Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
File: x_nvdcTr2Q5NisU39pPdM6xIVko.mft (raw, json)
Hash identifier: b2uguxRZjYrvWcmV+6JAv4fP16ZOSHly2b7/mVhYpE8=
Subject key identifier: D1:70:EA:AB:F1:2E:B6:1B:BD:97:A9:01:76:6D:82:B3:DE:CC:A2:F4
Authority key identifier: C7:F9:EF:75:C4:EB:D9:0E:4D:8A:C5:37:F6:93:DD:33:AC:48:56:4A
Certificate issuer: /CN=c7f9ef75c4ebd90e4d8ac537f693dd33ac48564a
Certificate serial: 019D3865707DB83BB28CE4E9FF5223BCE0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
Manifest number: 0345
Signing time: Sun 29 Mar 2026 07:01:05 +0000
Manifest this update: Sun 29 Mar 2026 07:01:05 +0000
Manifest next update: Mon 30 Mar 2026 07:01:05 +0000
Files and hashes: 1: x_nvdcTr2Q5NisU39pPdM6xIVko.crl (hash: KStWTJLQgtkEHjPH5XrekujOIPBvmvkkJigTBZNGI1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:70:7d:b8:3b:b2:8c:e4:e9:ff:52:23:bc:e0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f9ef75c4ebd90e4d8ac537f693dd33ac48564a
Validity
Not Before: Mar 29 07:01:05 2026 GMT
Not After : Mar 30 07:01:05 2026 GMT
Subject: CN=d170eaabf12eb61bbd97a901766d82b3decca2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:d3:3b:13:39:41:3d:9f:c8:42:4b:6e:1a:
a2:a8:da:7d:1a:d3:96:4f:e8:e0:9b:51:33:aa:29:
65:c8:35:22:64:09:2c:d9:45:1e:cf:d4:86:e9:7f:
12:85:6a:82:dc:f1:2b:4f:f7:42:84:ee:12:a5:2d:
bd:c9:23:66:ed:04:b0:3a:7d:17:2a:a1:7a:27:0e:
90:97:b0:f7:01:ec:b3:12:af:de:c2:65:a3:fb:4f:
03:9a:42:27:be:e3:3f:e4:44:1a:c7:1e:b7:85:2d:
74:bf:fe:cf:38:cb:64:7b:2a:50:24:e5:86:d4:3a:
38:a3:be:d6:4b:bd:e4:92:00:53:da:c8:95:05:72:
3f:66:c1:af:e5:fd:43:df:00:12:bf:db:9b:e8:aa:
70:00:c4:5c:27:b8:2b:0e:34:46:67:8b:4d:7e:6d:
f2:73:78:03:45:c6:16:3f:fa:8f:e5:45:5d:a9:81:
ca:64:b7:7d:17:d1:42:26:e1:af:1b:94:7d:c0:de:
18:b8:81:08:2a:a0:92:20:4a:42:3e:52:d7:31:71:
50:9c:cc:c4:6e:24:42:1a:d7:91:f7:f3:73:5a:ad:
ba:09:c6:11:d0:98:44:6d:4b:57:ce:3c:58:b7:21:
34:0e:a4:a9:22:6b:76:11:49:15:6a:15:67:85:d2:
6c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:70:EA:AB:F1:2E:B6:1B:BD:97:A9:01:76:6D:82:B3:DE:CC:A2:F4
X509v3 Authority Key Identifier:
keyid:C7:F9:EF:75:C4:EB:D9:0E:4D:8A:C5:37:F6:93:DD:33:AC:48:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e0:39:a1:6e:46:fc:8e:de:2e:80:5d:02:1e:11:d0:8a:d9:
b7:e6:18:c0:f0:99:49:20:2e:fb:4d:be:ae:a5:8f:80:25:39:
49:40:14:94:87:de:a3:50:33:be:bc:0b:62:3e:6a:c0:12:31:
27:9c:67:ce:0d:9c:af:7c:2b:ac:72:7a:1a:7b:a5:fc:94:b4:
89:9f:e8:38:a3:2c:55:79:f7:73:d2:6c:cc:d6:82:e6:26:f6:
63:d5:20:83:3b:91:ae:01:ba:9d:85:41:ed:1c:f9:64:aa:82:
e1:ae:c6:c0:80:2e:57:48:50:64:fb:df:09:18:86:4d:3d:4d:
ef:54:cc:d9:4c:e4:5d:63:db:e9:6e:36:cb:46:fe:bd:b7:b5:
ea:1d:a1:b8:20:6c:3c:b7:5a:fb:37:52:54:ac:47:35:2f:7c:
96:34:c1:27:cf:26:44:b7:39:d4:23:75:83:9e:1d:25:11:66:
08:8d:2a:2f:4a:c8:59:d1:94:1a:ee:b7:48:d1:75:b6:e6:0b:
d9:10:27:f2:dc:ed:29:c7:f4:14:b0:81:6d:df:15:e0:3d:ab:
9f:f0:38:5b:13:64:db:6c:14:f7:43:87:0b:af:60:8b:04:20:
51:10:7e:e0:f9:02:27:b4:48:e1:38:d4:5a:39:9b:57:51:7b:
03:5a:d4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:55 2026 by rpki-client