Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
File: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft (raw, json)
Hash identifier: bDOaoe4lsKPay4PvNbsEwIid8SLdSOPEXnxQqRkk6Qw=
Subject key identifier: 65:6A:D4:FF:D5:DC:E2:29:3A:86:61:3E:EF:FC:FC:C1:E5:4C:7C:D7
Authority key identifier: 36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
Certificate issuer: /CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Certificate serial: 019D38D2DFDAC17E9D3205F05C88260D434F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
Manifest number: 057D
Signing time: Sun 29 Mar 2026 09:00:37 +0000
Manifest this update: Sun 29 Mar 2026 09:00:37 +0000
Manifest next update: Mon 30 Mar 2026 09:00:37 +0000
Files and hashes: 1: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl (hash: dvC35jCV7VUJwx8ZPqNTvz5/qITMYeAnjU6SZAKp1nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:df:da:c1:7e:9d:32:05:f0:5c:88:26:0d:43:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Validity
Not Before: Mar 29 09:00:37 2026 GMT
Not After : Mar 30 09:00:37 2026 GMT
Subject: CN=656ad4ffd5dce2293a86613eeffcfcc1e54c7cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:09:f2:f9:89:2c:1f:31:a3:79:d7:2e:b5:
32:d6:54:c3:da:bd:8c:30:dd:6e:05:c5:d4:5b:b7:
16:b3:d2:fb:2d:9f:47:f3:4b:40:98:fa:cd:b4:a1:
d0:6c:44:36:b9:c7:2e:1c:d3:2b:7e:8d:d4:bb:2e:
91:63:29:34:dd:d5:e0:d4:b3:27:96:1c:9e:41:8d:
7e:5a:26:4f:63:b6:8c:6b:b8:a0:89:f7:2b:d5:2f:
15:5e:6c:47:ca:cd:d2:98:8c:fe:41:d3:f5:bb:00:
b0:d2:33:76:31:61:90:fa:58:4f:59:34:dd:e5:d2:
cb:c4:ab:c1:31:99:82:e0:e9:e7:52:45:fb:ea:b8:
a0:49:e3:43:53:bd:76:b7:01:0b:66:39:6a:c4:84:
ab:47:a1:44:7b:be:09:ea:10:70:62:65:d2:cb:d1:
58:53:80:08:94:23:2a:50:12:f7:94:bc:32:cf:38:
49:ce:18:3b:36:07:e6:d7:12:ee:10:98:45:98:5a:
9b:80:0a:9b:ff:b5:67:e4:8d:80:c4:2e:21:d2:1d:
61:c3:dd:51:92:37:e4:4f:c6:24:21:3b:25:fb:d1:
e5:05:40:cc:ce:3e:48:24:f1:c5:6f:2d:e4:06:f8:
28:45:c2:7e:41:6a:1d:e6:76:a1:46:38:3d:f7:a0:
84:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6A:D4:FF:D5:DC:E2:29:3A:86:61:3E:EF:FC:FC:C1:E5:4C:7C:D7
X509v3 Authority Key Identifier:
keyid:36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:7f:d4:6b:43:c0:08:b5:a5:cc:5e:7c:52:cf:e6:d4:e1:7e:
ee:a6:bf:07:49:0b:a0:6a:63:af:b9:f4:67:e2:0a:ac:98:0f:
f6:10:85:ee:99:81:7e:11:99:4a:46:a5:51:a2:53:f3:b8:d5:
30:04:4b:19:18:fb:1c:7a:e4:b7:73:a0:25:c7:67:fe:20:6b:
9a:53:77:d1:d3:e9:80:46:d0:1c:70:49:d2:a6:06:c5:19:dd:
23:a5:67:f4:8a:3f:06:dc:f9:2a:2d:b5:54:50:20:ba:c0:1b:
8b:15:c5:f9:a1:67:ee:da:7a:66:99:e2:da:85:cc:03:78:31:
0c:39:28:de:5d:5b:c3:28:1b:a6:b2:32:85:61:3f:08:7c:32:
c2:fa:e3:52:9d:43:23:42:b7:63:96:43:6e:43:50:89:c2:99:
63:d4:ea:ec:86:8e:fc:89:13:c0:75:68:92:00:3e:eb:60:3e:
6b:77:32:e5:3d:e2:4f:52:24:3c:18:1d:9f:ee:64:13:49:d9:
c4:4f:7d:1e:0b:36:a1:81:4c:9a:92:9e:63:63:65:a0:e9:51:
98:5f:a9:5a:19:16:5e:00:d5:fd:3f:e1:f6:52:2d:dc:10:c9:
ad:c7:aa:c4:17:fc:69:ff:56:c8:ba:31:0a:52:a1:d0:73:45:
f3:8a:ee:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040t/awX6dMgXwXIgmDUNPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NmZhMGNhMThhZmYyMTRlYzA1YjVkNDc4MGViM2M2ZWVl
NjZlM2UwHhcNMjYwMzI5MDkwMDM3WhcNMjYwMzMwMDkwMDM3WjAzMTEwLwYDVQQD
Eyg2NTZhZDRmZmQ1ZGNlMjI5M2E4NjYxM2VlZmZjZmNjMWU1NGM3Y2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV4J8vmJLB8xo3nXLrUy1lTD2r2M
MN1uBcXUW7cWs9L7LZ9H80tAmPrNtKHQbEQ2uccuHNMrfo3Uuy6RYyk03dXg1LMn
lhyeQY1+WiZPY7aMa7igifcr1S8VXmxHys3SmIz+QdP1uwCw0jN2MWGQ+lhPWTTd
5dLLxKvBMZmC4OnnUkX76rigSeNDU712twELZjlqxISrR6FEe74J6hBwYmXSy9FY
U4AIlCMqUBL3lLwyzzhJzhg7Ngfm1xLuEJhFmFqbgAqb/7Vn5I2AxC4h0h1hw91R
kjfkT8YkITsl+9HlBUDMzj5IJPHFby3kBvgoRcJ+QWod5nahRjg996CECQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVq1P/V3OIpOoZhPu/8/MHlTHzXMB8GA1UdIwQY
MBaAFDZvoMoYr/IU7AW11HgOs8bu5m4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm0tZ3loaXY4aFRzQmJYVWVBNnp4dTdtYmo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82NTQ0ODctOWEyZC00ZjY3LThmNzMt
ODZlMzY0MmMwNTIzLzEvTm0tZ3loaXY4aFRzQmJYVWVBNnp4dTdtYmo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS82NTQ0ODctOWEyZC00ZjY3LThmNzMtODZlMzY0MmMwNTIz
LzEvTm0tZ3loaXY4aFRzQmJYVWVBNnp4dTdtYmo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAln/Ua0PA
CLWlzF58Us/m1OF+7qa/B0kLoGpjr7n0Z+IKrJgP9hCF7pmBfhGZSkalUaJT87jV
MARLGRj7HHrkt3OgJcdn/iBrmlN30dPpgEbQHHBJ0qYGxRndI6Vn9Io/Btz5Ki21
VFAgusAbixXF+aFn7tp6Zpni2oXMA3gxDDko3l1bwygbprIyhWE/CHwywvrjUp1D
I0K3Y5ZDbkNQicKZY9Tq7IaO/IkTwHVokgA+62A+a3cy5T3iT1IkPBgdn+5kE0nZ
xE99Hgs2oYFMmpKeY2NloOlRmF+pWhkWXgDV/T/h9lIt3BDJrceqxBf8af9WyLox
ClKh0HNF84rutQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:31 2026 by rpki-client