Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
File: NM3lphFF05kuzN7Ht_C4fVZr3co.mft (raw, json)
Hash identifier: vhNIC2Hv0/BN3ftGYfH/dri2g44E+qWUOGecWa4kUkU=
Subject key identifier: 70:DF:39:91:21:20:F6:EC:00:D2:FD:E6:BC:47:D2:53:52:C9:2C:1B
Authority key identifier: 34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
Certificate issuer: /CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Certificate serial: 019E314E81933558D3EA7D1C1CD90D1569DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
Manifest number: 01A5
Signing time: Sat 16 May 2026 15:01:28 +0000
Manifest this update: Sat 16 May 2026 15:01:28 +0000
Manifest next update: Sun 17 May 2026 15:01:28 +0000
Files and hashes: 1: 1-IJA-q45HspUpMubIpcnRXcTB8M.roa (hash: JXJRmj3ORBVNFKxWPy8ORXK6nbNNUCsakv/wzqIn0g0=)
2: NM3lphFF05kuzN7Ht_C4fVZr3co.crl (hash: 93olI8eJnREk2Y9fZRYb4rmFMgGhYMrTMQSbR6qKQ44=)
3: zbYhjs52NqgXZeFMN5zptwYaiMY.roa (hash: KsKrXGzHhE5GBB49wXeoqkTWzCeO3+7rNRAxePZu7qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:81:93:35:58:d3:ea:7d:1c:1c:d9:0d:15:69:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Validity
Not Before: May 16 15:01:28 2026 GMT
Not After : May 17 15:01:28 2026 GMT
Subject: CN=70df39912120f6ec00d2fde6bc47d25352c92c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:69:33:73:18:23:62:e6:55:42:2f:c1:74:8b:
26:95:50:eb:6c:1e:f8:0b:8d:59:f1:8e:01:19:38:
d3:f4:c6:28:d3:84:9b:33:61:1f:de:f5:03:4c:42:
2a:ca:9d:02:45:da:a7:75:fa:ea:85:51:9c:db:22:
18:56:0f:4d:3a:cc:51:00:bd:94:fa:ca:02:9c:4f:
6e:de:8e:09:27:1b:00:40:64:9d:40:bf:94:8d:59:
ad:75:53:47:4c:6c:2e:1c:50:5a:4f:e8:f3:55:79:
15:05:ba:72:fc:8d:c3:91:ee:1c:d6:f2:c8:28:f3:
e3:14:30:de:72:87:3d:4f:57:0d:53:64:24:0c:f3:
eb:ee:da:2a:6f:59:a3:78:c7:47:2c:f5:55:77:76:
d7:4b:73:8a:3f:88:3c:f3:9a:1e:94:f9:a0:5e:48:
2a:09:4d:d0:c1:16:fa:40:dc:ff:57:a7:ad:2e:58:
ba:2e:3c:4f:28:d9:75:8c:10:fa:44:f6:65:de:55:
fe:ff:95:d9:aa:d7:33:ed:e5:d8:54:b4:6c:dd:be:
3b:50:55:c7:84:70:d5:45:c7:50:a7:78:85:4f:88:
6b:83:86:2a:41:66:04:15:cd:09:c9:d6:f3:53:0e:
aa:30:03:d0:b6:a2:d7:fa:d3:5d:78:03:bd:17:e1:
f5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DF:39:91:21:20:F6:EC:00:D2:FD:E6:BC:47:D2:53:52:C9:2C:1B
X509v3 Authority Key Identifier:
keyid:34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:27:f0:4c:1f:f0:e2:91:b8:cc:da:d8:55:cb:c6:99:71:4f:
