Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
File: NM3lphFF05kuzN7Ht_C4fVZr3co.mft (raw, json)
Hash identifier: e+CJU0tp9RrUw/nsyIBxKPUqBKI5iq9+UkDz4NSuQIM=
Subject key identifier: 7D:34:14:6C:5E:09:7F:8E:60:23:F8:51:EF:4D:A1:80:1D:A8:B7:A2
Authority key identifier: 34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
Certificate issuer: /CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Certificate serial: 01A1588B94EF01EFC1F4D877B14F0D0A7846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
Manifest number: 0347
Signing time: Tue 20 Oct 2026 09:01:44 +0000
Manifest this update: Tue 20 Oct 2026 09:01:44 +0000
Manifest next update: Wed 21 Oct 2026 09:01:44 +0000
Files and hashes: 1: 1-IJA-q45HspUpMubIpcnRXcTB8M.roa (hash: JXJRmj3ORBVNFKxWPy8ORXK6nbNNUCsakv/wzqIn0g0=)
2: NM3lphFF05kuzN7Ht_C4fVZr3co.crl (hash: 0GJcfuAZdBOkW9GQvplF7aFjwjFbJtFCpPFIlVQIzSY=)
3: zbYhjs52NqgXZeFMN5zptwYaiMY.roa (hash: KsKrXGzHhE5GBB49wXeoqkTWzCeO3+7rNRAxePZu7qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:8b:94:ef:01:ef:c1:f4:d8:77:b1:4f:0d:0a:78:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cde5a61145d3992eccdec7b7f0b87d566bddca
Validity
Not Before: Oct 20 09:01:44 2026 GMT
Not After : Oct 21 09:01:44 2026 GMT
Subject: CN=7d34146c5e097f8e6023f851ef4da1801da8b7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:89:23:17:ee:43:16:20:58:c2:eb:8d:a1:
eb:2f:2f:a9:d0:27:71:fa:f7:a8:e8:ee:c5:33:ad:
a9:84:1f:46:e6:43:a1:af:f0:3e:f3:82:8a:97:ad:
f6:90:68:c8:2b:7b:57:cf:a9:9b:62:5a:8a:a3:5c:
88:8d:a5:7a:71:f7:73:b5:85:7a:8b:4c:f1:c0:9f:
1f:7e:1c:2a:4d:50:4f:3d:df:b7:4b:f8:23:60:76:
9b:3b:8e:33:8b:e8:85:31:b4:49:88:0b:54:c1:63:
95:e5:16:8e:21:03:6e:1a:a7:a9:01:a9:fc:d1:3d:
c8:b3:4b:7d:c2:a0:fc:07:6c:b4:fd:fe:19:e5:8e:
c5:ef:c6:1d:7a:cb:79:bb:c6:69:2c:09:99:73:37:
d4:01:fd:40:ff:b5:e5:b5:24:a1:5b:e6:b7:0f:a7:
2a:63:e4:6b:6e:33:9f:10:14:bc:86:11:0b:95:76:
5c:d6:db:59:37:6a:72:c2:a5:c2:93:99:08:4b:5e:
4a:5f:d9:6e:a6:4a:7f:8d:c1:09:10:73:88:3c:d6:
e9:9a:63:d3:f8:68:cb:0b:30:ce:a9:e3:50:76:8b:
f8:af:9f:64:0d:fe:9a:b3:b6:92:b3:0f:d9:7a:32:
e9:29:d9:33:73:b7:19:1f:56:62:98:2d:7f:13:1d:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:34:14:6C:5E:09:7F:8E:60:23:F8:51:EF:4D:A1:80:1D:A8:B7:A2
X509v3 Authority Key Identifier:
keyid:34:CD:E5:A6:11:45:D3:99:2E:CC:DE:C7:B7:F0:B8:7D:56:6B:DD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM3lphFF05kuzN7Ht_C4fVZr3co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b42c53-e05a-4d77-82ee-5ef36226a767/1/NM3lphFF05kuzN7Ht_C4fVZr3co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:df:1b:f4:f5:71:de:05:18:a5:fd:4f:0e:60:e7:8f:93:02:
60:d1:7d:14:7d:90:3a:75:d5:0c:9a:f5:8c:f2:8c:8f:d7:ce:
bf:8f:9f:c4:c2:e3:3f:24:d4:a3:62:8e:fd:98:9b:f6:d9:aa:
58:db:3d:5b:e6:b8:e1:6b:05:ce:07:7b:06:a4:d8:a4:5c:7f:
f6:90:ed:16:92:12:34:44:67:ad:69:3e:2f:9b:32:d7:79:7b:
ac:5e:83:ef:1e:20:85:d2:1b:8d:ee:ae:42:2f:56:df:de:1e:
0d:a2:54:b1:53:7f:52:64:ed:d7:81:84:8e:ef:5d:d0:c0:00:
c9:35:0d:b7:4c:9c:3b:af:5f:99:f5:57:6f:81:ef:9d:bd:54:
2c:1d:d4:5a:d1:da:41:0b:c6:0d:d4:00:cd:ae:45:31:5f:5e:
32:fa:a7:07:1f:67:1e:6c:a6:01:bc:9d:23:5e:2a:1a:4d:30:
77:eb:95:3c:60:dd:cb:fd:49:5e:7c:e4:ec:83:87:c4:3b:a1:
d2:02:be:09:3e:42:42:e2:54:da:1e:d9:3a:38:63:0b:06:3e:
a1:96:31:14:4a:23:09:66:e5:bb:41:75:a3:cb:a0:68:36:29:
c8:5b:d6:79:92:7f:56:27:a5:1e:b2:13:c3:54:53:3f:c0:25:
1a:96:a6:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFYi5TvAe/B9Nh3sU8NCnhGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0Y2RlNWE2MTE0NWQzOTkyZWNjZGVjN2I3ZjBiODdkNTY2
YmRkY2EwHhcNMjYxMDIwMDkwMTQ0WhcNMjYxMDIxMDkwMTQ0WjAzMTEwLwYDVQQD
Eyg3ZDM0MTQ2YzVlMDk3ZjhlNjAyM2Y4NTFlZjRkYTE4MDFkYThiN2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4eJIxfuQxYgWMLrjaHrLy+p0Cdx
+veo6O7FM62phB9G5kOhr/A+84KKl632kGjIK3tXz6mbYlqKo1yIjaV6cfdztYV6
i0zxwJ8ffhwqTVBPPd+3S/gjYHabO44zi+iFMbRJiAtUwWOV5RaOIQNuGqepAan8
0T3Is0t9wqD8B2y0/f4Z5Y7F78Ydest5u8ZpLAmZczfUAf1A/7XltSShW+a3D6cq
Y+RrbjOfEBS8hhELlXZc1ttZN2pywqXCk5kIS15KX9lupkp/jcEJEHOIPNbpmmPT
+GjLCzDOqeNQdov4r59kDf6as7aSsw/ZejLpKdkzc7cZH1ZimC1/Ex0qwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH00FGxeCX+OYCP4Ue9NoYAdqLeiMB8GA1UdIwQY
MBaAFDTN5aYRRdOZLszex7fwuH1Wa93KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iNDJjNTMtZTA1YS00ZDc3LTgyZWUt
NWVmMzYyMjZhNzY3LzEvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iNDJjNTMtZTA1YS00ZDc3LTgyZWUtNWVmMzYyMjZhNzY3
LzEvTk0zbHBoRkYwNWt1ek43SHRfQzRmVlpyM2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk98b9PVx
3gUYpf1PDmDnj5MCYNF9FH2QOnXVDJr1jPKMj9fOv4+fxMLjPyTUo2KO/Zib9tmq
WNs9W+a44WsFzgd7BqTYpFx/9pDtFpISNERnrWk+L5sy13l7rF6D7x4ghdIbje6u
Qi9W394eDaJUsVN/UmTt14GEju9d0MAAyTUNt0ycO69fmfVXb4Hvnb1ULB3UWtHa
QQvGDdQAza5FMV9eMvqnBx9nHmymAbydI14qGk0wd+uVPGDdy/1JXnzk7IOHxDuh
0gK+CT5CQuJU2h7ZOjhjCwY+oZYxFEojCWblu0F1o8ugaDYpyFvWeZJ/VielHrIT
w1RTP8AlGpamWg==
-----END CERTIFICATE-----
Generated at Tue Oct 20 12:23:27 2026 by rpki-client