Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
File: NM3lphFF05kuzN7Ht_C4fVZr3co.mft (raw, json)
Hash identifier: j837ZLFKzcHovI5Uvsl9OmI33kn8EFfDb6jiaf5IwnY=
Subject key identifier: 66:5E:A5:00:CB:88:FC:52:19:BA:8C:0A:F2:FA:81:1D:9C:5F:C8:56
Authority key identifier: 34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
Certificate issuer: /CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Certificate serial: 019D382E48D4C5FDE2B721C6EDF9B8D9CBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
Manifest number: 0124
Signing time: Sun 29 Mar 2026 06:00:50 +0000
Manifest this update: Sun 29 Mar 2026 06:00:50 +0000
Manifest next update: Mon 30 Mar 2026 06:00:50 +0000
Files and hashes: 1: 1-IJA-q45HspUpMubIpcnRXcTB8M.roa (hash: JXJRmj3ORBVNFKxWPy8ORXK6nbNNUCsakv/wzqIn0g0=)
2: NM3lphFF05kuzN7Ht_C4fVZr3co.crl (hash: /kxxNdLbgfRTMDxK2aHbo6RYsTL3puopd+P7ZJ3uu24=)
3: zbYhjs52NqgXZeFMN5zptwYaiMY.roa (hash: KsKrXGzHhE5GBB49wXeoqkTWzCeO3+7rNRAxePZu7qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:48:d4:c5:fd:e2:b7:21:c6:ed:f9:b8:d9:cb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Validity
Not Before: Mar 29 06:00:50 2026 GMT
Not After : Mar 30 06:00:50 2026 GMT
Subject: CN=665ea500cb88fc5219ba8c0af2fa811d9c5fc856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9e:5a:2d:d5:b3:eb:5c:b1:af:69:8f:a3:7a:
35:6e:84:88:6d:6b:f2:9a:1f:19:0d:f7:fc:59:31:
55:97:0c:a9:24:62:7d:1b:b0:3b:c0:bf:22:72:d7:
88:af:ff:b5:6e:09:52:06:fd:f5:f7:d2:a8:d6:ce:
3c:98:89:97:39:9e:27:c3:29:dd:1d:88:12:2c:ec:
1a:01:b4:2a:5f:9a:65:26:37:ac:c6:6f:aa:93:00:
ca:ed:60:98:59:f1:9e:d9:07:80:d5:8a:1c:5f:d1:
4b:28:cd:79:17:e3:94:0d:cc:29:60:71:a0:cd:f3:
6b:e7:04:05:ff:97:c4:f1:d4:72:5e:2c:bb:ac:f1:
1d:cb:bf:ed:64:60:73:75:87:9b:0a:83:de:ae:04:
c2:44:52:4b:6d:45:34:ef:b4:c7:42:42:39:0d:72:
9c:80:e8:d5:32:ca:64:c0:50:88:89:39:d1:50:71:
34:52:99:81:0e:4b:de:76:b5:ec:b0:c5:ad:2b:46:
1b:e7:67:01:83:f4:e4:8f:59:82:00:23:87:e5:5e:
78:63:38:a2:c8:d3:57:a7:a5:b2:0d:e1:f9:99:e3:
e7:eb:6c:7c:33:c9:aa:e3:4c:d1:0b:44:71:93:26:
d9:7b:f5:bd:7f:cc:30:e2:82:44:5d:97:84:13:18:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5E:A5:00:CB:88:FC:52:19:BA:8C:0A:F2:FA:81:1D:9C:5F:C8:56
X509v3 Authority Key Identifier:
keyid:34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8d:e3:d9:63:a1:04:0a:39:eb:87:0f:b1:38:ba:09:1b:5c:
b7:22:6c:3d:4f:af:19:b1:88:1d:75:3f:8f:38:d5:8e:fd:a0:
14:4c:b2:6d:d5:26:4d:12:d5:20:7f:77:4d:b5:8b:d9:43:a3:
3d:aa:13:d6:f0:4c:75:1f:b8:b3:30:81:6e:c6:90:c9:4f:54:
3c:91:96:26:8b:47:fe:04:ea:f2:41:ce:cd:6b:f3:15:33:6e:
80:e6:6a:b3:3b:77:13:ca:8b:23:a0:cf:a4:c4:95:8d:74:28:
96:94:dd:d6:dc:d3:a2:41:c9:08:c9:a9:e3:83:d3:dc:f2:7b:
ab:69:0c:27:a3:ff:a9:d8:eb:0b:06:5a:76:14:61:2f:cb:1c:
d5:3c:eb:a7:64:cc:e7:04:9a:10:ea:54:a3:39:3c:19:b5:bd:
f9:27:07:2f:3b:32:83:49:34:7c:5b:a4:9b:08:41:ba:40:2d:
c1:bd:04:1f:8a:82:55:ba:7d:15:d5:da:ea:8e:5a:ff:97:b6:
0d:30:c4:76:ae:4e:15:f5:dc:83:e0:8f:23:3e:fa:09:8a:6f:
cc:f0:d4:07:92:d1:b1:b4:55:ed:a2:f3:82:9c:44:e4:47:6b:
6f:cd:f1:30:4c:c7:98:ce:5e:c0:60:32:85:7c:30:35:56:f5:
79:85:c6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:53 2026 by rpki-client