
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
File: NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft (raw, json)
Hash identifier: svOIS2VnWI+aLa3Gr0SqcupCxsqmypqrP5NKKdiH2Iw=
Subject key identifier: 04:AB:5E:96:EA:38:C3:66:6A:29:69:6F:2C:ED:29:36:D3:81:59:4F
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 019E5892C0F5DC6B1636336732653F770C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
Manifest number: 0F8C
Signing time: Sun 24 May 2026 06:01:13 +0000
Manifest this update: Sun 24 May 2026 06:01:13 +0000
Manifest next update: Mon 25 May 2026 06:01:13 +0000
Files and hashes: 1: NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl (hash: +p6w6h1b7MVc3oH6pVRBTAsRYb9K3QTeBYLMWVREj2Y=)
2: OyB8W9_wA5wbpLXiXUV8OttkP34.roa (hash: 0Tul/Q70maJ+aYBSNOe7pTN1kLta1YDTWvdIAUQpUg4=)
3: To1bIGbGp5M1LHEOYaAsoYMvFHM.roa (hash: J8108bKHwwomV0pOsdiePFOse+rC/Obmy+4s0xm8yGA=)
4: mnDV37o17I0BMCtvgbbSLcAn6Bc.roa (hash: Zf56A5N3eze8bYTELdKSyu3EXVQqDU3l8BuGCW7L2tc=)
5: so34H4EHsb2bvFRzdgNld87kNq8.roa (hash: tntM2l7FDBGtsKGRGPXiqst0BOOsbh2THcmt/BZuxRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:58:92:c0:f5:dc:6b:16:36:33:67:32:65:3f:77:0c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: May 24 06:01:13 2026 GMT
Not After : May 25 06:01:13 2026 GMT
Subject: CN=04ab5e96ea38c3666a29696f2ced2936d381594f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:48:2c:3b:e0:c2:1f:8b:8f:b7:78:3e:cb:
da:f9:c4:93:d4:4c:c9:d7:6c:b2:7d:e6:e8:2b:e7:
17:39:84:d0:06:6d:57:f7:80:50:3f:b9:b3:a6:75:
aa:76:53:ff:b8:ab:49:ae:74:2b:86:56:3e:05:55:
f7:6f:5b:b7:9b:01:69:6e:c5:e9:a0:d7:46:13:00:
a6:a0:45:b9:55:ce:0c:04:d7:f0:67:5a:65:3b:dc:
0e:96:4f:1e:1b:52:d3:ba:28:ad:5b:42:3c:a6:0d:
2c:5c:5c:37:7b:05:4f:3f:21:ba:be:ab:8b:64:36:
0d:20:ef:b7:a9:77:96:38:69:02:af:57:a2:6f:a3:
8a:44:c1:20:86:99:e4:27:31:f2:d6:24:65:b3:4a:
1c:4b:f8:ac:59:6b:34:d3:18:89:1f:62:d9:00:d1:
89:ab:ad:98:de:62:36:fb:14:de:f6:fa:1b:6b:a5:
8f:58:3c:fd:70:19:ed:b2:32:92:ce:49:23:d5:b1:
24:5a:71:e2:c4:d9:0a:09:16:c2:c3:0a:a8:a0:89:
97:8f:91:4b:27:5b:45:a3:ea:44:f5:8a:e7:99:ae:
da:7e:39:45:d5:f2:23:62:14:68:1c:80:c9:56:04:
34:80:71:67:3c:da:0c:55:83:55:9b:ef:62:ee:b7:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AB:5E:96:EA:38:C3:66:6A:29:69:6F:2C:ED:29:36:D3:81:59:4F
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a8:5f:4e:6a:e3:90:e6:5d:06:0c:98:fb:b7:46:5a:42:05:
22:3a:c5:9e:0c:43:3a:d8:37:f5:c6:bc:98:2e:78:63:a4:8e:
df:1e:a2:46:01:3f:dc:f8:58:df:db:61:85:e7:af:d7:50:5c:
c3:9f:f7:92:2d:42:d5:a2:48:97:47:2b:d0:14:ca:03:cf:a3:
64:e3:15:90:7b:77:34:2a:49:0e:7c:c5:cf:8d:1a:17:07:c2:
98:80:e7:82:00:97:16:5e:5a:2b:e7:5a:e7:e8:e3:9a:71:30:
73:d1:d7:a4:d4:14:e0:66:37:87:27:22:cd:71:a2:f5:77:a0:
29:85:e6:cf:b8:ce:5a:e7:3f:f4:53:7e:14:8c:83:5c:1c:37:
8c:b8:9c:70:ab:fa:01:a7:99:a2:e3:90:59:38:d6:c3:26:bd:
ab:dc:cc:a3:85:e9:3a:e7:d3:98:25:fa:db:f3:d4:17:a0:51:
53:26:2f:a1:e7:ce:1e:60:d6:cf:b3:80:ef:f8:e5:34:6b:bc:
54:8f:2b:ed:2e:1a:0c:ee:4b:c3:0c:4b:3b:da:c3:20:32:3d:
39:2e:d0:e9:5c:f1:a7:7a:29:fe:5c:9f:23:5b:19:c6:25:f6:
e5:da:6a:7d:d8:c8:66:af:ca:af:9c:a6:e8:e9:43:d5:4b:61:
22:b0:f2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 11:02:54 2026 by rpki-client