83:dd:04:16:e7:a4:ff:c9:24:ef:5a:fb:9b:62:3b:6d:67:88:
61:d9:45:66:6e:6e:5f:d4:5d:93:1e:a7:0d:1f:bc:82:80:0e:
e5:98:19:fe:11:99:ab:62:d0:a9:83:d5:3f:e8:73:84:23:60:
6a:db:7d:0a:7b:9f:de:ee:53:ba:e2:11:03:42:27:68:2d:dc:
03:02:10:a9:3c:a8:16:ef:f1:7e:e7:71:c0:30:af:36:2e:f2:
8c:22:0e:fc:1c:e9:38:53:13:48:c0:ab:6e:a4:23:81:90:57:
85:fa:c1:34:eb:3d:8b:bc:b9:88:aa:bf:ce:d7:b9:31:ff:f0:
d0:54:6c:38:dc:83:2b:72:40:3c:c5:da:cb:12:38:d8:bb:e8:
e5:fd:b9:98:8a:52:d7:b6:38:bd:fa:56:12:38:43:1f:c8:b7:
14:01:fb:8c:ac:02:c9:c7:4d:88:20:41:0a:ea:3f:fd:b0:46:
0d:2b:97:f3:00:8f:bb:88:22:a2:be:49:05:e2:56:25:6c:bf:
be:06:53:52:33:89:64:3a:61:6f:a5:df:27:d5:07:a6:1e:d2:
16:a6:2c:48:7e:48:0f:84:9f:c4:b6:b2:03:f0:c3:8a:0d:57:
56:32:21:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xToGTNVjT6n0cHNkNFWncMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0Y2RlNWE2MTE0NWQzOTkyZWNjZGVjN2I3ZjBiODdkNTY2
YmRkY2EwHhcNMjYwNTE2MTUwMTI4WhcNMjYwNTE3MTUwMTI4WjAzMTEwLwYDVQQD
Eyg3MGRmMzk5MTIxMjBmNmVjMDBkMmZkZTZiYzQ3ZDI1MzUyYzkyYzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmkzcxgjYuZVQi/BdIsmlVDrbB74
C41Z8Y4BGTjT9MYo04SbM2Ef3vUDTEIqyp0CRdqndfrqhVGc2yIYVg9NOsxRAL2U
+soCnE9u3o4JJxsAQGSdQL+UjVmtdVNHTGwuHFBaT+jzVXkVBbpy/I3Dke4c1vLI
KPPjFDDecoc9T1cNU2QkDPPr7toqb1mjeMdHLPVVd3bXS3OKP4g885oelPmgXkgq
CU3QwRb6QNz/V6etLli6LjxPKNl1jBD6RPZl3lX+/5XZqtcz7eXYVLRs3b47UFXH
hHDVRcdQp3iFT4hrg4YqQWYEFc0JydbzUw6qMAPQtqLX+tNdeAO9F+H14QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDfOZEhIPbsANL95rxH0lNSySwbMB8GA1UdIwQY
MBaAFDTN5aYRRdOZLszex7fwuH1Wa93KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iNDJjNTMtZTA1YS00ZDc3LTgyZWUt
NWVmMzYyMjZhNzY3LzEvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iNDJjNTMtZTA1YS00ZDc3LTgyZWUtNWVmMzYyMjZhNzY3
LzEvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyfwTB/w
4pG4zNrYVcvGmXFPg90EFuek/8kk71r7m2I7bWeIYdlFZm5uX9Rdkx6nDR+8goAO
5ZgZ/hGZq2LQqYPVP+hzhCNgatt9Cnuf3u5TuuIRA0InaC3cAwIQqTyoFu/xfudx
wDCvNi7yjCIO/BzpOFMTSMCrbqQjgZBXhfrBNOs9i7y5iKq/zte5Mf/w0FRsONyD
K3JAPMXayxI42Lvo5f25mIpS17Y4vfpWEjhDH8i3FAH7jKwCycdNiCBBCuo//bBG
DSuX8wCPu4gior5JBeJWJWy/vgZTUjOJZDphb6XfJ9UHph7SFqYsSH5ID4SfxLay
A/DDig1XVjIhUw==
-----END CERTIFICATE-----
Generated at Sat May 16 22:40:17 2026 by rpki-client