Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
File: Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft (raw, json)
Hash identifier: gFyKGIIkCwgCnw/YPmp3TF9jDR3mETQ51i3oIdcYyw4=
Subject key identifier: 89:FC:3C:1D:1B:F2:3F:37:9A:9C:B9:E4:BB:08:80:7A:1A:56:3D:81
Authority key identifier: 36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB
Certificate issuer: /CN=36fedfeccfd00f577cb791f8e43aa659262e93db
Certificate serial: 019D382DD9E5082456EB4BE67778FCF939F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
Manifest number: 02BD
Signing time: Sun 29 Mar 2026 06:00:22 +0000
Manifest this update: Sun 29 Mar 2026 06:00:22 +0000
Manifest next update: Mon 30 Mar 2026 06:00:22 +0000
Files and hashes: 1: Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl (hash: J+SNI95dncApgmj3Quhi6J7zO2o54HMHVsqMmQ/+q94=)
2: iloUVLRqtoal6LUpk2_xa7xOnZg.roa (hash: VBxsjAoKIrvki5mLaeRbqq1p9mC/zepjwgxGu4sJgFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d9:e5:08:24:56:eb:4b:e6:77:78:fc:f9:39:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fedfeccfd00f577cb791f8e43aa659262e93db
Validity
Not Before: Mar 29 06:00:22 2026 GMT
Not After : Mar 30 06:00:22 2026 GMT
Subject: CN=89fc3c1d1bf23f379a9cb9e4bb08807a1a563d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:80:51:1a:c0:33:8f:77:0d:0a:1b:cd:0e:
1e:5d:cf:92:33:98:5e:fe:1d:1e:75:ed:e7:50:60:
c3:fb:0f:93:90:32:dd:e2:67:3e:f2:72:5f:e8:48:
ed:98:cd:f7:9a:1b:b0:93:17:c8:dc:c6:a3:d2:32:
85:36:7c:49:2b:e0:7f:49:a1:aa:e5:a2:23:94:41:
19:2d:1c:f6:41:75:4f:64:b1:8a:89:f4:09:00:9a:
86:09:e1:1e:22:27:73:42:3f:04:b0:6b:3b:0c:21:
7f:bb:d7:18:d9:8c:7d:cc:b0:bf:d0:00:ea:30:6e:
d6:16:68:ce:05:75:3a:f5:f9:8b:02:6e:76:2b:a3:
5f:a8:12:c7:33:18:14:47:f2:f2:d8:5c:8b:1f:91:
0c:27:7b:28:a5:0f:c4:86:e3:e1:1d:49:11:db:1a:
31:b0:35:70:b0:71:fe:ec:f9:ce:4e:4c:3b:19:0b:
da:87:04:55:73:63:4c:b5:92:48:8c:61:04:e5:ad:
d0:9b:ef:7d:bb:11:b3:40:a8:78:14:df:49:17:d6:
ff:5d:ab:92:9f:53:d6:d0:07:25:75:c8:35:4c:f9:
5b:42:a6:25:eb:c0:2d:88:c0:d6:1a:c0:bc:0a:f5:
11:db:ff:7c:d2:96:81:b5:85:8f:bf:8e:2c:3c:43:
67:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FC:3C:1D:1B:F2:3F:37:9A:9C:B9:E4:BB:08:80:7A:1A:56:3D:81
X509v3 Authority Key Identifier:
keyid:36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ce:45:25:84:5a:54:df:0c:c0:8e:c4:a3:7e:2f:48:8d:8c:
2a:51:95:35:af:b8:62:6c:e1:b1:92:c5:43:55:38:13:56:98:
20:13:54:e5:ce:c4:8c:93:d0:bd:b1:4c:05:24:8a:81:ef:d0:
a1:db:c0:d8:7d:29:2e:11:32:ad:0a:65:44:13:c1:c3:3c:17:
35:29:45:23:5f:1e:12:b4:19:3a:87:8c:8b:cb:d5:bf:f5:89:
d4:af:62:7a:14:e9:80:4b:ff:8a:5c:74:da:90:9c:6c:04:31:
00:83:6b:26:2b:81:7f:d9:41:00:98:06:f6:ab:52:9e:b5:08:
08:13:bf:87:f3:65:61:ad:2c:b9:26:3c:1d:9b:a2:71:d6:2e:
00:7a:9f:52:d7:8e:ab:4e:50:5c:97:8f:2c:42:1f:98:23:df:
23:57:56:47:80:75:0d:97:f4:43:6f:f6:cd:20:4a:67:df:7f:
42:8b:ec:c7:b2:b5:93:79:9c:d4:02:85:c5:8d:01:67:3d:f2:
88:e7:04:3e:b1:35:4c:54:41:44:3b:c0:81:a9:2c:0d:16:8e:
55:d7:c4:6c:36:d9:58:68:13:3e:75:65:25:66:9c:d4:79:36:
bc:36:d8:5c:76:4a:d4:cb:b1:82:94:c8:bc:7e:4d:07:cd:14:
e8:5c:9d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:24 2026 by rpki-client