Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: qMlnWZKuOtTTAiZS33d/8YkpzuVfiK58NW+J3IGlrSg=
Subject key identifier: 06:9E:7B:A3:19:9D:5A:BB:A2:95:A0:D8:4C:93:EB:45:C4:5B:A5:91
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 019D37C10EF82280C9826D8384EE97828DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 03FA
Signing time: Sun 29 Mar 2026 04:01:32 +0000
Manifest this update: Sun 29 Mar 2026 04:01:32 +0000
Manifest next update: Mon 30 Mar 2026 04:01:32 +0000
Files and hashes: 1: 1a2w5_LzpzoweEi0kL3e8rXuwEw.roa (hash: Uznzi70zArzLc6sT1YufT+KJGM9lJIIJ4gfkTYxhtAs=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: sF4ft9jnsp4evV/VgH6GPGscJizUo5KQGKdAtqLYPqk=)
3: TUYlFT-dUBjSF5MwO5c5SHo_-PA.roa (hash: yDE5fT46PoSW/d5/n8et57tOUUfO/M0RS358RxhsJ3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:0e:f8:22:80:c9:82:6d:83:84:ee:97:82:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Mar 29 04:01:32 2026 GMT
Not After : Mar 30 04:01:32 2026 GMT
Subject: CN=069e7ba3199d5abba295a0d84c93eb45c45ba591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:8b:e2:fb:4f:94:1c:25:fb:d9:62:a8:4b:
db:56:1f:dc:76:49:94:83:ed:c7:65:5e:6d:3d:32:
ba:ec:ce:93:7c:7a:04:bb:d5:4d:b8:e2:59:9d:fd:
87:b1:ae:ab:11:94:78:b6:ff:63:13:d5:6c:4b:07:
ad:ed:f3:f1:0d:5f:ff:93:a1:01:4e:cb:84:93:61:
e3:35:36:b0:f3:70:a8:c3:0b:a7:34:a5:1d:38:73:
50:ee:fb:83:bb:7f:19:0d:22:0b:bd:9f:68:6a:40:
e5:b3:b1:1d:80:d7:09:48:e3:48:c1:9e:ea:0a:7f:
e1:11:71:b1:e1:8c:1e:60:a8:38:17:14:54:c7:20:
9e:0e:5e:2a:5c:e3:06:5f:1a:55:0b:39:a7:7e:d3:
ed:ba:94:d2:b0:e0:b3:1e:19:a2:c6:ab:5b:ee:20:
f9:a5:a7:f7:68:39:ea:78:d3:c0:1a:0c:75:74:7f:
c0:9b:3c:bf:b3:e6:0a:f5:b4:f6:55:97:0b:63:d8:
4b:7b:e0:2d:d2:87:6d:6e:38:bc:0c:3d:74:24:02:
fa:82:1b:a2:b7:31:0e:56:a5:e1:6b:6c:d9:1a:b2:
7c:57:95:3c:35:82:33:e1:82:e0:73:19:da:b8:64:
a8:37:f9:24:48:e6:16:b8:48:ad:0c:d2:bb:93:88:
cb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9E:7B:A3:19:9D:5A:BB:A2:95:A0:D8:4C:93:EB:45:C4:5B:A5:91
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:78:72:6d:0a:72:64:51:78:78:8e:c1:c3:e7:5b:ef:ea:26:
81:4f:b8:b6:9a:57:1e:71:ed:5d:8b:71:e4:26:de:04:39:15:
23:a8:e4:28:7b:8c:a9:53:c0:8c:ca:46:13:d8:e6:47:37:50:
1e:32:9b:04:aa:96:32:a8:c3:3a:3d:38:d5:a2:72:fe:30:2d:
60:d4:7e:ec:d6:3f:c2:1f:b4:03:20:b3:fa:e0:1c:4a:6a:b3:
85:80:e8:9d:e0:07:71:d5:af:28:af:d9:26:83:cd:dd:24:fe:
c2:46:e6:18:a3:3c:a7:62:6c:b3:59:36:f5:48:24:1a:0b:00:
81:6d:20:9e:5c:97:5b:58:41:39:38:a0:30:99:13:4c:d5:c8:
4c:c4:27:5a:40:d7:23:c6:d8:5b:93:4d:72:86:3b:9b:f2:98:
5d:89:b7:4e:cf:99:cc:9d:33:12:d9:9e:c3:88:5c:bb:c7:29:
b5:e5:83:55:62:63:1a:ae:d7:32:89:15:8c:43:b6:93:ce:bc:
75:a6:1f:fc:be:08:fd:c8:8f:41:3d:07:08:cb:83:fb:35:11:
ee:8a:5a:3f:60:ad:eb:18:f6:f2:69:b3:0e:3b:5f:58:b3:df:
7a:59:2c:78:b3:0b:8b:7c:30:09:5b:9e:6f:81:aa:d5:94:66:
2b:bc:21:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:51 2026 by rpki-client