Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier: Wcm3qSl+Bae/5xDO9S5hBUWjrctYNNO+EnKyGIacYMg=
Subject key identifier: 4F:E8:0D:55:60:0C:A9:D7:F3:14:36:58:42:07:8A:17:C0:7E:9E:FA
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 019CED142928287EF14E93D0C5C977CD467C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number: 1870
Signing time: Sat 14 Mar 2026 16:00:47 +0000
Manifest this update: Sat 14 Mar 2026 16:00:47 +0000
Manifest next update: Sun 15 Mar 2026 16:00:47 +0000
Files and hashes: 1: 93UVF_CSKr9HS2r9ivD-x0ZdZcA.roa (hash: fggiKiNlO1nsG4KLwAlscuPV1NUEC9Woors8sqJhB4M=)
2: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: QT6gfxuyOoMsR/yK0xpVpH03LxarNy/G131b5Yk04xw=)
3: OK_s7EBfpgZbjIrvUoVqzpWaoEw.roa (hash: zZg+oBq+g5DuaneD38ld2ueNobqmEDE+dyirbFmQtoM=)
4: Sompo4sxvvROdjoZfiDq50faXfk.roa (hash: gEMQmsxvILpWDS8TIsfBnFHT3cfYRB4Lsa8x41J62hY=)
5: VxowdBzPqof9vzEqLjnkNBo4yck.roa (hash: OTDMhBcP+WbUFYsB8km0x2Ap8UBhFkwcBM0NKVz08Uw=)
6: dXyU9dvy-RL56kxAeM9aZtX19b4.roa (hash: Qdhb2+QEBYW0iPhxNt+tJQ5NTdnCyw9dULNf6sBX/ds=)
7: oJ2ks5YNwiHAq9WzT5_4e1nkYaE.roa (hash: bo5UpeN+wQ6nH/bLCuevf6K58UPiHvne75tCF8e9eKo=)
8: t1vkmCK8KzwYpdaOj2Z8K8WRkuE.roa (hash: cQGDZLaCNeANHuWk60qBEto7tZ5K0Q991hBY/3JdECg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:14:29:28:28:7e:f1:4e:93:d0:c5:c9:77:cd:46:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Mar 14 16:00:47 2026 GMT
Not After : Mar 15 16:00:47 2026 GMT
Subject: CN=4fe80d55600ca9d7f314365842078a17c07e9efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:06:a9:18:a5:08:b0:a9:cb:ee:5f:09:6c:d4:
a0:ac:61:6f:e6:f8:32:dd:22:da:64:5a:c0:39:6b:
c7:06:9a:e4:58:af:8b:fa:95:1c:4b:01:f4:53:a2:
c4:3a:7b:34:81:03:c8:a1:fc:cd:c2:b1:9e:10:3d:
ee:12:de:7d:29:a9:36:f9:55:3d:7b:bd:ca:37:25:
31:ea:1e:f4:d3:4a:b5:54:24:eb:fb:3b:36:6b:e4:
86:ee:24:53:0b:36:5f:9e:c4:09:ba:68:52:d8:c0:
35:bf:de:b6:89:74:f5:8b:13:8f:3c:59:1b:4a:21:
63:0a:9e:4b:9a:45:c1:42:9c:31:2a:87:f1:54:68:
47:45:6e:63:f7:94:da:0b:f0:0f:74:6a:15:61:95:
fe:64:ac:37:dd:7e:38:39:b7:0e:b8:82:e0:b7:22:
86:99:f9:ee:97:2e:ca:1d:73:7c:f2:6d:76:52:da:
27:3c:6a:92:45:8a:09:1d:b3:a8:ee:f4:0f:7f:2e:
b4:d5:d0:11:6f:23:1d:5d:b6:14:78:f0:a5:79:40:
a0:b4:54:6e:32:ba:b5:5b:1d:61:4b:2d:54:da:6d:
2c:20:e1:42:80:48:2a:8b:50:62:f6:7a:e1:89:82:
f3:9c:a3:02:b4:32:e1:58:3e:ae:44:1d:90:49:c1:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E8:0D:55:60:0C:A9:D7:F3:14:36:58:42:07:8A:17:C0:7E:9E:FA
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a0:c7:19:29:c5:4e:22:b0:e9:3d:7d:a2:67:3b:c9:a9:c5:
e4:6e:fc:93:ad:ec:1f:4e:6b:10:d5:ea:f5:a7:fd:a9:c6:52:
15:b5:65:bd:58:7a:31:e4:83:07:d0:c3:22:ef:86:3c:0d:81:
43:63:76:9f:df:10:9a:08:ec:1a:a6:a3:08:07:17:d5:2e:57:
55:06:ad:f3:e5:88:79:ab:60:8d:a8:f8:64:d9:fc:8f:94:84:
74:9e:b3:d9:a4:81:a7:0f:2d:c3:50:5c:5c:af:65:1d:2f:ec:
e0:41:34:7d:97:b1:e9:16:15:a8:5f:e2:b6:8f:28:af:14:fe:
21:1b:60:c6:62:be:54:44:70:31:18:42:ad:cb:10:9f:8f:98:
f8:7f:80:c0:8d:61:be:b7:e9:f1:84:49:21:de:64:95:71:1f:
81:f7:17:64:39:a9:12:ea:dc:26:f3:2b:20:4e:35:a6:d4:81:
57:c8:d3:18:cc:36:65:71:e2:69:06:ca:22:cc:8e:c8:78:4e:
ab:af:43:6a:73:7e:a2:53:c8:ab:32:99:c0:a6:b3:d8:93:b9:
c7:7a:66:a6:e5:4d:21:44:1d:6a:68:d1:82:f3:2e:46:19:31:
74:5e:42:93:76:d6:22:05:c5:b4:c8:de:91:a8:fa:23:2b:be:
7a:19:e1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 22:45:54 2026 by rpki-client