Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
File: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft (raw, json)
Hash identifier: EV/Adp2hU4TvtJT+gTCNiB2f77oYUEMgQ19zjuxMN2Y=
Subject key identifier: 62:46:2C:B0:32:5A:77:45:B5:85:96:E6:25:72:9D:DC:2C:DA:DD:FC
Authority key identifier: 35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA
Certificate issuer: /CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
Certificate serial: 019D3909B12CEF43F6511052F51568EA0797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
Manifest number: 14C7
Signing time: Sun 29 Mar 2026 10:00:29 +0000
Manifest this update: Sun 29 Mar 2026 10:00:29 +0000
Manifest next update: Mon 30 Mar 2026 10:00:29 +0000
Files and hashes: 1: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl (hash: qruQTwnfg/EmjiTikc3972veoIT8jXqwnFXT3JcMdys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b1:2c:ef:43:f6:51:10:52:f5:15:68:ea:07:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
Validity
Not Before: Mar 29 10:00:29 2026 GMT
Not After : Mar 30 10:00:29 2026 GMT
Subject: CN=62462cb0325a7745b58596e625729ddc2cdaddfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7e:89:bf:c4:c6:41:52:99:0c:be:34:9c:4f:
c5:f4:02:ba:ee:81:a0:53:b6:b9:e6:28:1a:82:10:
28:e7:eb:96:fa:77:55:a4:1d:39:f3:58:78:a8:86:
e4:70:6e:67:f1:c3:68:b6:c3:92:a2:9d:60:ea:00:
8f:7d:f8:ac:bd:ac:74:04:ca:51:ca:5c:6c:6e:85:
98:1c:c5:31:77:0f:10:3a:eb:41:e3:1b:fa:17:15:
7c:16:96:d5:4e:87:1b:84:5b:0f:f5:90:b6:7e:b3:
4e:05:d7:6d:86:36:54:30:78:53:3f:0b:88:05:cc:
a1:1d:ab:56:39:04:41:ca:53:26:69:94:bb:db:33:
41:e0:c0:e3:8b:35:b1:d5:c1:d7:19:df:1e:df:6b:
7b:1b:e8:d5:dd:3c:8d:8b:6e:d8:bc:47:85:f7:7d:
1a:0b:07:c8:b9:8c:51:52:c1:dd:14:f9:ff:9d:41:
49:09:0a:f0:34:ec:65:d2:e1:11:22:04:d9:24:12:
ad:8c:fb:cd:f6:e2:2e:61:82:3d:b4:39:c6:db:0f:
58:2d:2e:c0:c9:52:6b:ad:52:42:2f:43:e2:de:5f:
8b:bf:a9:60:87:12:d0:15:92:f0:5e:08:ef:ec:9e:
de:0c:0d:4c:be:24:96:2e:b0:a7:77:56:05:bc:99:
0a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:46:2C:B0:32:5A:77:45:B5:85:96:E6:25:72:9D:DC:2C:DA:DD:FC
X509v3 Authority Key Identifier:
keyid:35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:bf:04:b9:1f:dc:eb:21:81:ac:c6:47:c6:20:8f:72:83:c0:
67:c5:2d:64:3d:32:6f:1e:c8:0b:13:5b:be:fc:4b:fd:4f:2c:
a1:e3:95:97:3d:f8:63:50:22:19:77:72:fa:1d:70:4f:8f:6c:
b2:1d:80:0f:12:11:d1:d6:03:2e:15:32:62:3c:9c:ac:0b:ad:
e3:94:42:6c:3b:51:cc:63:81:7d:93:11:0c:d9:d4:99:42:0c:
df:c5:7b:90:ca:cb:5f:76:6f:5b:f9:53:b7:f9:b6:0c:6d:da:
1e:65:76:d2:2a:4a:0f:c7:6a:79:ef:f4:6c:87:04:61:ea:0d:
8d:41:92:95:60:d8:76:07:01:c7:87:6b:b4:42:9e:5a:3f:71:
51:0e:06:04:0f:9f:06:0b:cd:41:87:d0:ca:41:62:44:bb:d7:
6f:4f:9a:af:74:4c:1d:08:9d:3c:de:fc:a9:95:73:0b:20:21:
41:fa:ca:04:a2:ec:f4:4d:b7:96:0d:e6:0f:00:9c:6e:80:0e:
b4:39:81:76:3e:7f:1d:27:e2:70:fd:bf:50:2f:da:49:57:ec:
ef:ae:cf:88:68:47:c3:3e:36:f9:bc:4b:33:42:f9:e5:4d:eb:
b7:15:51:3e:be:ef:e5:29:01:b4:e1:72:50:66:25:09:46:a3:
da:45:91:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CbEs70P2URBS9RVo6geXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OGFlNTgwYjJmN2I0NWMzZDJhZTlmMTlmM2MxYmU5N2U4
MzlhYWEwHhcNMjYwMzI5MTAwMDI5WhcNMjYwMzMwMTAwMDI5WjAzMTEwLwYDVQQD
Eyg2MjQ2MmNiMDMyNWE3NzQ1YjU4NTk2ZTYyNTcyOWRkYzJjZGFkZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA536Jv8TGQVKZDL40nE/F9AK67oGg
U7a55igaghAo5+uW+ndVpB0581h4qIbkcG5n8cNotsOSop1g6gCPffisvax0BMpR
ylxsboWYHMUxdw8QOutB4xv6FxV8FpbVTocbhFsP9ZC2frNOBddthjZUMHhTPwuI
BcyhHatWOQRBylMmaZS72zNB4MDjizWx1cHXGd8e32t7G+jV3TyNi27YvEeF930a
CwfIuYxRUsHdFPn/nUFJCQrwNOxl0uERIgTZJBKtjPvN9uIuYYI9tDnG2w9YLS7A
yVJrrVJCL0Pi3l+Lv6lghxLQFZLwXgjv7J7eDA1MviSWLrCnd1YFvJkKbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJGLLAyWndFtYWW5iVyndws2t38MB8GA1UdIwQY
MBaAFDWK5YCy97RcPSrp8Z88G+l+g5qqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NTIxZjYtMTg0ZS00MzBhLWI2Njct
NTI0ZjNhMmY2OGIzLzEvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85NTIxZjYtMTg0ZS00MzBhLWI2NjctNTI0ZjNhMmY2OGIz
LzEvTllybGdMTDN0Rnc5S3VueG56d2I2WDZEbXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs78EuR/c
6yGBrMZHxiCPcoPAZ8UtZD0ybx7ICxNbvvxL/U8soeOVlz34Y1AiGXdy+h1wT49s
sh2ADxIR0dYDLhUyYjycrAut45RCbDtRzGOBfZMRDNnUmUIM38V7kMrLX3ZvW/lT
t/m2DG3aHmV20ipKD8dqee/0bIcEYeoNjUGSlWDYdgcBx4drtEKeWj9xUQ4GBA+f
BgvNQYfQykFiRLvXb0+ar3RMHQidPN78qZVzCyAhQfrKBKLs9E23lg3mDwCcboAO
tDmBdj5/HSficP2/UC/aSVfs767PiGhHwz42+bxLM0L55U3rtxVRPr7v5SkBtOFy
UGYlCUaj2kWRaA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:01 2026 by rpki-client