Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: N3h3tm3S030okfh5041TQw/6vI3XS4Rmh72hTXgM5xY=
Subject key identifier: 35:CC:99:4A:71:56:42:E8:24:9E:ED:EE:C9:BA:BD:D6:70:FD:FC:04
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 01A17C29459F2101D5B8A33667A83EC317B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 07:00:41 +0000
Manifest this update: Tue 27 Oct 2026 07:00:41 +0000
Manifest next update: Wed 28 Oct 2026 07:00:41 +0000
Files and hashes: 1: 4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa (hash: Z+M0a2CeBocn+5J0DpLY2Wi61/jCPMoAwEWgcIu3zn8=)
2: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: 9seM22mx21nhaCujErpJa9nvxk5AXzrCW1dUvEOa1kg=)
3: RxH1gaSjLMp0tnHIqiMkmznCeLE.roa (hash: p4krdNmYmG1wZdtq1raA8Nmp1Uo/DFzB3h6x0GajZ1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:45:9f:21:01:d5:b8:a3:36:67:a8:3e:c3:17:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Oct 27 07:00:41 2026 GMT
Not After : Oct 28 07:00:41 2026 GMT
Subject: CN=35cc994a715642e8249eedeec9babdd670fdfc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:0d:60:a4:bd:de:e0:67:7a:93:a4:e3:4c:
b8:22:dd:0e:b9:a9:4d:ba:07:ef:db:5a:ec:55:de:
50:45:ed:7f:8e:a4:86:6d:37:29:5e:ec:39:cd:7e:
26:ec:a2:97:ba:c7:11:9d:09:68:6a:c2:10:0a:1f:
37:df:d5:8d:3e:b7:5b:3c:b4:2b:08:58:43:15:8b:
08:61:e5:3f:52:39:00:b3:6e:e7:22:cb:30:05:d5:
02:91:14:93:4d:bc:3a:c5:94:10:6f:13:d3:be:da:
44:a7:e7:d4:7f:8b:79:4e:86:bf:0b:79:e4:40:46:
01:4a:d3:cd:b0:75:92:b4:9e:ec:e7:a3:41:54:1d:
f4:4e:b8:13:3e:84:bd:8e:e7:b4:cd:6c:bd:1c:b4:
4b:26:b8:13:5f:70:33:e3:e1:3f:0e:92:6a:7e:89:
61:27:8b:a2:a0:5f:d5:0e:14:9d:91:73:cc:51:41:
74:36:1d:5e:a2:a0:8f:28:0d:88:20:24:39:98:45:
70:d8:f4:0f:95:1f:76:68:32:60:fa:bd:1a:af:02:
b4:79:e6:04:ae:3c:f7:2c:8e:e3:48:03:e9:2d:5b:
0a:4d:ae:67:0c:3b:ad:af:00:5b:8f:e5:ff:65:cd:
50:14:31:a5:a6:59:67:68:c1:6a:65:22:b9:83:15:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CC:99:4A:71:56:42:E8:24:9E:ED:EE:C9:BA:BD:D6:70:FD:FC:04
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:36:8d:d0:51:9d:7d:4c:a7:3a:df:ad:3e:4d:00:4f:ed:33:
b4:61:5f:05:3f:7b:e3:0a:ae:9b:c0:43:23:4d:57:4d:b2:54:
3c:25:48:9a:7c:ce:73:48:bd:f1:7f:42:01:54:b4:ce:b8:3e:
ff:2e:29:5d:ca:3c:d3:85:25:84:af:3b:b7:6b:35:29:85:1c:
0c:eb:4d:b3:7a:b4:25:ec:43:9b:26:68:a9:fd:ae:66:bf:c6:
cc:15:22:3b:f4:a9:a6:a7:ce:bc:bd:ee:a5:40:d2:92:df:2f:
51:b6:fe:90:72:ee:6e:ee:69:e2:d4:d5:32:01:5a:e5:e9:96:
a6:b4:27:f9:57:bc:f0:c2:40:df:62:ad:00:d6:98:90:7b:86:
df:5d:0f:eb:1d:42:13:dc:11:21:e0:32:64:98:40:15:44:5a:
e8:d5:ff:e3:87:ec:9a:c4:a8:48:35:b3:1d:22:72:2b:02:c7:
0a:ae:32:2f:a2:d8:7b:83:3c:41:04:39:7b:b8:5d:92:d9:fe:
a8:f8:9c:87:9a:ec:3d:f2:6e:b5:d3:83:a7:31:39:ab:31:f3:
e1:48:a9:5e:41:ca:e1:62:a0:0f:59:c5:03:dd:db:cc:23:e3:
1f:6e:fb:a0:8c:17:41:3a:0a:3e:93:23:ed:1d:c5:7b:e6:6a:
36:66:70:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 13:08:18 2026 by rpki-client