Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: fx4nhBMv5sdtFxDWDqmnUEjU1lT4Bbxn5X5vFpbVVqU=
Subject key identifier: 5D:7D:25:18:53:E7:7A:4A:33:36:67:DE:E3:58:73:56:5F:EC:4D:8D
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 01A08AC3747779AFE3B46B89735CE6C6F9E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 10:01:00 +0000
Manifest this update: Thu 10 Sep 2026 10:01:00 +0000
Manifest next update: Fri 11 Sep 2026 10:01:00 +0000
Files and hashes: 1: 4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa (hash: Z+M0a2CeBocn+5J0DpLY2Wi61/jCPMoAwEWgcIu3zn8=)
2: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: JeYfw/okwltCjFGKiweF8Z5XB1BhobVaZDpY2qPZ2YM=)
3: RxH1gaSjLMp0tnHIqiMkmznCeLE.roa (hash: p4krdNmYmG1wZdtq1raA8Nmp1Uo/DFzB3h6x0GajZ1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:74:77:79:af:e3:b4:6b:89:73:5c:e6:c6:f9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Sep 10 10:01:00 2026 GMT
Not After : Sep 11 10:01:00 2026 GMT
Subject: CN=5d7d251853e77a4a333667dee35873565fec4d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:54:2d:2c:5d:eb:39:1f:47:04:b8:a9:8e:
51:bc:c6:b4:f5:5b:e7:9b:d6:39:26:29:48:79:51:
04:9b:15:a4:80:f3:bd:07:e6:fc:6b:c6:82:b3:f8:
e3:82:41:74:35:0c:27:eb:40:1f:59:f8:28:40:01:
4a:dc:1c:02:10:ad:92:80:7c:b9:be:e1:19:c7:60:
ce:ef:70:5d:3c:98:23:ee:21:b1:bb:17:e8:31:4c:
bb:3c:f0:10:8e:1b:45:b7:03:95:34:32:94:fe:dc:
f9:38:51:13:94:95:d4:61:51:80:70:da:9b:1e:4a:
fd:f5:23:a7:e7:a5:e9:64:e3:2d:2f:13:79:57:40:
e5:09:90:a5:3e:fe:93:82:15:6b:54:51:8d:6e:52:
ed:dc:12:fd:c7:68:03:be:3b:d8:40:c9:f8:04:09:
94:f4:05:54:06:2f:fa:e4:4c:02:2c:d2:68:cc:59:
a8:41:fa:6d:d9:9b:a5:eb:2d:30:1c:0d:3a:fe:f7:
bf:7c:7a:62:9c:76:0b:0f:05:d2:a4:7c:60:25:e6:
e1:a1:b9:c3:c6:ae:1b:af:e3:4d:04:df:7c:31:05:
f3:9e:c3:fb:85:84:3c:e6:51:69:ae:58:b9:a8:a6:
53:e5:63:35:1d:2c:5a:86:96:38:ff:c7:b6:10:ff:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7D:25:18:53:E7:7A:4A:33:36:67:DE:E3:58:73:56:5F:EC:4D:8D
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b3:58:a0:da:77:da:91:9e:76:1b:14:f4:a7:e2:a7:59:4c:
df:80:cd:50:8a:0f:3b:57:a9:37:e8:c8:40:d1:75:c1:fb:a3:
d8:db:f3:7a:46:54:01:15:e6:f0:63:4e:f5:9f:82:fa:46:5d:
cf:6f:ca:a3:10:89:71:27:ad:4c:5e:ac:e4:9a:55:8e:3c:26:
03:10:6d:31:dc:f7:f2:be:d1:59:28:05:20:51:76:8a:f2:f3:
3c:ce:14:61:a5:91:f9:9c:9f:5f:0b:35:d7:ef:82:3d:d9:b4:
4f:c4:8d:61:7e:a7:12:02:0a:da:f3:59:b7:e8:0a:37:aa:96:
27:f0:ff:fc:d1:8a:92:06:c9:58:05:d2:57:8a:62:c8:e7:70:
f1:fe:64:8c:fc:cb:b3:1c:e4:f2:af:5c:23:b0:73:8b:46:bd:
02:0e:c2:85:b0:d1:6a:a5:fd:a8:76:9c:dd:cb:62:da:5b:2f:
74:2d:db:55:4d:06:be:50:1f:d4:4c:86:b2:dd:b6:5e:cd:15:
14:8f:4a:f7:13:ca:16:34:ea:ee:91:b1:32:e1:1c:94:79:c4:
51:cf:3b:bc:f1:e1:3a:62:28:2e:77:5b:11:d8:43:8e:4d:de:
ec:d1:87:82:b7:d8:e1:7a:a2:21:f9:3e:78:7b:8c:c6:16:d9:
62:c6:52:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:55:51 2026 by rpki-client