Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
File: NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft (raw, json)
Hash identifier: C/GfbmgnEo8QEh1jSaDUwyAzg2Al9EZZ6/INdic5eFM=
Subject key identifier: A8:97:BE:D4:91:8C:F1:70:94:BF:F3:51:9E:57:E2:BC:60:27:86:94
Authority key identifier: 34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
Certificate issuer: /CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Certificate serial: 019D382E9B4F90FC2BA5846C5B297FA68588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
Manifest number: 0E05
Signing time: Sun 29 Mar 2026 06:01:11 +0000
Manifest this update: Sun 29 Mar 2026 06:01:11 +0000
Manifest next update: Mon 30 Mar 2026 06:01:11 +0000
Files and hashes: 1: NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl (hash: AjXLC8q/xJsunR/Scvkh4My9rjmRU1ZMQuVDGj7kq6U=)
2: d0hB3sr_J40CjN3DPScI5WDQSFY.roa (hash: ZEZewkOpSdtKFHUVQXPwxArZxLY7Jpp1t6GgLUjAr+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:9b:4f:90:fc:2b:a5:84:6c:5b:29:7f:a6:85:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345e6e1d66fc047e0e89ff045c2d08ca17d55ea5
Validity
Not Before: Mar 29 06:01:11 2026 GMT
Not After : Mar 30 06:01:11 2026 GMT
Subject: CN=a897bed4918cf17094bff3519e57e2bc60278694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:21:08:28:d2:55:af:e5:85:8d:bc:bf:3d:e0:
ad:74:df:32:64:c0:b0:fb:9c:a3:7b:35:da:de:21:
6d:25:59:e7:9c:71:2f:ce:be:cd:da:76:23:be:83:
23:da:41:ad:10:c0:1e:62:31:cc:c2:0f:4f:4b:e3:
cf:3a:1f:9b:2e:a5:08:c1:e5:f1:63:c5:26:04:68:
e4:8e:31:84:c5:37:f0:d1:26:6c:02:db:83:c4:d6:
a0:e1:5b:7e:34:b3:37:1a:ad:1b:2d:c5:f1:75:dd:
97:56:22:4c:af:32:90:c4:a2:6f:26:e9:d3:34:94:
4d:a0:29:c3:ed:9d:60:5b:3a:aa:9d:bc:9d:7e:7c:
94:fe:40:6b:a6:18:1d:85:b2:59:7d:1c:96:26:09:
a3:9a:a2:83:29:3f:44:11:fb:61:1d:73:b9:69:39:
73:cd:82:4e:d8:e9:61:e5:c7:5e:e0:d0:9b:67:30:
95:6d:3d:91:5f:61:51:c7:da:f1:a3:f1:63:ec:37:
5f:e4:49:cd:17:4c:fb:41:46:0d:5f:ec:28:1f:77:
6f:ff:fa:ed:72:6f:8b:6a:df:d4:ed:cf:ec:47:a3:
8f:16:88:f7:f5:24:f8:ef:75:7d:a2:fc:21:99:56:
e3:a6:fb:15:36:67:e6:b3:35:0d:8a:54:8a:c2:2b:
87:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:97:BE:D4:91:8C:F1:70:94:BF:F3:51:9E:57:E2:BC:60:27:86:94
X509v3 Authority Key Identifier:
keyid:34:5E:6E:1D:66:FC:04:7E:0E:89:FF:04:5C:2D:08:CA:17:D5:5E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF5uHWb8BH4Oif8EXC0IyhfVXqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0b18c-c256-49f5-bc17-ddd73d509e12/1/NF5uHWb8BH4Oif8EXC0IyhfVXqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ed:f1:40:b5:bc:e3:7a:8a:d5:8b:9f:be:58:8f:45:49:31:
16:00:15:94:dc:2f:72:d7:b6:32:f6:8b:93:85:7a:05:0b:99:
70:a1:53:c4:2f:a2:c1:eb:d4:0a:e3:18:c8:48:01:94:40:51:
d4:9e:47:fd:49:27:41:ba:1a:18:12:98:db:41:e4:7b:95:0c:
60:df:b2:8c:b0:5e:39:b4:ee:33:cc:96:c3:19:a9:19:ca:0f:
cf:3b:0c:42:79:1f:b6:89:7e:67:af:61:48:59:5b:d1:42:7b:
95:50:d3:c0:92:cb:eb:ae:df:17:2e:b5:16:17:6b:be:72:33:
b7:ae:8f:2f:7e:2e:1e:69:8c:ed:51:3b:b5:20:a9:1d:9f:74:
e7:a4:7e:51:d6:41:27:7a:c7:24:7e:33:e7:8c:ca:ce:45:4a:
98:c6:78:73:6f:26:1d:7a:aa:ef:25:ce:fc:3b:24:39:73:a8:
fe:18:a9:1f:16:c5:91:50:65:62:bb:5f:a7:c7:51:94:73:88:
25:bc:52:55:fd:60:2a:9d:ff:b6:9f:73:13:ba:f1:19:e0:18:
2a:c0:bd:d4:aa:4d:3c:50:cf:7a:9a:ac:79:c8:86:0c:15:32:
8c:e5:c4:56:c9:ed:76:97:73:6f:04:8a:f8:ab:3c:59:f2:0d:
c2:40:49:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:32 2026 by rpki-client