Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
File: NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft (raw, json)
Hash identifier: JjvYJOLF3fOPtefLwnoRQN5vWm5nfLTbqhWb7vl6VgA=
Subject key identifier: 43:04:E2:74:05:A8:3A:72:6D:34:47:1E:56:78:86:35:D8:32:E4:44
Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
Certificate issuer: /CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Certificate serial: 019D37F7915137364EA1BC17085353C0B3DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
Manifest number: 06EA
Signing time: Sun 29 Mar 2026 05:01:04 +0000
Manifest this update: Sun 29 Mar 2026 05:01:04 +0000
Manifest next update: Mon 30 Mar 2026 05:01:04 +0000
Files and hashes: 1: NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl (hash: HRp8yDKpjozHc9SJI7W2mXHZO5220k79J7ij6mGwH04=)
2: hWIPowhULMETPFMJ5-_H_ZNBRis.roa (hash: BNHF5BsMBRRalDPKnOb0xVzO7bSBgF7JDrPzIyr5BeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:91:51:37:36:4e:a1:bc:17:08:53:53:c0:b3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Validity
Not Before: Mar 29 05:01:04 2026 GMT
Not After : Mar 30 05:01:04 2026 GMT
Subject: CN=4304e27405a83a726d34471e56788635d832e444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:a3:cb:c9:95:4b:2a:4d:d2:0d:b9:54:1f:
75:07:bb:ba:71:e7:53:19:a3:84:94:22:4c:c0:1a:
42:22:c9:f1:5d:22:5e:6f:c4:e8:00:94:99:5e:07:
3e:2b:8f:47:65:b2:ac:74:ed:3c:de:3f:62:15:b6:
62:62:9f:c6:6a:68:80:17:02:5f:71:f8:c9:00:6c:
eb:02:d3:b9:46:f5:18:1f:86:8d:46:ab:83:ce:0e:
8e:62:e8:fa:c4:99:94:b4:a9:4e:58:1f:1f:4c:65:
82:04:30:59:bd:1b:45:a3:b9:03:1d:db:ed:32:15:
ba:77:b4:7c:35:4d:84:44:85:93:09:4d:7b:c1:2b:
52:83:1b:45:ec:0a:67:3c:46:ab:ba:7c:98:15:6d:
de:26:96:8f:c8:6e:1e:cc:b7:8c:32:44:73:93:c5:
0e:20:1d:76:bb:34:c1:62:7e:1c:e2:16:83:9b:a7:
3d:7d:5e:3a:b9:3b:e3:be:0c:56:88:94:8d:63:90:
4f:95:3b:08:86:26:e1:60:0a:04:57:ee:79:e7:39:
7b:ff:be:dd:b7:be:0c:2e:66:56:a1:10:8b:14:6c:
36:e6:f0:71:aa:88:aa:7c:90:88:e0:96:88:1a:c4:
7e:d1:c1:f8:7d:98:21:58:72:01:60:c2:b2:52:94:
10:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:04:E2:74:05:A8:3A:72:6D:34:47:1E:56:78:86:35:D8:32:E4:44
X509v3 Authority Key Identifier:
keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8d:0c:09:e2:57:07:b4:81:79:43:d7:8a:c9:70:f5:e1:fa:
2c:57:60:41:25:8b:27:1e:dd:07:62:63:05:89:c6:86:06:e7:
2d:4d:a8:34:92:11:c9:b0:7e:68:20:61:cd:49:3f:ad:c6:30:
2a:1a:89:30:b1:1e:00:f5:0e:06:44:3a:6e:25:b0:d7:bb:96:
05:fd:e5:f8:99:59:58:70:a0:f3:e8:11:6f:83:4e:03:2f:05:
99:8b:c4:fa:5c:5d:43:9b:9f:62:93:c8:c0:1f:d7:77:7a:f3:
1d:f3:3c:ac:79:f3:67:88:5a:5c:f2:5a:c1:25:c1:70:29:c4:
34:c8:08:5d:ae:f6:ba:13:a8:33:72:ad:76:d4:3a:5f:0e:ed:
78:15:85:b6:56:51:08:71:1a:ec:42:58:19:b5:e3:42:7c:fb:
ef:9a:1f:40:22:fe:b1:44:4c:2b:18:ab:95:82:bf:ca:81:54:
e5:10:48:ff:55:14:97:0d:21:7f:28:29:ee:63:b6:18:5c:9f:
17:85:46:06:94:66:37:f1:fd:a0:ea:90:5a:8e:74:81:8f:13:
cb:f6:ae:dc:d6:aa:55:13:9c:d0:3b:d5:93:81:c6:65:32:7c:
d2:20:3c:59:f9:b0:82:5f:17:ec:54:d1:03:2c:2e:1c:6b:a2:
8b:7b:0a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:49 2026 by rpki-client