Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: 6gU0/ho8/slH1gTHrIU/pyr2Lz6H67tBMVXLrPJgPsI=
Subject key identifier: 2B:32:D3:F7:C9:61:74:E6:44:B3:4A:8A:B2:5F:B7:ED:40:14:4B:3B
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 019E30E10A5763ECF433C1317F1C7489007A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 047B
Signing time: Sat 16 May 2026 13:01:55 +0000
Manifest this update: Sat 16 May 2026 13:01:55 +0000
Manifest next update: Sun 17 May 2026 13:01:55 +0000
Files and hashes: 1: 1a2w5_LzpzoweEi0kL3e8rXuwEw.roa (hash: Uznzi70zArzLc6sT1YufT+KJGM9lJIIJ4gfkTYxhtAs=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: Zh60HLd9fQtuolsObfOaGl0f/uqvdW7wRZHggGrSF0s=)
3: TUYlFT-dUBjSF5MwO5c5SHo_-PA.roa (hash: yDE5fT46PoSW/d5/n8et57tOUUfO/M0RS358RxhsJ3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e1:0a:57:63:ec:f4:33:c1:31:7f:1c:74:89:00:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: May 16 13:01:55 2026 GMT
Not After : May 17 13:01:55 2026 GMT
Subject: CN=2b32d3f7c96174e644b34a8ab25fb7ed40144b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:77:db:7a:9e:63:55:9c:06:74:38:6c:ef:
36:1e:18:7c:56:e2:5c:be:e7:3c:4d:c7:78:24:d4:
a3:80:d7:2c:01:26:fc:4e:67:2c:00:ad:d1:14:d6:
3b:f3:cb:37:b1:58:4c:48:55:a0:d5:94:5d:27:c9:
eb:f3:95:64:79:31:67:52:35:85:a8:f3:e5:88:7d:
54:10:1f:76:4e:f1:a8:02:d9:c7:ea:fe:89:c2:fd:
ce:93:38:f0:81:df:b6:67:27:aa:dc:70:00:f6:bb:
b4:cc:b1:1b:d6:45:4b:d2:c4:53:3d:0f:f2:2d:da:
d4:6f:b7:2a:f3:66:09:4e:a6:1f:35:d2:02:f3:55:
17:97:12:bf:f2:09:96:e9:5c:be:e3:a5:84:1e:77:
a8:6a:c7:13:35:86:6d:5d:d9:31:87:89:4a:5f:a8:
ba:27:39:37:8b:42:8e:19:bd:e2:b4:fe:f1:b0:6c:
67:c6:8d:03:ec:3e:f0:08:cb:c7:56:64:5e:29:d1:
b8:20:dd:cb:f6:ac:79:53:3b:45:cb:20:91:1d:78:
3d:a2:72:3f:20:ff:c1:89:72:a7:0e:bf:5f:89:1d:
91:3b:f1:10:21:3b:64:3f:d3:7e:4d:c8:66:a3:fc:
6d:c0:2a:04:0f:2a:d8:29:3a:eb:dd:b6:a2:5f:0c:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:32:D3:F7:C9:61:74:E6:44:B3:4A:8A:B2:5F:B7:ED:40:14:4B:3B
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:86:7d:0a:c2:5d:b9:d1:34:3d:0d:42:ac:cc:d8:80:f1:5c:
3f:8c:38:b6:2c:f2:62:7e:45:0d:6a:fa:25:84:51:be:5d:29:
b9:0a:b0:2f:96:d3:73:9d:ae:7b:6b:fa:0f:69:1b:5b:5a:ac:
5b:25:40:3b:fb:52:ca:d3:b4:64:a5:8e:cf:07:27:bf:70:f4:
43:00:b7:08:b8:29:57:c4:c2:f9:6e:9d:37:e4:60:c1:62:ef:
12:4b:30:86:3d:bd:99:f6:64:fb:aa:72:4a:c5:b3:44:ad:5a:
46:61:84:a0:69:99:14:f9:aa:94:4a:40:2d:46:3e:f7:5f:a1:
d3:a9:eb:92:b6:24:65:70:c0:b5:3c:32:4b:a0:e4:f8:63:bc:
cc:19:b2:fd:6a:e8:92:fc:7b:15:7c:05:e6:04:e2:ab:d3:43:
8a:96:2f:99:28:ae:5b:f5:7c:7b:7a:16:df:19:05:dd:4c:82:
84:b6:e7:7a:1d:5c:26:dc:d8:e2:8c:40:cd:39:d7:83:16:6e:
37:19:5a:df:d4:06:1d:db:13:5a:6d:7a:5c:f4:8c:02:90:82:
15:b8:24:8b:39:8a:f1:97:c9:fc:1c:39:f8:8d:b8:40:4e:d0:
fe:74:ba:ce:2d:ec:e7:6b:65:78:e7:b8:fb:4f:2e:e9:d2:85:
d7:c2:11:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:12:47 2026 by rpki-client