Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
File: NIg6t5nxQCjltTdQbir4eESQQcU.mft (raw, json)
Hash identifier: OCsNGZAQdT7vzeNkhqbcVah+a1PulPQxtDMTZrcJyGU=
Subject key identifier: 9F:9B:E2:31:DF:7E:67:F7:47:02:8B:1F:1E:71:2A:23:46:D5:FC:BB
Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
Certificate issuer: /CN=34883ab799f14028e5b537506e2af878449041c5
Certificate serial: 019D3752CD68AF54588DDEC03AE8C885FC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
Manifest number: 075D
Signing time: Sun 29 Mar 2026 02:01:06 +0000
Manifest this update: Sun 29 Mar 2026 02:01:06 +0000
Manifest next update: Mon 30 Mar 2026 02:01:06 +0000
Files and hashes: 1: NIg6t5nxQCjltTdQbir4eESQQcU.crl (hash: 2nrcdDNsi0K8wn3OyPUrpPEvVq5knnvD71GmOfGGkIU=)
2: ajWUGAq6BMTKrTNOHft42ywINnc.roa (hash: Oc0Q5MG2sAXuAr4KfyQjmkzbXtqqCBE8bhQRqqONsEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:cd:68:af:54:58:8d:de:c0:3a:e8:c8:85:fc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34883ab799f14028e5b537506e2af878449041c5
Validity
Not Before: Mar 29 02:01:06 2026 GMT
Not After : Mar 30 02:01:06 2026 GMT
Subject: CN=9f9be231df7e67f747028b1f1e712a2346d5fcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:98:c1:f2:97:1b:d7:a2:9b:b0:b5:16:9f:
66:fc:cb:af:31:5b:bb:b1:32:5b:c6:74:52:45:14:
b0:2a:a6:34:df:a3:c6:17:c9:0b:cf:09:77:c1:a3:
2b:7c:d8:b6:9d:19:af:90:66:13:f7:47:f2:bd:50:
b5:5e:1c:c3:7c:32:f0:5c:a6:55:f3:78:69:03:fa:
1b:01:a8:d5:a7:8c:bb:07:28:fe:59:6b:ca:c4:74:
dd:c2:bf:45:93:4a:ed:bc:7e:0b:c7:5d:48:9a:21:
00:86:de:cf:14:e1:17:f0:fb:74:29:cc:e0:77:ff:
45:dd:98:5a:57:b0:81:80:eb:ad:21:75:78:ac:49:
86:aa:f9:b8:1d:2f:55:f9:d6:ad:f2:f7:c1:10:27:
e6:0b:29:2c:3a:30:80:46:f5:3d:27:cc:d0:56:88:
54:d4:03:f4:94:91:4b:b2:16:89:b0:52:93:8b:43:
79:17:05:70:46:13:38:69:3c:ff:92:ba:ad:e2:66:
66:a0:2a:6b:1a:cc:b8:e0:05:5c:15:5a:2d:a4:c5:
ce:16:0b:9d:55:c3:fe:90:2c:75:cb:2d:24:f6:cf:
f9:65:98:29:ca:d6:11:7f:11:68:ff:4d:41:43:c1:
4b:90:a8:92:cb:4f:ae:44:29:db:5f:53:09:d8:86:
06:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9B:E2:31:DF:7E:67:F7:47:02:8B:1F:1E:71:2A:23:46:D5:FC:BB
X509v3 Authority Key Identifier:
keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:32:5a:ac:5a:b1:9a:cd:3b:11:e2:dd:85:1c:32:cd:fa:09:
5e:d1:c0:c1:17:11:27:9b:8d:14:6c:b2:19:dc:8d:41:51:60:
26:22:3f:30:44:ea:54:23:ed:a4:d9:1f:32:a9:a1:a9:b7:60:
b6:34:ad:6c:f8:c6:15:3f:63:59:19:00:ba:33:3f:68:32:c9:
1e:cb:75:59:35:24:1c:be:7a:09:c6:4d:33:6e:93:8b:ef:ae:
53:4e:74:4e:0a:0a:0e:4f:3f:4a:20:ef:c3:e8:04:93:28:f4:
bd:7b:e0:4a:49:41:4f:a5:16:41:aa:46:f4:ce:2f:b7:7d:c7:
bf:4a:21:e6:72:6f:b3:7a:8a:0b:1f:7f:95:38:48:cd:3f:eb:
11:59:f6:71:21:47:95:88:b9:35:60:d2:09:bf:c5:c3:25:7e:
fe:b1:cc:69:c9:d8:a1:3a:5c:bc:68:49:c6:d1:81:37:d6:f1:
33:0e:3e:68:e0:c5:78:f2:06:c0:9d:98:81:2a:ad:38:bb:b5:
0d:bf:95:14:a5:1b:36:61:57:bd:14:be:03:d5:32:d8:b7:fb:
5a:8c:ca:f9:b2:87:9a:4b:e3:18:25:cc:e7:8b:96:29:c3:3a:
e9:d8:13:48:30:c3:55:a8:c5:da:7d:f6:24:52:01:62:47:08:
e2:99:98:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:00 2026 by rpki-client