Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
File: NXMLuLJiPn9lphY2BNHIX5EGKI8.mft (raw, json)
Hash identifier: plVRXeJYda2txihgRbkcO+Kt5Hrnm1+vp69cPqp+YNk=
Subject key identifier: EB:AC:67:88:5C:D7:DF:06:EA:15:26:DF:BF:85:47:3D:E7:E8:58:B6
Authority key identifier: 35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
Certificate issuer: /CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Certificate serial: 019D378935468E5DE34E32B74E47D9E6F3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 03:00:32 +0000
Manifest this update: Sun 29 Mar 2026 03:00:32 +0000
Manifest next update: Mon 30 Mar 2026 03:00:32 +0000
Files and hashes: 1: 1QEtaADIkxg0J4jUBwcM-NwBxwE.roa (hash: ZLWa2BfquBdnPKlK4MjamELUpCL/T5o3OhU6GIUiAbA=)
2: NXMLuLJiPn9lphY2BNHIX5EGKI8.crl (hash: fjqUJ5G7r4ElgcP2w9llbyE96vYRY+Oal7d1wkYbCA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:35:46:8e:5d:e3:4e:32:b7:4e:47:d9:e6:f3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Validity
Not Before: Mar 29 03:00:32 2026 GMT
Not After : Mar 30 03:00:32 2026 GMT
Subject: CN=ebac67885cd7df06ea1526dfbf85473de7e858b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:36:84:af:4f:18:7f:ea:51:07:88:a9:39:7f:
94:e2:69:b2:0c:19:f1:4d:5f:c0:8c:ba:82:33:2c:
d0:b2:06:8f:c5:47:dc:e2:cb:01:b4:a3:8f:66:72:
e6:a9:5a:28:78:4f:0f:5f:c1:bb:65:27:ce:85:08:
35:02:00:08:01:27:98:48:eb:be:ef:93:1c:fc:7c:
b3:70:c0:93:07:22:6f:07:d7:ac:0b:62:22:f6:0a:
56:d9:10:57:6b:de:5d:39:38:0f:6f:bc:93:0e:f0:
49:46:58:c0:48:51:86:68:56:7d:0d:4e:a9:79:c6:
65:7c:d6:1d:8f:89:87:91:14:aa:d6:f2:3c:79:46:
89:c6:ef:4d:93:5c:ca:f8:97:35:f9:9d:66:28:7c:
26:38:68:76:55:34:a3:4e:9c:0d:c5:85:9b:3f:a6:
86:d3:cc:e7:0e:a5:e0:70:a1:cf:de:e7:ca:91:8e:
2a:05:3f:76:5a:5f:2d:f0:5d:be:b9:4c:b7:c2:32:
e6:4e:10:2a:bb:2c:53:30:d4:cf:5d:ef:b7:7f:60:
26:39:b7:48:87:e0:2d:da:34:aa:68:43:05:2f:02:
b5:33:a4:0b:e1:e4:c0:b9:a9:e8:f8:dc:d2:4b:e8:
95:54:49:74:07:5f:83:c2:40:1d:a7:5d:ef:3e:e9:
45:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AC:67:88:5C:D7:DF:06:EA:15:26:DF:BF:85:47:3D:E7:E8:58:B6
X509v3 Authority Key Identifier:
keyid:35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:38:3e:47:80:7f:15:f2:ef:89:67:a0:61:58:1f:24:f3:87:
ef:87:3d:b1:5c:8a:e2:3c:e4:c9:93:b5:19:c4:dc:4a:15:70:
cf:2e:d9:e2:47:23:93:d7:50:15:a3:e4:93:2a:fc:7c:b2:2d:
2f:0c:a4:41:71:09:c2:ed:bb:42:69:9d:cd:33:d9:7a:3f:cd:
b0:04:b1:30:47:f1:51:97:da:49:52:59:cb:0a:20:5d:06:e2:
45:1b:0c:49:56:89:de:59:cb:ee:e6:1d:ea:6b:aa:88:ba:31:
64:bc:9b:2a:15:31:fa:ed:bb:85:57:10:21:22:f2:ba:bc:e3:
50:73:9c:6d:71:75:4d:a5:2b:e3:86:97:86:e2:7e:83:61:ad:
b4:ee:b2:83:f9:a4:45:33:6b:ac:e7:29:a6:dd:ec:f4:8d:eb:
5c:82:6e:07:fb:e0:66:10:b4:dc:88:37:a7:31:01:a0:4d:0d:
70:4b:80:d5:85:ae:ee:c2:a0:cd:8d:8e:28:7b:66:40:ce:5e:
f7:03:fc:db:c6:b3:9c:b2:4e:41:43:03:55:5f:8f:e9:6e:7f:
74:8a:ae:40:79:76:a5:69:ea:fa:05:36:94:bc:ac:73:b4:06:
20:d4:f2:1d:20:83:d7:62:d1:4a:f8:b4:49:00:7f:81:a1:9b:
d7:3c:a8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:15 2026 by rpki-client