Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: 09NrlL/PhvL1L4f5FQ7a/8uJG5aog5im+noCyePWntE=
Subject key identifier: B9:D9:1C:21:A0:0F:94:8F:04:EF:6A:91:97:29:50:B7:B1:1A:52:E9
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 019CE4EC4DA03AC36F9C157A7FE9C51E64DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 1868
Signing time: Fri 13 Mar 2026 02:00:17 +0000
Manifest this update: Fri 13 Mar 2026 02:00:17 +0000
Manifest next update: Sat 14 Mar 2026 02:00:17 +0000
Files and hashes: 1: 7KmiHeTQXRSzn1pRizVCv_INZ1Y.roa (hash: ovjEW9N/bVELgNzaDJYrGYeSdyjGcKIXWsIKwlhcxp8=)
2: 9oyInYSuVnIf7zTVtB6sDcf1XhI.roa (hash: l1RSHVmCnQUWX+RzMHEaP0MGuYdTYp413ef1exVSOrk=)
3: AWHMjmic5cEKV8bVpt2xGeWTmJw.roa (hash: iFYqoLqjFem2aNEBBJqDmHNGhtphtI842p4krYOCFlM=)
4: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (hash: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc=)
5: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (hash: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk=)
6: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: m3RNwf/zWBYF1OQplMo4jM9kme98tBIbIM65iiW4pV0=)
7: opbJdENGQKlgxiw3UzXsb5urRe8.roa (hash: 6DXHz5IMpgCFLQr3dZW4IiHNXv7NbkZD9862/Rjdnts=)
8: qUTKfMDduS5G83IwddW0Srvow3k.roa (hash: cOBAb4cGXrEFXoWSmcqXtalPKxlVlDLrCL2/MXUlMlg=)
9: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (hash: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:4d:a0:3a:c3:6f:9c:15:7a:7f:e9:c5:1e:64:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Mar 13 02:00:17 2026 GMT
Not After : Mar 14 02:00:17 2026 GMT
Subject: CN=b9d91c21a00f948f04ef6a91972950b7b11a52e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9a:ed:ac:d6:dc:c5:d9:d9:05:a1:51:e9:de:
7d:ea:0c:75:39:6f:b2:a5:62:f3:a7:68:91:2d:ab:
8d:8c:f6:e5:a1:0e:24:87:25:d0:19:cf:02:ff:34:
88:f3:06:71:b6:9f:57:e3:2a:64:7b:48:fd:a8:ba:
50:a2:e9:bc:d8:9a:ab:86:6e:b1:da:97:0e:1d:1d:
fa:a1:25:dc:28:d5:7d:61:c1:bb:5b:05:42:66:58:
2c:60:47:53:e0:39:ec:8c:eb:90:1c:8d:73:22:01:
31:2a:f6:2d:a0:e3:f5:06:25:25:32:5c:32:c8:11:
07:79:aa:d9:7a:7a:0a:fc:4d:2c:45:a7:73:34:aa:
fa:57:fb:b6:65:9f:0c:fe:7c:e9:f2:fd:3e:0b:63:
17:43:54:dd:d2:64:4e:9a:d7:51:dc:8d:23:c2:92:
9d:e5:75:86:4a:e7:a3:13:46:64:75:bc:79:31:3b:
7f:eb:d7:50:1b:13:a8:28:f3:4c:2a:21:8b:d6:a5:
b1:6e:b0:15:19:7d:4e:50:b5:37:5c:46:9f:f8:79:
61:be:59:29:40:5a:b6:b4:12:87:2f:8b:35:4c:dd:
0b:c7:1d:1b:4c:9f:00:00:92:b8:25:51:6d:06:28:
18:01:78:cf:a6:16:a1:b5:f1:05:82:0a:b1:e1:46:
b8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D9:1C:21:A0:0F:94:8F:04:EF:6A:91:97:29:50:B7:B1:1A:52:E9
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:90:2b:8e:c1:2e:33:9b:52:34:ca:59:ac:7b:9a:fb:df:32:
a6:24:ca:4b:b5:13:f4:3e:a4:85:dd:0e:07:bf:ad:e2:66:a5:
b2:2d:f6:ed:a8:0b:2c:89:87:55:0d:0b:75:71:99:b3:9b:de:
c8:fd:9b:f0:2f:99:ba:9a:84:1b:48:5c:a7:ed:b2:50:59:00:
ed:5b:69:bd:63:3d:1f:77:2c:a1:e9:89:0b:f2:72:3c:6b:df:
55:7a:ff:f2:a6:44:78:3f:01:fe:c0:76:b0:c7:0e:22:ea:ad:
e4:ba:f6:92:a9:92:70:b4:82:13:8c:84:c9:8c:5d:c9:6f:a3:
36:e5:ab:fb:84:2b:09:8f:29:11:db:7f:7c:48:24:0e:ef:c3:
00:6f:75:32:c0:5a:76:49:c5:4e:2b:5f:85:87:d6:a3:4a:3a:
58:ab:72:74:ac:ac:f4:fa:06:97:62:93:c0:fe:6e:0c:45:4b:
63:72:ef:d5:0d:1e:df:13:bd:b9:6f:30:42:e5:67:56:8e:34:
fa:46:9b:46:37:44:df:85:03:e7:44:f5:6c:11:db:55:3f:8c:
88:0a:77:7c:ad:f1:83:52:25:7b:12:7a:ed:3a:66:17:f0:14:
1b:d0:17:66:62:a4:66:c1:79:1e:fe:aa:3d:2f:21:c3:86:39:
21:22:87:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:30:48 2026 by rpki-client