Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
File: NLqcIjJB64DivHGFO7fS5YKGvdM.mft (raw, json)
Hash identifier: 1vfg0i4FlnN8KEE8wyqT19KBh2qmg5II9AK4M1KwLFc=
Subject key identifier: 95:42:35:DB:6A:17:FC:70:54:3B:15:1C:87:C1:35:3F:A9:CC:F0:B7
Authority key identifier: 34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
Certificate issuer: /CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Certificate serial: 019D371B964FF13C8997EB6D87AD8A20A657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 01:00:47 +0000
Manifest this update: Sun 29 Mar 2026 01:00:47 +0000
Manifest next update: Mon 30 Mar 2026 01:00:47 +0000
Files and hashes: 1: 3WJjV42gX3UcYyB9uPxn6ReQPNE.roa (hash: xdAcfOJKPu9GkR2yJdt8tSxgO0xjvWuS026sQ/93JIc=)
2: NLqcIjJB64DivHGFO7fS5YKGvdM.crl (hash: A6u5TkCdjQsn3ig/6cJRDLbdpjEQa9r+9hGntT57JZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:96:4f:f1:3c:89:97:eb:6d:87:ad:8a:20:a6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Validity
Not Before: Mar 29 01:00:47 2026 GMT
Not After : Mar 30 01:00:47 2026 GMT
Subject: CN=954235db6a17fc70543b151c87c1353fa9ccf0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:1e:07:43:3a:8d:82:7a:fe:17:6c:5d:b4:
3a:f3:ef:d0:5e:f3:4e:75:c3:cb:7f:b8:bb:be:b7:
f6:39:24:23:b3:94:8d:6e:13:bc:42:97:28:d6:fb:
67:ed:5e:66:31:90:56:e0:fe:4f:53:b6:fc:eb:6e:
a4:96:29:2d:1f:3c:5e:41:d5:dc:8a:16:f7:e3:83:
b1:81:aa:98:16:f4:68:3d:1e:c1:75:a6:06:ee:de:
9c:19:c2:74:cc:8e:8d:d8:9e:90:d7:7e:13:6a:2e:
23:f3:5b:60:71:60:48:cd:a7:21:34:7b:0d:31:a5:
8c:f6:30:86:c7:54:89:8c:f2:8f:d0:6c:46:28:09:
34:00:33:63:17:29:ca:25:7e:ac:a7:8a:f2:79:2f:
38:90:c8:38:20:b9:57:a5:25:cc:bf:9b:7e:04:8e:
e5:39:05:65:6f:22:38:15:3b:74:80:87:b9:6f:85:
a4:b1:3c:26:1b:62:f0:8e:48:71:42:3c:1b:c6:3b:
5b:f9:b3:3b:38:e4:66:16:85:02:9b:15:ee:6a:55:
ca:f1:a2:fc:d5:9c:de:fd:3e:23:ed:c6:92:5a:b5:
ed:78:ec:10:7d:c4:5d:9a:54:ce:7f:3c:6e:44:11:
4b:f5:d6:50:21:13:03:80:0a:77:92:7f:9b:6d:b4:
37:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:42:35:DB:6A:17:FC:70:54:3B:15:1C:87:C1:35:3F:A9:CC:F0:B7
X509v3 Authority Key Identifier:
keyid:34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9b:ad:8c:8c:0c:bc:a7:6d:2c:3e:cb:c4:91:c8:c9:c9:e5:
c7:f1:cd:1e:e3:ec:be:7a:2c:22:4c:2b:9b:9b:76:1d:68:2d:
cb:16:6a:2c:07:b9:ce:7f:e6:ce:48:10:55:3f:4b:47:1a:56:
c1:da:56:55:49:d9:4d:76:d7:ec:9c:93:13:19:1e:17:b6:05:
7c:56:ad:3a:a4:7b:cc:d7:4f:e6:a3:d8:54:58:ee:cd:2d:d0:
f6:bf:89:75:60:93:20:b8:3e:ca:d0:0f:04:d8:54:d8:49:bf:
2a:32:1d:17:01:32:37:10:9b:5f:4e:1b:78:04:81:f0:a4:a0:
aa:39:7e:19:f4:56:59:9f:64:77:dd:22:23:8f:26:8b:c8:13:
2d:7e:26:85:88:73:8d:de:65:80:3e:ba:dd:ff:2c:d3:d2:88:
e4:1d:26:40:d2:98:fd:f0:d1:82:4c:e1:e1:d2:32:36:14:64:
7c:0a:1a:9f:7f:0b:c5:33:de:e8:4d:18:f9:d8:fc:c5:84:bc:
50:f2:bc:b4:48:3b:f9:f9:26:af:21:ca:ec:cd:0b:a1:4e:c0:
2b:17:3d:cf:e0:aa:1f:67:9e:90:69:b2:f1:7d:9a:12:cb:68:
ca:de:51:67:5e:10:2a:f6:f4:a1:5b:20:ff:85:96:e6:5c:f8:
0b:7c:7e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:49 2026 by rpki-client