Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
File: NMSVb4VnESWILFdM0uLSA6q97QU.mft (raw, json)
Hash identifier: /UJE2lR9WG6orwi9ycJ3pGTVCPO+WS/LvBkyQDavUWw=
Subject key identifier: F9:92:98:82:E6:E0:5D:C9:12:0C:36:31:4C:28:8B:2F:60:61:0E:02
Authority key identifier: 34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
Certificate issuer: /CN=34c4956f85671125882c574cd2e2d203aabded05
Certificate serial: 019D389BCFBDE01D1339D3E934D3BB7967B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:28 +0000
Manifest this update: Sun 29 Mar 2026 08:00:28 +0000
Manifest next update: Mon 30 Mar 2026 08:00:28 +0000
Files and hashes: 1: NMSVb4VnESWILFdM0uLSA6q97QU.crl (hash: 85jk8KhzT60nkeGOCxp9lDY7Buj/uDb+eAyHSX8iKVc=)
2: hzNlIQcoKwn0_37jGrfuWRGbt1g.roa (hash: yGgP4/jvKs4NKsaE3O2vHcLj+aOCBWAi35uwjfvRjck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:cf:bd:e0:1d:13:39:d3:e9:34:d3:bb:79:67:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34c4956f85671125882c574cd2e2d203aabded05
Validity
Not Before: Mar 29 08:00:28 2026 GMT
Not After : Mar 30 08:00:28 2026 GMT
Subject: CN=f9929882e6e05dc9120c36314c288b2f60610e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:3c:31:2f:03:33:c7:34:e2:d0:50:60:12:
f6:d9:a5:10:3a:df:d5:7b:3e:3e:4a:fd:ce:bf:6e:
6d:19:97:a3:9b:40:d0:cb:dc:3d:0c:e4:a4:e1:0e:
a5:a9:e3:d9:38:2f:cb:8a:a8:4f:86:74:b8:ef:51:
54:76:7e:86:87:d9:f3:09:9f:b6:2d:ed:ab:ab:9a:
3a:68:47:24:20:db:d3:c9:8b:ec:81:e4:41:e8:43:
fe:78:c0:26:c2:d6:fa:7a:2e:c9:f7:2f:67:b4:31:
97:44:91:2b:c0:51:b3:f9:88:fa:6a:9c:64:10:7f:
ba:4d:44:01:97:a9:21:05:0b:3d:ff:e8:54:90:d8:
ae:33:f9:22:32:07:75:93:01:44:73:06:6c:86:be:
e9:b4:9f:fb:1a:6e:1d:b5:00:03:ce:30:d1:18:9b:
d3:8a:60:ab:c1:13:ee:d9:3c:50:e0:48:d9:ae:7e:
6e:47:bb:51:9e:8d:75:b2:2d:10:8c:66:fa:50:d3:
05:3e:b7:cd:75:8b:87:75:cf:ed:cf:af:de:35:06:
ed:0f:36:d9:f8:f8:f9:a5:39:8e:54:75:8b:ac:ef:
47:32:e3:80:35:a0:6e:c6:71:4a:e4:c4:0d:b8:ae:
7c:53:f3:3d:35:d3:00:3d:18:a9:f9:75:a3:35:76:
5f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:92:98:82:E6:E0:5D:C9:12:0C:36:31:4C:28:8B:2F:60:61:0E:02
X509v3 Authority Key Identifier:
keyid:34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:29:c4:74:69:93:69:2e:eb:7d:53:9d:f3:bd:b3:70:94:e5:
10:6e:a7:b1:84:df:f2:3f:c9:4e:d9:82:3d:73:93:40:ea:bd:
81:5a:de:3d:b5:24:e3:f7:e0:ef:94:c7:d7:3f:82:b6:2a:6d:
7b:36:a2:e8:0e:0b:6e:1c:2b:48:87:82:e6:70:07:b2:9e:f8:
c7:da:a7:d6:c4:16:6a:89:51:c4:06:d2:ea:ff:6f:7c:6f:69:
97:4c:3e:c6:c6:8f:77:bc:61:a1:58:96:64:68:ce:2e:fc:80:
c8:7e:21:7a:7f:46:de:29:40:24:68:3f:c4:1a:d2:e7:2a:a1:
fa:a3:e2:67:92:78:98:55:83:e3:b6:56:ed:8d:40:63:be:5d:
86:72:6a:21:c1:02:ed:d1:29:6f:a3:c1:08:53:42:6d:96:28:
a3:28:24:61:ef:fb:7a:61:f5:c8:97:b6:db:3a:5c:f4:f4:20:
3a:fd:59:8e:ea:eb:8d:c3:b0:ed:c6:42:db:35:ee:17:f0:8b:
6b:a8:0a:8c:6e:10:41:ac:48:10:e8:f1:77:f1:59:46:13:3d:
c0:3c:31:f1:f8:3d:b0:47:68:df:0e:08:bd:26:0b:10:44:f5:
32:a5:fc:06:11:59:be:e5:3e:c2:5f:9e:27:b2:9d:96:21:f4:
f3:29:1d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:15 2026 by rpki-client