Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
File: NcClulvILiDgRvu1TAZYBvTHtqE.mft (raw, json)
Hash identifier: hXnsNUnZcvrSU/VJKx413vQC3ub2J1/GFJ1sHAzP9aM=
Subject key identifier: 3F:D0:30:3E:0D:FB:55:64:E4:3F:D6:67:E0:DE:09:79:83:19:1F:47
Authority key identifier: 35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
Certificate issuer: /CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Certificate serial: 019D38D32EE97F8712B10AB75EF2343A3F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:00:57 +0000
Manifest this update: Sun 29 Mar 2026 09:00:57 +0000
Manifest next update: Mon 30 Mar 2026 09:00:57 +0000
Files and hashes: 1: Gc2XvyP01-fby2wIcpCQAXK9NNI.roa (hash: TqTwmJ2kXyM/+f6YO1uN50U7uVnjd7tFzIbHZN9RIuA=)
2: NcClulvILiDgRvu1TAZYBvTHtqE.crl (hash: 3Rtttk8W8gA0tQcHl2TgT2JLhd9ulmZRnvkIIhi4GHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2e:e9:7f:87:12:b1:0a:b7:5e:f2:34:3a:3f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Validity
Not Before: Mar 29 09:00:57 2026 GMT
Not After : Mar 30 09:00:57 2026 GMT
Subject: CN=3fd0303e0dfb5564e43fd667e0de097983191f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:56:c9:ab:34:d5:f0:3e:1e:25:0c:45:8b:
1a:01:00:18:54:06:eb:4b:05:91:30:87:c5:6e:48:
e4:be:47:c5:1e:f8:9c:0c:98:10:f7:37:73:b6:1e:
01:dc:b1:76:e0:c1:42:16:cb:0c:14:db:fe:1f:38:
d7:79:3f:52:0b:de:67:10:3b:23:09:ed:7b:00:3c:
9f:64:5e:6c:9a:2a:43:aa:f0:ad:ba:9a:66:86:f9:
d3:1b:bb:3e:d6:ab:ba:f2:9c:b4:4d:40:fb:86:fc:
c0:9d:11:fc:28:6c:88:87:2b:42:8c:e1:75:c3:02:
e4:46:2e:15:c3:7f:b6:82:25:a2:d8:60:c7:90:5f:
c2:e3:eb:5b:6f:41:9e:b5:66:f3:72:31:c4:1a:9f:
42:4f:47:69:56:32:2c:0f:33:73:89:9c:57:7d:00:
ce:b9:69:25:55:dd:a7:7e:f5:8f:21:b6:22:75:bc:
cf:85:f8:12:1a:3b:0a:c2:5a:ac:bc:f0:30:6c:5e:
23:7b:b0:8e:aa:84:eb:0f:26:a0:91:3d:da:f7:87:
c6:79:83:fc:e4:25:ba:95:04:95:8a:fe:5f:dc:9c:
63:b7:24:b4:a1:84:c8:1b:06:80:f3:ad:cd:2f:fb:
33:18:80:54:fa:ca:f7:da:07:6c:eb:ad:0a:74:45:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D0:30:3E:0D:FB:55:64:E4:3F:D6:67:E0:DE:09:79:83:19:1F:47
X509v3 Authority Key Identifier:
keyid:35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:49:c4:44:e4:fd:d3:f5:41:99:81:86:df:ea:31:7b:94:5d:
7d:bf:79:55:e0:4a:5c:b4:bf:59:c0:75:c8:81:12:f9:45:78:
fe:fb:77:c3:99:0a:63:87:0c:a7:04:14:85:18:38:f3:af:7e:
76:ad:30:3f:9c:6b:81:c1:ea:fc:d8:db:15:1f:03:86:97:bc:
f0:4f:d1:e3:44:0b:4f:56:13:7e:c7:9e:65:d1:bb:94:b4:2d:
b9:79:26:50:13:85:c9:1d:1e:b8:15:54:0e:65:c5:bc:15:94:
5e:8c:73:87:55:59:78:f1:8a:29:2b:08:fe:01:32:3d:73:f2:
0a:79:4d:b4:e7:24:76:88:89:1f:65:8a:68:d1:89:66:5e:02:
d7:44:10:fd:4c:9b:a5:a6:10:9b:8a:50:d6:77:c3:28:33:ac:
a7:ce:30:55:77:cf:ce:2a:a7:3a:35:69:df:8f:91:3d:6f:81:
93:8a:8d:a0:bb:ae:17:fb:7d:8f:d8:4b:c2:86:53:e5:86:11:
57:7b:4c:09:5e:37:25:de:be:4c:58:6e:4b:04:18:14:ce:01:
cd:65:75:87:61:e6:e7:7f:d3:ca:89:a3:7d:ec:ce:5e:3a:07:
d9:a8:ea:33:60:0b:a0:be:a6:f5:59:7a:c3:bb:5f:d4:6c:e5:
f4:bc:b0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:20 2026 by rpki-client