Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
File: NhF6aBWpGEeNP4wA1nGlcWa_7so.mft (raw, json)
Hash identifier: tFm2GOWx3XOL+2ay+rrt5/rEm5CHnw6XNXTI9vfNFHM=
Subject key identifier: 93:2A:07:E0:ED:2F:64:DC:C6:B2:67:08:95:E3:EE:6A:81:7E:F8:C9
Authority key identifier: 36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
Certificate issuer: /CN=36117a6815a918478d3f8c00d671a57166bfeeca
Certificate serial: 019D39E5D6213A5670E21E14431C28516A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
Manifest number: 0929
Signing time: Sun 29 Mar 2026 14:00:57 +0000
Manifest this update: Sun 29 Mar 2026 14:00:57 +0000
Manifest next update: Mon 30 Mar 2026 14:00:57 +0000
Files and hashes: 1: NhF6aBWpGEeNP4wA1nGlcWa_7so.crl (hash: pP3yyyhWSIQaWyRsG/ucsaWrJ5twubyJADCczXMHhYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:d6:21:3a:56:70:e2:1e:14:43:1c:28:51:6a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36117a6815a918478d3f8c00d671a57166bfeeca
Validity
Not Before: Mar 29 14:00:57 2026 GMT
Not After : Mar 30 14:00:57 2026 GMT
Subject: CN=932a07e0ed2f64dcc6b2670895e3ee6a817ef8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0b:da:e7:3a:26:4d:75:8f:f4:68:23:08:51:
07:97:43:46:eb:8f:0d:e1:56:90:b3:5a:18:87:73:
6a:bc:f5:94:bf:83:e3:56:24:e5:c5:6d:4e:8f:18:
99:ad:3e:4c:82:2e:3f:a5:81:48:49:f5:3b:2c:8a:
15:53:71:06:03:e9:89:b5:f7:3d:e9:5c:97:b7:12:
57:0b:95:4f:32:3e:b0:dd:d8:b5:68:6e:9f:f1:1e:
30:1f:7f:56:66:57:1f:0e:5c:eb:1f:62:c5:0a:13:
1b:ac:3f:b4:cd:a5:d9:56:a0:0b:72:85:fb:7d:70:
22:f1:b5:59:2c:b5:bb:e5:f7:84:85:c5:70:9b:ff:
22:09:a9:f1:03:e7:58:f4:ac:b8:13:c0:fb:c6:4f:
d3:c2:2f:c2:4f:aa:36:b6:db:15:29:76:58:ec:be:
c3:3d:09:39:b1:87:9e:1e:cf:79:b3:ee:ad:0b:2d:
5c:c9:ab:4f:f4:fa:ff:9d:d1:30:fc:f8:f2:5f:f7:
2e:73:db:41:fd:6d:9b:6a:da:d2:c5:ec:3d:f4:36:
fb:40:27:1f:b2:61:5f:61:2a:19:c6:84:db:cb:dd:
92:2e:73:9a:83:d1:69:33:5f:88:c5:1b:50:6e:87:
d4:21:dc:1c:6b:54:d0:5b:59:c8:6f:2b:b2:52:0a:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2A:07:E0:ED:2F:64:DC:C6:B2:67:08:95:E3:EE:6A:81:7E:F8:C9
X509v3 Authority Key Identifier:
keyid:36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f3:03:5a:74:ea:f4:75:f0:94:f8:5d:23:ce:e5:a7:73:de:
49:8a:90:5e:63:c4:0e:89:33:b9:e0:1a:f3:78:0c:17:02:a9:
22:6b:1c:34:5d:1e:b1:55:5c:09:a7:df:b2:3b:b9:36:94:12:
f9:ef:16:a9:3a:c6:39:22:67:b0:46:88:92:2a:ce:5f:1d:14:
bb:74:f2:eb:04:96:97:b4:7c:31:4b:97:0b:7a:00:ce:cc:08:
56:e6:24:9b:95:5f:c6:e7:b5:cc:42:4e:24:e9:6c:7d:7e:bd:
f4:a5:c5:5a:aa:5e:c1:5e:3c:f7:d9:24:b4:1b:58:37:32:eb:
f6:42:56:85:11:9f:3e:39:06:23:c8:8e:f6:2b:67:bd:6f:d1:
84:00:ec:6e:b2:db:34:1e:25:d5:33:74:19:ad:b5:cb:1e:c5:
0c:8c:fb:83:8e:a2:44:1e:fa:fb:f1:ae:20:a0:75:0c:01:1f:
01:ad:51:c1:89:55:ce:c2:6b:e3:be:de:f1:3b:8a:96:65:f9:
19:09:c9:74:23:e1:5d:f2:4a:4f:ca:f3:77:17:15:a0:d4:fd:
d9:66:c7:60:7c:f6:fe:66:69:e2:6a:e3:c7:7c:1f:e9:fb:4e:
38:f4:05:50:d4:6c:b2:fe:cb:f5:1a:d4:1c:8f:c8:b7:af:d7:
85:b7:50:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055dYhOlZw4h4UQxwoUWosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTE3YTY4MTVhOTE4NDc4ZDNmOGMwMGQ2NzFhNTcxNjZi
ZmVlY2EwHhcNMjYwMzI5MTQwMDU3WhcNMjYwMzMwMTQwMDU3WjAzMTEwLwYDVQQD
Eyg5MzJhMDdlMGVkMmY2NGRjYzZiMjY3MDg5NWUzZWU2YTgxN2VmOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Qva5zomTXWP9GgjCFEHl0NG648N
4VaQs1oYh3NqvPWUv4PjViTlxW1OjxiZrT5Mgi4/pYFISfU7LIoVU3EGA+mJtfc9
6VyXtxJXC5VPMj6w3di1aG6f8R4wH39WZlcfDlzrH2LFChMbrD+0zaXZVqALcoX7
fXAi8bVZLLW75feEhcVwm/8iCanxA+dY9Ky4E8D7xk/Twi/CT6o2ttsVKXZY7L7D
PQk5sYeeHs95s+6tCy1cyatP9Pr/ndEw/PjyX/cuc9tB/W2batrSxew99Db7QCcf
smFfYSoZxoTby92SLnOag9FpM1+IxRtQbofUIdwca1TQW1nIbyuyUgrneQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMqB+DtL2TcxrJnCJXj7mqBfvjJMB8GA1UdIwQY
MBaAFDYRemgVqRhHjT+MANZxpXFmv+7KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhGNmFCV3BHRWVOUDR3QTFuR2xjV2FfN3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jYmI3NDEtYjY5Mi00ZjA5LThjYmEt
YzZhZWM2OGFiMzY0LzEvTmhGNmFCV3BHRWVOUDR3QTFuR2xjV2FfN3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jYmI3NDEtYjY5Mi00ZjA5LThjYmEtYzZhZWM2OGFiMzY0
LzEvTmhGNmFCV3BHRWVOUDR3QTFuR2xjV2FfN3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifMDWnTq
9HXwlPhdI87lp3PeSYqQXmPEDokzueAa83gMFwKpImscNF0esVVcCaffsju5NpQS
+e8WqTrGOSJnsEaIkirOXx0Uu3Ty6wSWl7R8MUuXC3oAzswIVuYkm5Vfxue1zEJO
JOlsfX699KXFWqpewV4899kktBtYNzLr9kJWhRGfPjkGI8iO9itnvW/RhADsbrLb
NB4l1TN0Ga21yx7FDIz7g46iRB76+/GuIKB1DAEfAa1RwYlVzsJr477e8TuKlmX5
GQnJdCPhXfJKT8rzdxcVoNT92WbHYHz2/mZp4mrjx3wf6ftOOPQFUNRssv7L9RrU
HI/It6/XhbdQpA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:33 2026 by rpki-client