Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a6cb86-96a3-4a39-91cb-7377b9b78972/1/NH4zV4Kfm0R69wtgshkvi2sY_94.mft
File: NH4zV4Kfm0R69wtgshkvi2sY_94.mft (raw, json)
Hash identifier: HNSF7rVMjIErDjOV+8PDI5+124Q0FZwMZZ2u1bjfZn4=
Subject key identifier: 90:7A:6F:76:34:D5:DD:36:1D:27:1B:D1:5B:F5:FA:27:09:0C:E1:13
Authority key identifier: 34:7E:33:57:82:9F:9B:44:7A:F7:0B:60:B2:19:2F:8B:6B:18:FF:DE
Certificate issuer: /CN=347e3357829f9b447af70b60b2192f8b6b18ffde
Certificate serial: 019D389BD9238C9D401FDDF82D8A2A1B6B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NH4zV4Kfm0R69wtgshkvi2sY_94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a6cb86-96a3-4a39-91cb-7377b9b78972/1/NH4zV4Kfm0R69wtgshkvi2sY_94.mft
Manifest number: 0A
Signing time: Sun 29 Mar 2026 08:00:30 +0000
Manifest this update: Sun 29 Mar 2026 08:00:30 +0000
Manifest next update: Mon 30 Mar 2026 08:00:30 +0000
Files and hashes: 1: NH4zV4Kfm0R69wtgshkvi2sY_94.crl (hash: jR7TvYJ9A4dmEVIKOJspI7EXOvo3oSEKLiXvl7kdwSw=)
2: WPIzOxqwaHsyTVNqPtr_Bne7NDY.roa (hash: o8qawauUjrQA0Yw/eow656zocqEhFlEGKxiQ0qSxgHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/a6cb86-96a3-4a39-91cb-7377b9b78972/1/NH4zV4Kfm0R69wtgshkvi2sY_94.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/a6cb86-96a3-4a39-91cb-7377b9b78972/1/NH4zV4Kfm0R69wtgshkvi2sY_94.mft
rsync://rpki.ripe.net/repository/DEFAULT/NH4zV4Kfm0R69wtgshkvi2sY_94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d9:23:8c:9d:40:1f:dd:f8:2d:8a:2a:1b:6b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347e3357829f9b447af70b60b2192f8b6b18ffde
Validity
Not Before: Mar 29 08:00:30 2026 GMT
Not After : Mar 30 08:00:30 2026 GMT
Subject: CN=907a6f7634d5dd361d271bd15bf5fa27090ce113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:aa:0e:dc:3b:00:77:dc:29:94:9d:01:24:
4c:43:7b:62:ee:99:d8:c4:5b:05:b1:c9:15:76:9a:
b3:2e:82:4b:37:47:f3:62:81:bd:44:b7:18:ad:5d:
c0:9e:dd:57:de:96:cb:10:76:67:77:b4:ba:c5:de:
65:9e:23:26:3f:23:e1:21:57:ec:45:da:a4:c7:24:
48:84:d9:94:83:45:85:d8:c2:ca:3c:9a:c3:3d:39:
40:a5:74:d9:5b:a2:c4:88:3d:cb:0f:91:cb:88:de:
af:11:42:85:b7:fe:72:63:93:bf:84:a5:2b:a2:45:
4f:48:07:a0:08:dc:33:db:90:07:35:ce:59:19:40:
19:dc:03:3d:62:9c:98:a6:e9:60:e6:1b:c7:5b:9a:
70:2e:41:d0:03:09:4d:aa:67:20:43:07:76:36:27:
54:4c:58:c1:1b:e9:01:8d:60:da:12:33:25:03:28:
f5:bd:2d:e2:bc:e8:7f:fb:da:2d:eb:15:fe:b9:20:
a0:4f:61:c6:be:d8:a0:ac:e2:ce:5a:57:9f:38:a6:
84:61:9b:75:a4:c9:dd:fd:57:bd:37:8b:eb:fb:b8:
41:66:13:23:59:68:fd:61:93:8d:4c:e3:99:64:8f:
b3:8c:ef:25:45:b2:df:55:81:23:4c:76:9c:5a:54:
4f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7A:6F:76:34:D5:DD:36:1D:27:1B:D1:5B:F5:FA:27:09:0C:E1:13
X509v3 Authority Key Identifier:
keyid:34:7E:33:57:82:9F:9B:44:7A:F7:0B:60:B2:19:2F:8B:6B:18:FF:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NH4zV4Kfm0R69wtgshkvi2sY_94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a6cb86-96a3-4a39-91cb-7377b9b78972/1/NH4zV4Kfm0R69wtgshkvi2sY_94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a6cb86-96a3-4a39-91cb-7377b9b78972/1/NH4zV4Kfm0R69wtgshkvi2sY_94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:16:68:56:f8:2e:c4:da:1f:07:60:d2:e7:3c:d7:5c:56:3a:
82:57:40:74:83:a6:3c:9e:c3:ea:3b:8f:a6:86:90:20:4d:2a:
b7:88:34:67:7c:2e:58:fa:28:62:63:de:a0:7d:ae:77:c2:c6:
25:0d:1e:19:d2:db:72:c7:2a:5f:36:55:ec:db:ca:d1:7b:7f:
2d:95:c5:74:f7:62:73:2e:ae:db:f2:d9:0f:d9:9c:31:74:d2:
70:dc:c1:f1:25:40:aa:6d:88:44:75:18:6c:73:76:fc:ec:b0:
31:d9:1b:0f:d4:09:10:a7:8b:ea:18:10:f2:51:e9:5c:95:2a:
e7:40:4c:9c:a6:9b:3d:8e:94:7f:f4:46:c4:5f:e8:1e:c2:2c:
f7:e8:99:8c:a2:7b:ee:be:6a:3f:8a:df:bc:be:1e:18:57:99:
5f:88:a8:4b:4c:9c:12:e5:c5:4e:27:4a:3c:de:6f:d2:51:32:
ce:86:7e:e3:be:65:d1:56:bd:b8:27:95:03:00:e3:17:8b:a2:
b3:a4:ae:b3:ba:95:65:53:59:2b:b3:67:40:c4:2f:ff:0e:70:
fe:c9:b5:10:1d:04:ad:49:3d:df:a7:db:2a:d1:54:86:6e:ce:
b8:f5:0d:fd:d0:de:3d:3b:10:18:e3:fc:34:7f:2f:ef:d0:42:
5d:92:a4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:05 2026 by rpki-client