Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: yAhtFc/pYzeXEyIshDrQi8iV1nxSmH3mx0DKMO0nC4M=
Subject key identifier: 73:76:FC:23:7E:DC:EC:67:F8:60:2D:62:13:3E:BD:31:AD:1D:DE:65
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 019D390A35083FF34B593672F857CE39BE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:01:03 +0000
Manifest this update: Sun 29 Mar 2026 10:01:03 +0000
Manifest next update: Mon 30 Mar 2026 10:01:03 +0000
Files and hashes: 1: 4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa (hash: Z+M0a2CeBocn+5J0DpLY2Wi61/jCPMoAwEWgcIu3zn8=)
2: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: aBEne6RKiv6eNsJMJu+jIyz/n6XYHM/74k/bTr6SA64=)
3: RxH1gaSjLMp0tnHIqiMkmznCeLE.roa (hash: p4krdNmYmG1wZdtq1raA8Nmp1Uo/DFzB3h6x0GajZ1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:35:08:3f:f3:4b:59:36:72:f8:57:ce:39:be:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Mar 29 10:01:03 2026 GMT
Not After : Mar 30 10:01:03 2026 GMT
Subject: CN=7376fc237edcec67f8602d62133ebd31ad1dde65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:c2:f3:26:c4:bf:45:36:78:57:16:c8:bc:
ca:da:c6:1a:30:f2:24:06:a2:d4:ca:a5:3b:d7:9a:
01:26:4f:b0:88:0c:88:dd:f6:50:b8:f3:85:e7:a3:
4c:57:9f:dd:c9:4c:06:ea:e2:5c:82:4f:1e:60:94:
89:68:48:51:59:8a:0e:4a:84:f1:23:9e:63:37:66:
3f:91:b4:a7:69:ec:6c:91:44:bc:ae:0d:a1:06:3f:
76:17:5a:bc:fc:74:24:68:35:95:32:e0:30:25:52:
d0:79:7c:74:7c:a4:3b:45:05:fe:cc:f0:c8:99:55:
14:ca:34:cd:e2:08:25:e0:2f:96:8e:03:0d:db:8e:
43:39:34:74:21:1e:72:86:1f:3d:2f:86:a0:aa:37:
c1:c3:57:c5:08:a9:7c:6a:17:f2:97:e0:f5:d8:dd:
fe:f2:bd:5d:d8:4b:af:6d:49:1c:d8:8e:8e:f1:7c:
92:72:66:f2:04:0c:b4:fc:c0:9e:21:34:38:60:63:
e6:c0:01:a3:ed:0b:4e:5c:21:be:06:32:87:68:4a:
c7:07:d4:2d:20:96:04:1e:6d:2e:59:08:ae:e8:05:
35:69:e7:50:f2:ef:5c:7f:2d:1b:e8:06:45:0c:59:
95:fb:eb:b0:c9:04:03:c5:58:da:d4:14:e3:8e:62:
6d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:76:FC:23:7E:DC:EC:67:F8:60:2D:62:13:3E:BD:31:AD:1D:DE:65
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:33:02:6d:ac:31:1f:b0:fc:a8:ab:aa:19:23:e5:d7:10:b3:
dd:97:3f:29:20:1a:04:5b:99:0f:d4:e3:fe:f4:45:1f:bf:48:
7d:bb:58:54:dd:ea:d4:b1:9b:ae:fb:11:63:92:bd:ae:7d:03:
51:4c:44:bb:46:0d:1d:c1:12:f2:4d:2d:4d:58:6b:1e:9b:d8:
04:31:68:9c:8e:d6:c8:90:c1:77:2a:72:95:5a:25:d8:46:59:
fc:06:99:34:d8:25:bb:11:13:d5:d6:17:33:17:4d:02:73:3d:
8f:cc:f7:78:b1:19:42:7e:8b:15:93:85:51:90:59:f5:af:50:
fe:7b:22:2c:bf:69:bb:90:41:2c:18:3b:ad:20:13:2f:4d:b1:
0e:64:6f:d6:b4:8c:4f:21:2e:46:f4:6e:37:65:6a:10:7d:e1:
35:96:f5:17:73:16:da:5e:9a:81:79:d2:2c:77:5b:58:53:0a:
1b:2a:39:4a:0a:0b:82:77:fd:d3:52:84:71:69:89:52:81:7e:
62:7e:6d:07:1f:d3:0d:54:72:ee:e9:a1:25:17:ad:4f:4d:22:
66:30:7a:06:25:76:c3:05:61:b7:7f:ba:47:8e:b1:4c:69:3c:
ae:f5:17:3f:c4:6b:45:43:e9:60:db:37:a4:b2:5d:8d:78:18:
ba:cd:5d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:57 2026 by rpki-client