Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
File: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft (raw, json)
Hash identifier: yqaFwpPw1QecwsayxxVQoK2QL04l9eOHnpxAyuYFq8Y=
Subject key identifier: 8F:B7:E6:B2:F0:06:08:50:9E:50:1B:04:50:88:93:8E:EF:40:71:2C
Authority key identifier: 36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
Certificate issuer: /CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Certificate serial: 019D389C19AEAA1BC53884A502F99B11FE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
Manifest number: 0770
Signing time: Sun 29 Mar 2026 08:00:47 +0000
Manifest this update: Sun 29 Mar 2026 08:00:47 +0000
Manifest next update: Mon 30 Mar 2026 08:00:47 +0000
Files and hashes: 1: 8mygXMnQNTeGF8cdXDDRJQ7VnrU.roa (hash: nZE7NA5ce2dUYz+AJKjNwGtnkc4g6xM8VyuB9faP4Ko=)
2: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl (hash: OFRUuca50jsTEsmv71m0/tNAAT2TI28lZsgsrNfg5Ok=)
3: e2xgXuwJHd2kCUvRcc0JZ_ZWpIU.roa (hash: ghMimNEZUb3ZFVFJUrfR1g8VeQyoHCCHBKZY/69OpTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:19:ae:aa:1b:c5:38:84:a5:02:f9:9b:11:fe:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Validity
Not Before: Mar 29 08:00:47 2026 GMT
Not After : Mar 30 08:00:47 2026 GMT
Subject: CN=8fb7e6b2f00608509e501b045088938eef40712c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5d:0b:64:4f:6c:2e:58:07:a9:d7:fb:d1:06:
d7:e1:a1:ea:1b:47:b2:8e:b9:43:40:f6:8a:30:fc:
74:79:fc:33:3b:3c:66:81:00:53:1d:47:27:d5:58:
fa:4a:7b:39:ea:0c:06:f9:16:e5:8c:97:b4:74:02:
a8:09:f9:89:bf:da:13:73:ca:52:06:5a:fc:80:40:
21:f7:af:d9:43:d0:85:3e:54:c9:d1:78:8c:9a:2d:
64:9c:ce:3e:cf:b7:50:10:73:ec:9d:5f:ed:44:e6:
8c:95:d5:ec:f7:00:0f:ef:5b:f4:2d:92:ad:c2:77:
44:5c:c0:d3:1c:d5:9d:16:93:f3:58:00:68:7f:bc:
dd:0f:ce:fa:a6:4a:1e:ad:d7:91:67:0a:e3:f3:77:
13:11:c9:81:ba:40:f3:5c:b8:cd:47:fb:4d:6a:00:
f7:5f:4e:90:94:17:cc:73:5c:88:65:55:3d:46:21:
c6:a3:85:18:b1:55:9c:fe:cb:5e:09:99:d6:fd:84:
8f:e6:3f:4c:c6:4c:47:b5:c5:c4:da:5c:d3:8c:56:
eb:80:17:10:8f:08:fc:80:03:55:27:1e:b5:a1:77:
53:1f:65:08:6f:e3:82:f3:8a:d0:b2:2e:3a:bb:b8:
0f:05:78:d3:4b:bd:06:4e:c1:33:66:bd:80:55:06:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B7:E6:B2:F0:06:08:50:9E:50:1B:04:50:88:93:8E:EF:40:71:2C
X509v3 Authority Key Identifier:
keyid:36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3d:ff:09:df:7e:6a:e2:85:92:70:6c:f3:32:e9:1d:eb:eb:
