Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
File: NM3lphFF05kuzN7Ht_C4fVZr3co.mft (raw, json)
Hash identifier: cKeNFa8mr3nXiH3AxGQBUlfsS3HEaUOZrQ9DMxNIRt8=
Subject key identifier: 3F:0D:72:19:BC:58:83:66:FD:56:30:41:C0:5A:6A:95:0B:53:B6:22
Authority key identifier: 34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
Certificate issuer: /CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Certificate serial: 01A15A7956016B2F493E3BE01EA85C2777DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
Manifest number: 0348
Signing time: Tue 20 Oct 2026 18:01:03 +0000
Manifest this update: Tue 20 Oct 2026 18:01:03 +0000
Manifest next update: Wed 21 Oct 2026 18:01:03 +0000
Files and hashes: 1: 1-IJA-q45HspUpMubIpcnRXcTB8M.roa (hash: JXJRmj3ORBVNFKxWPy8ORXK6nbNNUCsakv/wzqIn0g0=)
2: NM3lphFF05kuzN7Ht_C4fVZr3co.crl (hash: efPK9BegrHb6OrkIbBneP0O96VrbVJRwuf7DKshBpzE=)
3: zbYhjs52NqgXZeFMN5zptwYaiMY.roa (hash: KsKrXGzHhE5GBB49wXeoqkTWzCeO3+7rNRAxePZu7qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:79:56:01:6b:2f:49:3e:3b:e0:1e:a8:5c:27:77:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Validity
Not Before: Oct 20 18:01:03 2026 GMT
Not After : Oct 21 18:01:03 2026 GMT
Subject: CN=3f0d7219bc588366fd563041c05a6a950b53b622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:5a:8a:18:57:0c:d3:f8:4c:bb:73:3e:a6:
95:1b:dd:b4:0a:d5:56:fc:39:3c:4e:0b:d5:d2:b9:
27:a6:c0:f8:2b:12:a1:df:e4:c0:67:18:8d:0c:ea:
c5:c2:25:bb:95:aa:45:84:18:ef:f9:d1:50:17:c7:
58:56:a1:4c:c7:39:7b:76:9e:6e:1b:05:ae:1a:a3:
51:d4:fd:4f:d6:ec:9d:b5:ea:ae:6c:76:6e:eb:86:
2e:42:90:9c:a3:46:9f:da:35:d6:63:2d:2b:d1:7e:
07:b0:5e:4c:fa:ca:13:16:5f:cb:64:9d:04:f8:34:
4a:c0:2a:56:96:f5:73:2b:b4:d6:3d:cd:bd:c4:b0:
9e:62:b1:f3:b1:4c:28:f8:f2:f6:37:cc:1f:70:58:
5c:29:47:ae:22:26:a8:43:a4:8b:c4:c7:0b:65:2d:
6a:1e:9d:d0:b5:6b:01:8b:d0:89:50:43:3a:19:dd:
66:9a:e6:23:a4:c1:18:94:32:19:b4:d2:3e:e3:38:
40:a3:f1:b4:3b:11:e0:c0:04:6b:0e:80:bd:59:88:
71:6a:8e:07:55:f7:19:ce:0a:d7:af:b4:74:99:e0:
60:b0:be:9e:b6:50:00:32:16:74:0d:0f:9a:84:f5:
56:22:cf:bd:3b:12:ed:0a:b7:0a:55:8f:dc:19:e3:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0D:72:19:BC:58:83:66:FD:56:30:41:C0:5A:6A:95:0B:53:B6:22
X509v3 Authority Key Identifier:
keyid:34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ed:d0:53:09:7c:f8:cd:4e:8f:2f:d8:e8:b1:93:b9:42:e3:
c7:ff:cd:83:22:fd:39:18:09:17:62:e1:7b:12:a2:25:b4:1f:
20:71:ce:5f:bd:12:54:56:94:c1:1c:25:21:83:6c:20:d6:ae:
9c:d8:0e:57:2c:3d:3d:47:be:f7:99:9e:4f:3b:89:3b:5f:30:
da:19:ba:6b:c2:b7:fa:e5:59:66:57:40:55:a8:64:2d:79:a2:
77:26:de:c1:4d:49:33:6b:f3:fa:f3:14:95:a2:9a:6e:ab:65:
d5:7f:59:43:40:f1:ca:bc:f2:ad:76:1a:b2:10:fd:ad:de:d4:
61:2b:a0:b6:12:d7:73:1e:e8:e4:29:da:d6:11:9e:d6:98:19:
1d:ee:da:b5:26:97:68:33:e4:4b:06:97:a7:b4:f1:d3:55:93:
2e:67:f4:8f:d7:ce:b0:39:2b:84:02:1b:2b:b7:0d:0f:39:0d:
8a:b2:ca:58:c3:45:89:c4:a6:12:e2:fa:04:d9:e2:d7:de:01:
c2:82:2e:fb:09:9e:49:69:8e:7d:46:a1:f7:8c:2b:2f:a3:de:
c3:2c:88:ec:3a:9c:a8:ba:58:ee:f5:86:fa:ea:f9:94:45:b9:
57:ae:e8:a3:1a:ff:f1:51:ff:4c:d0:42:e9:ce:93:2d:41:05:
82:17:9f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:47:40 2026 by rpki-client