Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
File: Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json)
Hash identifier: hkupxdQb3h49PHmLe505poTDwfPPLytbcDwjACaxjiw=
Subject key identifier: DF:6E:14:2A:B5:44:EF:D9:2D:8D:13:CA:1C:D6:69:6C:60:2C:D4:AC
Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Certificate serial: 019D39415E8ED525CE8C9E6286ECC3CA65B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
Manifest number: 0BDB
Signing time: Sun 29 Mar 2026 11:01:18 +0000
Manifest this update: Sun 29 Mar 2026 11:01:18 +0000
Manifest next update: Mon 30 Mar 2026 11:01:18 +0000
Files and hashes: 1: HTK96uRhaCPEIKPa_uJkVUtYSro.roa (hash: YJYJVj428OJsUTfvfAdi4uBETofBiuE9K+NdS6ELexs=)
2: JQ2CDROzVuWPqXgateu16umo7lg.roa (hash: hQj8e4a5l+cytVF32sZTUFxC34J67XezC9sSXBkuvQg=)
3: Nd50iVrPYors-OE3V9sF40Sl2Ws.roa (hash: 8W9R9422ra+klJo6tlOJASq6q8gfKHZchw1aKhxM8nI=)
4: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: cppzE72VWkkEPS9MN43Q4DuXn5RhCdJAbyzJ1bp5kaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:5e:8e:d5:25:ce:8c:9e:62:86:ec:c3:ca:65:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Validity
Not Before: Mar 29 11:01:18 2026 GMT
Not After : Mar 30 11:01:18 2026 GMT
Subject: CN=df6e142ab544efd92d8d13ca1cd6696c602cd4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:71:d1:aa:0c:0d:4f:04:96:49:46:2a:90:
e0:b5:a4:dd:70:70:02:0c:84:96:6c:25:26:d2:a8:
f5:6a:52:17:66:b4:ad:97:15:e6:0a:a8:f5:47:6c:
f9:1a:c3:51:7f:24:a8:76:7b:e1:22:57:e4:ff:6d:
c0:b6:ea:da:6b:9c:6a:1d:e8:58:ac:da:2e:d4:00:
2d:c5:a4:db:7b:e8:5e:97:47:48:a3:9b:46:89:20:
ce:09:0f:3f:0f:4b:c3:14:3a:d4:5b:a1:07:dd:95:
f0:86:26:54:10:cc:13:5e:33:88:7d:51:3a:cc:30:
a1:25:87:1a:55:33:26:1f:29:db:64:e5:78:9d:72:
b4:f4:0c:35:94:29:04:cb:4e:6c:bb:0b:26:7c:66:
e3:66:33:2a:c0:2a:42:9d:87:7d:62:d2:9d:58:e3:
1f:07:d0:d4:70:7e:e0:65:7f:3b:24:2c:79:bb:c8:
cc:45:30:27:db:d9:83:25:73:cd:c4:1e:ef:67:b0:
09:d0:f8:51:02:64:91:73:33:40:b4:52:37:82:78:
83:53:3b:3f:a2:bc:e9:25:a4:d4:5b:ed:2c:de:fe:
50:24:be:e4:3c:0e:74:6e:4a:8e:27:37:c1:7e:9c:
60:9a:b9:fc:14:3a:2f:80:6e:63:7f:75:58:79:be:
07:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6E:14:2A:B5:44:EF:D9:2D:8D:13:CA:1C:D6:69:6C:60:2C:D4:AC
X509v3 Authority Key Identifier:
keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e6:ad:ee:bf:0a:c4:08:ed:5a:00:ee:7d:65:37:94:ef:46:
94:67:79:8e:dc:3b:16:f6:30:14:d8:3a:a4:aa:a8:21:18:b1:
7c:94:e0:21:d8:7e:65:31:de:1c:a4:da:5f:a1:49:33:82:a4:
1f:3d:db:22:48:6c:e6:d0:cf:2c:6c:cd:db:09:52:c8:91:11:
42:13:74:bd:ec:77:66:e8:f7:1c:95:69:5f:2d:6a:1f:f9:64:
92:2c:50:0c:d4:5e:f9:ae:73:b3:ff:97:8f:96:db:dd:70:19:
15:80:14:f8:8f:5d:d9:b9:4e:87:56:7f:d5:1c:85:45:31:91:
9f:49:28:4f:a4:af:70:d6:1b:34:9e:4d:72:d8:59:d6:88:15:
e5:5a:5c:29:f7:5f:01:f9:a0:2f:fd:c2:b6:09:a0:d4:c8:28:
dc:e3:ed:b7:a6:7f:74:14:43:96:81:1a:9f:d1:01:20:73:49:
0c:53:5c:ec:51:cc:db:10:bd:46:ca:3f:c9:ff:14:cb:7b:b5:
6e:8c:18:7e:4c:96:44:08:ed:25:5b:95:76:f8:6c:5e:55:5f:
d7:69:5e:51:c0:4b:cf:69:de:68:65:6d:6b:31:86:1b:6f:ec:
e7:66:88:5b:10:75:31:45:a7:55:33:82:22:e6:10:4b:99:4e:
32:bf:8e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:50:19 2026 by rpki-client