:94:dc:ae:
71:6e:75:84:f5:9f:e9:9c:7a:f4:74:1d:6f:ed:37:
f4:c9:f0:fe:8d:04:34:51:72:ad:91:f2:5f:01:84:
73:14:6a:35:08:e5:36:20:46:d0:f5:02:5c:5c:d6:
3b:b0:8f:56:6d:da:fd:bc:19:8b:aa:81:88:30:80:
ba:04:bd:cd:3e:04:60:ff:00:06:59:ab:43:b3:b3:
ab:3c:e3:e6:cd:47:10:ed:90:62:b2:cc:b6:92:be:
e9:77:87:6b:d7:a6:62:2b:30:86:9f:30:d8:64:d5:
8d:a7:d7:21:1e:a3:09:2f:b6:fa:17:97:20:fb:87:
3e:bf:49:c8:71:b6:ab:42:e1:3a:66:a5:9a:cc:34:
81:f0:e0:30:04:db:a6:05:97:c6:8a:3b:e7:99:a1:
0b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E7:D4:2F:57:D9:30:03:9E:E1:73:AE:51:2D:8D:7F:AB:B7:C8:70
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3e:74:51:a3:28:91:55:50:0f:51:a3:c3:b8:71:64:3e:fc:
dd:a0:11:94:db:c7:a2:92:e2:6f:31:09:06:99:c0:bd:3e:b9:
ed:f8:c1:5d:44:59:d0:8a:50:18:d9:2f:76:44:78:c7:3f:d9:
50:ca:24:15:f5:39:03:f0:55:53:cb:47:eb:88:33:00:73:ac:
7c:10:99:f2:59:45:82:d7:03:53:ac:62:49:26:b9:1f:02:65:
ab:08:bf:06:23:f1:1f:b5:1d:3c:bd:12:f5:1d:7f:59:93:6b:
67:8e:54:94:5c:03:02:85:de:16:c2:c9:f5:51:e4:01:52:5d:
a0:a1:a0:98:24:12:8b:21:a5:05:79:35:66:70:28:67:a5:b0:
ea:76:31:4a:0f:c2:d3:60:9e:d5:87:01:0c:3f:30:f6:84:b0:
38:a1:dc:85:17:88:20:2f:18:dd:36:c8:3d:3f:0a:be:d9:7c:
06:60:03:9c:18:64:a0:65:d4:93:60:7f:82:f9:99:66:f9:da:
08:3a:3b:82:86:45:66:9a:12:8f:ee:1e:d7:ca:30:e8:ef:29:
02:bb:c8:d7:1d:0c:ff:7f:47:3e:5d:f7:90:f6:da:21:bd:cd:
dd:92:1b:8c:7b:47:5b:3d:7d:8a:26:90:0a:66:55:34:d6:2f:
c9:05:c8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:37 2026 by rpki-client