Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
File: nTXgMBWeVx-qvTebUsHZoa77FEQ.mft (raw, json)
Hash identifier: amlse7nl0vylik6s4GcitGHG+7Cpns52CUlNj66sElQ=
Subject key identifier: 5A:73:FE:61:49:30:08:B5:FB:79:8C:C8:6C:7B:A6:4F:76:6C:51:AB
Authority key identifier: 9D:35:E0:30:15:9E:57:1F:AA:BD:37:9B:52:C1:D9:A1:AE:FB:14:44
Certificate issuer: /CN=9d35e030159e571faabd379b52c1d9a1aefb1444
Certificate serial: 019D394129C7248E64C4A16985F78DDF80BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
Manifest number: 0318
Signing time: Sun 29 Mar 2026 11:01:04 +0000
Manifest this update: Sun 29 Mar 2026 11:01:04 +0000
Manifest next update: Mon 30 Mar 2026 11:01:04 +0000
Files and hashes: 1: nTXgMBWeVx-qvTebUsHZoa77FEQ.crl (hash: Gr893Sy/CsPkQW1gE+NNoAMPgsi/vLxP+1untpo2VPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:29:c7:24:8e:64:c4:a1:69:85:f7:8d:df:80:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d35e030159e571faabd379b52c1d9a1aefb1444
Validity
Not Before: Mar 29 11:01:04 2026 GMT
Not After : Mar 30 11:01:04 2026 GMT
Subject: CN=5a73fe61493008b5fb798cc86c7ba64f766c51ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:5d:3c:1e:27:b8:f1:e6:42:eb:bc:a2:77:
18:2f:a8:50:dd:67:e3:f0:d2:78:78:d2:e2:19:25:
c6:f5:9d:a9:b4:3a:93:2c:a1:c8:ff:1f:f0:f0:6b:
ae:16:06:43:1d:46:fe:74:26:40:d1:e9:42:7e:3c:
cb:fc:7b:68:88:50:f9:7d:a5:c0:67:cc:6e:c5:ca:
9d:14:76:55:24:da:2c:4a:32:20:69:60:7e:24:ba:
01:04:85:2d:1a:32:a8:37:af:09:cb:f9:78:9f:84:
8e:bc:b3:c2:bc:75:52:8e:41:11:b6:1b:44:9c:36:
fd:04:1d:54:48:2b:e0:3f:6b:f5:df:d0:96:41:e5:
fd:24:b2:28:a6:19:31:2e:58:21:39:5b:ab:7d:b3:
8b:9b:bf:70:7c:6c:88:82:8c:c9:9f:d7:43:dc:8f:
0a:e3:3d:eb:91:53:a0:c4:82:4d:01:0e:b8:5a:c3:
4b:b6:ba:b6:37:b7:5f:57:cf:40:27:77:ff:08:5b:
36:fa:79:63:1a:91:4e:6a:3e:05:9b:59:1b:83:9c:
6c:3a:52:50:f2:7d:c8:31:a1:e2:6a:4c:60:8e:55:
e2:45:3f:3c:43:1b:76:60:31:02:78:10:e4:60:6f:
cc:4b:ab:c1:72:48:ee:6b:58:52:88:a9:5c:23:a4:
05:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:73:FE:61:49:30:08:B5:FB:79:8C:C8:6C:7B:A6:4F:76:6C:51:AB
X509v3 Authority Key Identifier:
keyid:9D:35:E0:30:15:9E:57:1F:AA:BD:37:9B:52:C1:D9:A1:AE:FB:14:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1b:e1:06:c6:50:a3:dc:55:db:b2:e2:05:fe:6a:fa:94:34:
fe:ef:39:d7:67:d7:8b:bf:a7:d1:e3:8c:eb:27:c3:24:64:f3:
06:0f:67:a3:05:dd:ff:42:f7:df:c5:7a:f1:7d:1b:52:4f:53:
61:95:13:2e:4b:03:59:94:19:42:65:83:0d:15:05:e1:39:76:
07:78:70:3a:80:ed:cb:36:87:c5:6b:e8:79:7d:a3:aa:ad:e6:
a8:42:07:13:62:a9:e6:c7:e6:f7:6b:ca:c1:04:00:08:e5:d4:
27:8b:21:51:8f:bf:77:ae:75:e9:03:2b:31:60:91:0c:a6:52:
37:e7:2e:ca:87:fd:83:84:47:9c:ed:10:e9:39:a4:06:8e:7d:
71:8d:e3:bf:3b:49:c1:f2:9e:61:b6:fc:a9:47:15:aa:7c:ab:
8d:22:47:44:9d:bd:d2:11:46:df:54:ae:18:3a:bc:b8:48:f0:
40:74:43:7c:5a:52:d9:c0:8d:d9:ab:54:78:1b:0e:69:6a:79:
ae:88:b3:a2:da:07:80:61:84:6b:b6:22:4f:18:bf:e3:00:27:
8e:91:b2:54:e5:79:9f:86:44:42:f2:8d:f6:b0:75:b2:cc:fb:
f1:6e:b0:5b:bf:6b:fb:7c:7b:81:64:6d:5b:b9:9c:0f:04:cd:
c7:b5:a4:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QSnHJI5kxKFphfeN34C/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMzVlMDMwMTU5ZTU3MWZhYWJkMzc5YjUyYzFkOWExYWVm
YjE0NDQwHhcNMjYwMzI5MTEwMTA0WhcNMjYwMzMwMTEwMTA0WjAzMTEwLwYDVQQD
Eyg1YTczZmU2MTQ5MzAwOGI1ZmI3OThjYzg2YzdiYTY0Zjc2NmM1MWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkBdPB4nuPHmQuu8oncYL6hQ3Wfj
8NJ4eNLiGSXG9Z2ptDqTLKHI/x/w8GuuFgZDHUb+dCZA0elCfjzL/HtoiFD5faXA
Z8xuxcqdFHZVJNosSjIgaWB+JLoBBIUtGjKoN68Jy/l4n4SOvLPCvHVSjkERthtE
nDb9BB1USCvgP2v139CWQeX9JLIophkxLlghOVurfbOLm79wfGyIgozJn9dD3I8K
4z3rkVOgxIJNAQ64WsNLtrq2N7dfV89AJ3f/CFs2+nljGpFOaj4Fm1kbg5xsOlJQ
8n3IMaHiakxgjlXiRT88Qxt2YDECeBDkYG/MS6vBckjua1hSiKlcI6QFtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpz/mFJMAi1+3mMyGx7pk92bFGrMB8GA1UdIwQY
MBaAFJ014DAVnlcfqr03m1LB2aGu+xREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblRYZ01CV2VWeC1xdlRlYlVzSFpvYTc3RkVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZDczMjMtOWU4NC00Zjg3LWI1Zjkt
Mjg2YTgyOGRkN2Q1LzEvblRYZ01CV2VWeC1xdlRlYlVzSFpvYTc3RkVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83ZDczMjMtOWU4NC00Zjg3LWI1ZjktMjg2YTgyOGRkN2Q1
LzEvblRYZ01CV2VWeC1xdlRlYlVzSFpvYTc3RkVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRvhBsZQ
o9xV27LiBf5q+pQ0/u8512fXi7+n0eOM6yfDJGTzBg9nowXd/0L338V68X0bUk9T
YZUTLksDWZQZQmWDDRUF4Tl2B3hwOoDtyzaHxWvoeX2jqq3mqEIHE2Kp5sfm92vK
wQQACOXUJ4shUY+/d6516QMrMWCRDKZSN+cuyof9g4RHnO0Q6TmkBo59cY3jvztJ
wfKeYbb8qUcVqnyrjSJHRJ290hFG31SuGDq8uEjwQHRDfFpS2cCN2atUeBsOaWp5
roizotoHgGGEa7YiTxi/4wAnjpGyVOV5n4ZEQvKN9rB1ssz78W6wW79r+3x7gWRt
W7mcDwTNx7Wk7Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:32 2026 by rpki-client