Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
File: NZ8eO4BVHpihb8K7y33YfJoO_iU.mft (raw, json)
Hash identifier: +ckJ40Fo8Ah4eQHGayigXZXpgVWSdRhA3Hm9PGVNy+k=
Subject key identifier: EA:F3:65:A2:A5:22:2C:5F:31:5C:7F:94:45:FA:17:CB:94:AB:C1:4D
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 019D382E9501FFEBF1E069CB2BAE3265829B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
Manifest number: 0FBE
Signing time: Sun 29 Mar 2026 06:01:09 +0000
Manifest this update: Sun 29 Mar 2026 06:01:09 +0000
Manifest next update: Mon 30 Mar 2026 06:01:09 +0000
Files and hashes: 1: 1GFF-lq3xv_z5Laz8N8tP9NoFH0.roa (hash: a9i0fGKabjqKLT5yhxSy3PgCaJI26jiufuEnDd1W9OI=)
2: MyTkgN8HXkjrp-kxigqAegjklMQ.roa (hash: pFPPNvby+G9WZLBUBJIB4xiTS6SkjYoIs0G/Wb+5n8s=)
3: NZ8eO4BVHpihb8K7y33YfJoO_iU.crl (hash: Hq2GzqMhPcodJduFSJ86HmQbyAaGFVToOK8xdosaF7E=)
4: TO6nqQhnOsZjFu2as_fLfCF9jiU.asa (hash: AzlXqDoRzTdGdaGKF/7T/k6tmAW/64eypKY9s/31aeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:95:01:ff:eb:f1:e0:69:cb:2b:ae:32:65:82:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Mar 29 06:01:09 2026 GMT
Not After : Mar 30 06:01:09 2026 GMT
Subject: CN=eaf365a2a5222c5f315c7f9445fa17cb94abc14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:53:99:b4:83:8a:c7:43:d4:75:dd:5d:f4:
f3:e7:a7:0c:94:35:8b:3a:ad:dd:35:80:9b:54:59:
c7:c7:ef:e9:06:29:93:65:05:c1:f6:33:50:3e:8e:
aa:e8:2c:7e:4d:98:17:66:9c:7f:38:35:32:ab:05:
28:d8:90:31:78:e0:2f:9d:55:c4:f2:6c:b4:88:cf:
15:e5:22:19:6b:ea:61:f0:81:3e:ba:0d:3a:89:60:
b7:22:94:4c:b1:ec:2d:e9:b8:58:d5:99:2e:c7:c2:
1a:51:a1:ba:43:02:5e:72:df:de:9f:66:13:d2:7f:
8d:f0:9c:c1:f8:9b:1a:b3:89:68:a9:38:c9:00:0c:
3c:4e:7a:14:a7:96:7a:28:80:c3:f1:78:88:e2:b7:
b1:1a:8d:1b:a9:0a:f6:79:94:b8:ee:d6:ff:18:d0:
b5:c2:8f:d4:2e:a0:c5:d5:d0:5b:de:2c:aa:39:d0:
ca:50:57:b5:d7:53:5b:48:23:55:5f:3c:4b:2e:b1:
49:44:6f:eb:d6:8b:7c:62:b5:3a:fb:28:74:45:59:
49:4e:c9:bf:1d:74:b1:69:66:05:c7:ae:a4:ca:a8:
cd:49:4c:28:43:32:0d:11:75:49:79:8a:88:e8:c8:
9b:a9:ec:63:c0:45:26:fb:e4:38:48:39:9a:59:da:
f1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F3:65:A2:A5:22:2C:5F:31:5C:7F:94:45:FA:17:CB:94:AB:C1:4D
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8b:a6:c2:0d:4e:d4:48:37:a3:9a:b0:39:48:3d:b3:8a:47:
74:1e:05:8c:25:76:f9:16:b4:d4:c4:51:26:45:60:00:c5:c3:
c0:1e:3c:3f:17:ee:c8:c7:09:30:bc:eb:0a:fc:91:b5:8b:7b:
92:1b:de:96:d2:e8:5f:62:6e:68:45:38:d7:a8:45:d9:5a:2e:
bc:31:d8:db:30:ad:5d:b0:c8:7a:7b:c6:f8:88:16:21:30:73:
ab:42:8b:99:02:2c:76:20:77:97:a4:c0:d0:04:3e:ee:be:ab:
8e:2a:97:ca:98:23:d9:4c:91:12:80:64:aa:c9:75:ab:bc:fd:
fb:f3:20:e9:4a:1c:ec:25:47:88:d6:02:31:19:58:a0:26:0c:
d4:93:10:1b:2c:b0:f5:44:5c:9d:72:ff:5a:79:e6:29:1d:61:
07:87:b4:98:c3:25:b0:cf:a2:5c:24:01:83:fe:f1:cf:09:98:
45:63:63:03:8c:e4:4f:40:b6:27:26:cd:f1:44:d4:6e:76:9b:
07:ad:80:3e:33:6f:3f:de:37:86:c1:d8:9a:a7:78:d4:0a:7e:
f2:1f:cf:cf:0b:fe:11:06:ac:0d:d4:f8:1a:8e:d7:13:4e:d9:
66:19:1c:00:dc:21:4a:b1:78:40:43:57:58:86:e3:a7:0d:c6:
4f:52:2f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:36 2026 by rpki-client