3e:c3:e7:8c:90:fd:58:79:34:67:fe:ff:21:f9:7b:cc:38:29:
9c:a6:3e:87:dd:62:ea:57:2a:e6:e7:10:f6:c1:f4:15:a4:5a:
45:9e:dd:eb:28:e3:c9:79:53:d4:28:44:17:33:51:2c:9e:b7:
79:13:d0:36:65:51:51:56:94:ad:27:37:27:e2:cc:cc:cb:43:
f2:9d:25:c7:54:3c:48:bf:18:d6:49:56:cd:10:d1:36:9f:8b:
3a:18:61:53:8f:52:5a:71:18:14:48:76:fa:78:de:96:c4:d6:
f8:77:f4:4e:ce:da:b5:63:7e:68:00:bf:c2:af:28:32:9f:c0:
c9:6e:6f:3b:a5:86:5e:ed:fc:0f:d6:86:e4:0d:3f:73:55:67:
6f:68:c8:0f:d6:3c:62:28:e5:cb:2d:78:ad:3f:ec:00:74:81:
e2:c3:be:7e:ee:02:2c:a6:49:bb:b4:f8:c2:7b:bd:fc:36:ba:
34:78:9d:fa:a7:98:31:ba:d7:b5:2a:70:06:5d:2c:f0:24:c5:
e9:cc:6e:c2:90:ef:28:ee:fe:2f:83:83:ec:b6:d9:e4:ff:4f:
ac:6b:fe:00:be:de:55:d7:e4:08:b9:dc:64:fa:31:98:7d:49:
77:64:5a:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBmuqhvFOISlAvmbEf51MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Y2ZhZmZjOWM3ODY4NzA4ZjNjODFlZTVjMGQ2NGMzNWFj
MWJlZjEwHhcNMjYwMzI5MDgwMDQ3WhcNMjYwMzMwMDgwMDQ3WjAzMTEwLwYDVQQD
Eyg4ZmI3ZTZiMmYwMDYwODUwOWU1MDFiMDQ1MDg4OTM4ZWVmNDA3MTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA210LZE9sLlgHqdf70QbX4aHqG0ey
jrlDQPaKMPx0efwzOzxmgQBTHUcn1Vj6Sns56gwG+RbljJe0dAKoCfmJv9oTc8pS
Blr8gEAh96/ZQ9CFPlTJ0XiMmi1knM4+z7dQEHPsnV/tROaMldXs9wAP71v0LZKt
wndEXMDTHNWdFpPzWABof7zdD876pkoerdeRZwrj83cTEcmBukDzXLjNR/tNagD3
X06QlBfMc1yIZVU9RiHGo4UYsVWc/steCZnW/YSP5j9MxkxHtcXE2lzTjFbrgBcQ
jwj8gANVJx61oXdTH2UIb+OC84rQsi46u7gPBXjTS70GTsEzZr2AVQbYIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+35rLwBghQnlAbBFCIk47vQHEsMB8GA1UdIwQY
MBaAFDbPr/yceGhwjzyB7lwNZMNawb7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnMtdl9KeDRhSENQUElIdVhBMWt3MXJCdnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kMDliNTYtNGZjYi00N2JmLTgwMjUt
OTk4NzhjYzliMTRjLzEvTnMtdl9KeDRhSENQUElIdVhBMWt3MXJCdnZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kMDliNTYtNGZjYi00N2JmLTgwMjUtOTk4NzhjYzliMTRj
LzEvTnMtdl9KeDRhSENQUElIdVhBMWt3MXJCdnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAND3/Cd9+
auKFknBs8zLpHevrPsPnjJD9WHk0Z/7/Ifl7zDgpnKY+h91i6lcq5ucQ9sH0FaRa
RZ7d6yjjyXlT1ChEFzNRLJ63eRPQNmVRUVaUrSc3J+LMzMtD8p0lx1Q8SL8Y1klW
zRDRNp+LOhhhU49SWnEYFEh2+njelsTW+Hf0Ts7atWN+aAC/wq8oMp/AyW5vO6WG
Xu38D9aG5A0/c1Vnb2jID9Y8Yijlyy14rT/sAHSB4sO+fu4CLKZJu7T4wnu9/Da6
NHid+qeYMbrXtSpwBl0s8CTF6cxuwpDvKO7+L4OD7LbZ5P9PrGv+AL7eVdfkCLnc
ZPoxmH1Jd2Rahw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:45 2026 by rpki-client