Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
File: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft (raw, json)
Hash identifier: BKOePUY/5I6wIcj1b3RUqXQ0O1AzbsN16RV3ntprjwM=
Subject key identifier: A7:2A:BA:4C:1F:9A:0C:50:2A:4C:A2:0A:80:26:3F:5C:38:C5:72:90
Authority key identifier: 36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
Certificate issuer: /CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Certificate serial: 019D394185185465BC867C1D0EB491ACC206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
Manifest number: 129B
Signing time: Sun 29 Mar 2026 11:01:28 +0000
Manifest this update: Sun 29 Mar 2026 11:01:28 +0000
Manifest next update: Mon 30 Mar 2026 11:01:28 +0000
Files and hashes: 1: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl (hash: mLk6h3kJcLTcVbISAfy8XB9x6COQ0GwI94fTDpXlih4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:85:18:54:65:bc:86:7c:1d:0e:b4:91:ac:c2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Validity
Not Before: Mar 29 11:01:28 2026 GMT
Not After : Mar 30 11:01:28 2026 GMT
Subject: CN=a72aba4c1f9a0c502a4ca20a80263f5c38c57290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:46:99:63:c9:18:1c:d2:a3:e4:de:cc:88:
4e:39:ad:e7:f7:47:1a:ac:c6:a6:1d:e4:4a:bf:e7:
c6:cd:c8:ae:c3:b5:49:fa:3b:6a:77:4f:81:20:04:
6a:11:a4:95:0e:9f:0a:95:7e:57:0c:d6:da:36:a9:
45:0c:6d:d8:d3:b1:c9:04:be:fb:5e:02:39:fe:85:
9b:2c:af:d9:f3:6b:3a:ce:16:54:03:fa:98:08:ea:
53:1b:a1:ca:12:b7:2e:f4:ab:31:c3:ea:2a:f5:3f:
76:3c:64:76:ca:d5:85:eb:5d:f9:b5:42:2d:c7:bb:
83:7b:05:21:f3:7a:6b:b4:9c:70:1f:e4:17:10:6c:
a8:d5:ff:5f:3f:ff:99:2e:b4:de:32:bf:05:f2:2b:
7c:14:ac:fc:23:c6:54:76:fe:4f:60:a6:b5:b3:27:
ab:af:0d:40:60:32:c3:bd:40:3c:df:fb:b5:72:50:
26:08:73:f0:b6:43:8d:6d:d2:5b:11:e8:ce:7c:33:
83:77:00:f7:fb:2a:c3:0c:4d:a3:17:b0:bd:75:08:
72:9f:fd:8e:fd:71:49:94:60:d4:7c:ea:09:e8:50:
24:e8:93:75:97:8b:d2:9a:40:ac:7b:4c:5b:37:e6:
9c:61:f8:46:8e:78:71:3b:79:43:88:bc:a6:c5:7a:
16:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2A:BA:4C:1F:9A:0C:50:2A:4C:A2:0A:80:26:3F:5C:38:C5:72:90
X509v3 Authority Key Identifier:
keyid:36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:30:ff:18:4c:06:99:d3:e2:25:96:c7:9f:49:70:8a:78:aa:
52:e8:9d:61:30:69:dd:1e:57:79:a7:1d:9e:13:97:fb:8c:24:
12:f1:03:19:7b:44:29:8e:43:8e:05:5e:18:df:17:d6:3d:bd:
a7:b2:c5:52:f0:4d:ff:68:c4:5f:16:25:27:77:c9:61:b4:a8:
60:b6:ef:cf:3b:78:35:ee:90:ee:74:e4:1f:6c:27:cd:11:ff:
e1:b1:de:b3:4a:9e:45:41:2f:cc:28:87:39:cc:d1:3f:d4:91:
d3:7a:c0:09:7c:68:f8:8b:50:b0:06:d7:4f:99:a5:0f:70:d9:
49:8d:ad:09:14:f3:9a:ac:82:1b:e6:8d:ea:81:ac:c8:fe:4f:
f1:7a:a8:04:7b:ac:6e:72:51:06:be:af:a4:7d:01:89:dd:0d:
a4:60:4e:fa:82:29:69:e7:0e:64:b0:6b:84:c8:0d:c2:26:08:
e3:e1:a4:53:5e:db:6e:39:9d:bb:7a:25:01:95:01:04:93:10:
82:33:5f:55:df:40:61:39:87:dd:b3:91:05:8e:4a:69:8b:9d:
88:49:d3:73:a4:36:85:08:4c:5e:19:5d:ba:8a:5f:51:d6:05:
a5:bb:c3:f9:19:a2:2d:72:84:1b:23:26:8e:88:b0:fe:ca:d7:
a4:0a:46:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QYUYVGW8hnwdDrSRrMIGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZDhjMWE3M2IxNTk1MTA5ZDI2MDY3YjQyOTFmNzFkYzFk
Yjk5NTcwHhcNMjYwMzI5MTEwMTI4WhcNMjYwMzMwMTEwMTI4WjAzMTEwLwYDVQQD
EyhhNzJhYmE0YzFmOWEwYzUwMmE0Y2EyMGE4MDI2M2Y1YzM4YzU3MjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjRGmWPJGBzSo+TezIhOOa3n90ca
rMamHeRKv+fGzciuw7VJ+jtqd0+BIARqEaSVDp8KlX5XDNbaNqlFDG3Y07HJBL77
XgI5/oWbLK/Z82s6zhZUA/qYCOpTG6HKErcu9Ksxw+oq9T92PGR2ytWF6135tUIt
x7uDewUh83prtJxwH+QXEGyo1f9fP/+ZLrTeMr8F8it8FKz8I8ZUdv5PYKa1syer
rw1AYDLDvUA83/u1clAmCHPwtkONbdJbEejOfDODdwD3+yrDDE2jF7C9dQhyn/2O
/XFJlGDUfOoJ6FAk6JN1l4vSmkCse0xbN+acYfhGjnhxO3lDiLymxXoWRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcqukwfmgxQKkyiCoAmP1w4xXKQMB8GA1UdIwQY
MBaAFDbYwac7FZUQnSYGe0KR9x3B25lXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnRqQnB6c1ZsUkNkSmdaN1FwSDNIY0hibVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lZWNjYTUtYzMzOS00OTE4LWEwYTgt
ZjYxZWM4NWQwZjU3LzEvTnRqQnB6c1ZsUkNkSmdaN1FwSDNIY0hibVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lZWNjYTUtYzMzOS00OTE4LWEwYTgtZjYxZWM4NWQwZjU3
LzEvTnRqQnB6c1ZsUkNkSmdaN1FwSDNIY0hibVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjD/GEwG
mdPiJZbHn0lwiniqUuidYTBp3R5XeacdnhOX+4wkEvEDGXtEKY5DjgVeGN8X1j29
p7LFUvBN/2jEXxYlJ3fJYbSoYLbvzzt4Ne6Q7nTkH2wnzRH/4bHes0qeRUEvzCiH
OczRP9SR03rACXxo+ItQsAbXT5mlD3DZSY2tCRTzmqyCG+aN6oGsyP5P8XqoBHus
bnJRBr6vpH0Bid0NpGBO+oIpaecOZLBrhMgNwiYI4+GkU17bbjmdu3olAZUBBJMQ
gjNfVd9AYTmH3bORBY5KaYudiEnTc6Q2hQhMXhlduopfUdYFpbvD+RmiLXKEGyMm
joiw/srXpApGVA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:51 2026 by rpki-client