Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
File: NLjV-ROFaLUssJNuK0yU93zleuw.mft (raw, json)
Hash identifier: Hv5jnY7h6i3Ea4ke4p5F794dCilEWU9G0SLGQl1u5G0=
Subject key identifier: 28:97:48:E1:D4:79:AB:71:EC:58:49:ED:BA:AE:A5:ED:EE:15:F6:FA
Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
Certificate issuer: /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Certificate serial: 019D38D2CC9F12BFF32A2964CAA7CFAA97F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
Manifest number: 15C9
Signing time: Sun 29 Mar 2026 09:00:32 +0000
Manifest this update: Sun 29 Mar 2026 09:00:32 +0000
Manifest next update: Mon 30 Mar 2026 09:00:32 +0000
Files and hashes: 1: 2qExfB805-R2i4AdQ2Nza5P_ogA.roa (hash: I7bRoDVEoiwuKeHZcRlXKBPzc5ivPBkAnRRWojlZ0Wc=)
2: NLjV-ROFaLUssJNuK0yU93zleuw.crl (hash: sFCKGN/hcmQ8nqYQGpTKPevmJK+SE4vQNjtXOk1bfiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:cc:9f:12:bf:f3:2a:29:64:ca:a7:cf:aa:97:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Validity
Not Before: Mar 29 09:00:32 2026 GMT
Not After : Mar 30 09:00:32 2026 GMT
Subject: CN=289748e1d479ab71ec5849edbaaea5edee15f6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:b1:c8:02:fe:a3:53:b0:04:16:19:bf:66:
97:d3:8f:be:04:c5:20:ba:c8:3b:6d:29:56:5e:f9:
aa:01:79:6f:2e:5b:11:da:3b:fd:43:5c:f1:12:07:
da:77:37:b5:97:de:d6:04:5a:a5:70:ba:b2:95:c3:
ea:14:5f:43:a8:67:b5:69:bf:f4:19:19:a5:17:9d:
92:ad:35:ea:1e:12:d5:df:55:cf:37:b3:bf:36:f9:
60:90:93:a5:e2:3b:31:47:16:57:92:53:e9:f0:65:
43:fd:b1:df:3f:26:1d:a5:ce:d0:98:91:54:5c:9f:
2b:1a:b4:b8:8a:63:f8:7a:29:99:44:25:05:1c:63:
20:a3:05:29:63:26:10:b2:f8:1e:00:fd:db:31:b3:
4b:4c:23:ec:89:a9:d3:e1:fb:be:b9:c5:74:59:a9:
2b:e7:44:25:08:3d:5f:cb:0b:9f:12:71:db:2e:a8:
98:54:94:d9:7b:79:11:2a:63:51:12:bc:41:2a:7f:
ab:da:68:97:19:fc:f7:95:11:5d:5a:01:10:89:99:
fb:c3:43:20:61:51:14:b6:ab:3e:26:80:42:8f:b4:
e5:16:55:ef:78:5b:03:5c:7d:93:4c:0e:a7:c8:b0:
91:a8:57:5a:f2:1b:f0:16:74:77:10:47:29:8d:ec:
5e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:97:48:E1:D4:79:AB:71:EC:58:49:ED:BA:AE:A5:ED:EE:15:F6:FA
X509v3 Authority Key Identifier:
keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:27:41:c5:f1:09:eb:af:58:af:14:56:ef:10:88:0a:f5:40:
b8:48:37:e9:9b:db:f2:68:88:34:42:83:7a:03:13:54:90:87:
76:f6:9d:70:0f:a7:ff:15:51:87:19:96:b5:2d:eb:6a:14:09:
10:68:38:69:2f:52:1a:02:b8:d4:e4:5b:ee:fd:3d:0e:7b:b6:
df:61:44:07:dd:49:73:53:4b:d7:20:eb:d1:c3:76:72:f6:24:
17:c1:76:05:6a:1b:08:3f:d8:a6:c6:ca:a0:a6:7b:96:f5:94:
a3:17:10:c1:83:27:16:2a:23:55:96:b7:35:85:fb:e9:e0:97:
a3:12:28:b4:47:67:1a:c2:30:d0:51:9f:2f:76:31:b7:d9:1a:
e2:6c:47:9f:f6:65:33:d7:e4:ba:8a:cd:df:ae:d7:cc:66:29:
f7:83:3b:ef:4a:76:9a:1d:07:e5:76:58:57:5d:c2:b2:31:10:
b5:53:9c:a9:a3:d2:df:76:e8:5c:88:a5:af:4e:f2:03:ec:b5:
36:ac:82:37:50:1e:37:3a:a3:50:6d:c7:3f:0e:d2:87:03:af:
1b:ab:97:81:9d:42:89:f4:11:15:40:44:c3:5b:c0:8a:be:1f:
3b:3e:d4:1e:ba:c5:e5:58:be:8d:c5:2e:bd:5a:d6:6e:06:f1:
25:a9:57:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:07 2026 by rpki-client