Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
File: nUxyfODk4Wasa-ME__JRgW1RpEI.mft (raw, json)
Hash identifier: osxnzsoUw/r16QsCbVTTCU4U6FQKJi7VkJMnfuKc0dU=
Subject key identifier: A4:E5:02:AE:80:77:88:E4:30:CB:29:FE:63:CE:B9:0F:9B:9D:0C:A6
Authority key identifier: 9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
Certificate issuer: /CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Certificate serial: 019D3866411F1A34F07F87ABC27B12BE7E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: nUxyfODk4Wasa-ME__JRgW1RpEI.crl (hash: tpJQnZOeh1GaUdCNoYzXv3B1ntlaaU/fIWQqOdmprok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:41:1f:1a:34:f0:7f:87:ab:c2:7b:12:be:7e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=a4e502ae807788e430cb29fe63ceb90f9b9d0ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a9:b9:fa:96:fd:50:ec:79:32:3d:be:e0:ef:
60:1f:53:bc:c0:d8:49:8d:da:22:6a:26:96:35:72:
0a:39:d4:7b:65:44:7e:32:21:61:da:2b:81:0d:3a:
f9:f7:58:0c:d6:9a:20:a9:7b:33:e8:04:c5:20:d6:
50:6d:2a:f5:c4:ad:42:b4:2f:28:54:71:6a:6a:f3:
53:85:ef:8f:15:19:86:6b:db:3f:15:28:91:3d:17:
cc:a1:10:d2:75:33:d9:91:a2:65:8f:25:10:cd:48:
95:1d:ba:04:59:74:a6:2a:f4:ee:d8:c3:85:78:06:
5c:86:4b:aa:bc:30:88:4f:d5:52:63:e8:fa:33:78:
5a:96:fb:c8:dc:c0:55:3f:af:6e:f0:58:48:6d:bd:
e1:39:dc:2f:db:d5:31:09:c2:94:11:6e:7b:3b:22:
85:d3:81:53:65:58:c3:6c:dc:0f:ec:6e:c9:20:69:
59:e2:cf:8d:d7:e7:e7:25:9e:68:ba:78:3d:1c:59:
fd:8f:0a:75:26:f7:17:ce:55:5e:f2:6c:ae:9c:d1:
10:74:0f:28:4b:d7:26:7f:a4:9e:30:72:52:dc:54:
65:94:34:a7:29:3f:02:ec:e1:e0:fa:71:30:e8:89:
da:25:b1:5f:f5:6d:c8:86:55:4b:a3:a2:22:74:77:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E5:02:AE:80:77:88:E4:30:CB:29:FE:63:CE:B9:0F:9B:9D:0C:A6
X509v3 Authority Key Identifier:
keyid:9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:11:b8:2e:f6:17:03:b5:01:37:e5:a1:fb:db:b6:4a:ac:2b:
24:df:14:29:da:0d:9d:eb:1d:1b:45:eb:39:3b:c4:77:c5:74:
78:4e:35:51:13:18:8b:91:03:13:3c:09:e3:98:ad:36:fe:7e:
21:47:68:bf:e4:c2:a3:80:65:79:10:33:06:34:a4:ec:9a:bf:
50:4f:04:86:89:c8:a4:16:40:55:6b:a4:6d:ef:1a:a1:62:28:
7e:f5:ee:75:49:8a:1c:c4:95:17:13:8d:84:64:6f:52:ee:0f:
97:6b:f3:e5:3e:3f:75:df:73:63:72:5a:71:a4:1b:39:6f:aa:
08:10:2c:d1:83:35:7f:52:21:d9:a6:95:9a:fd:57:b2:58:84:
ee:62:87:d0:09:6d:92:e7:bc:f3:b9:13:e8:b9:94:55:8f:65:
73:a2:9a:b2:dd:94:95:8d:3c:9f:a3:4c:6e:e1:12:a8:43:eb:
66:d8:5f:69:3f:88:1b:ad:fc:d7:21:d5:18:63:61:05:3b:1b:
1e:dd:79:13:5e:58:57:24:db:7f:d0:7f:49:16:7a:85:2f:99:
ff:e8:56:3e:2d:c1:88:41:06:65:09:bd:e9:99:3d:f4:d6:f6:
a8:1e:96:ee:5c:3e:7a:15:5c:97:7b:37:a0:44:c0:25:6e:5d:
7c:c1:00:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZkEfGjTwf4erwnsSvn55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNGM3MjdjZTBlNGUxNjZhYzZiZTMwNGZmZjI1MTgxNmQ1
MWE0NDIwHhcNMjYwMzI5MDcwMTU4WhcNMjYwMzMwMDcwMTU4WjAzMTEwLwYDVQQD
EyhhNGU1MDJhZTgwNzc4OGU0MzBjYjI5ZmU2M2NlYjkwZjliOWQwY2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qm5+pb9UOx5Mj2+4O9gH1O8wNhJ
jdoiaiaWNXIKOdR7ZUR+MiFh2iuBDTr591gM1pogqXsz6ATFINZQbSr1xK1CtC8o
VHFqavNThe+PFRmGa9s/FSiRPRfMoRDSdTPZkaJljyUQzUiVHboEWXSmKvTu2MOF
eAZchkuqvDCIT9VSY+j6M3halvvI3MBVP69u8FhIbb3hOdwv29UxCcKUEW57OyKF
04FTZVjDbNwP7G7JIGlZ4s+N1+fnJZ5oung9HFn9jwp1JvcXzlVe8myunNEQdA8o
S9cmf6SeMHJS3FRllDSnKT8C7OHg+nEw6InaJbFf9W3IhlVLo6IidHf4BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTlAq6Ad4jkMMsp/mPOuQ+bnQymMB8GA1UdIwQY
MBaAFJ1Mcnzg5OFmrGvjBP/yUYFtUaRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblV4eWZPRGs0V2FzYS1NRV9fSlJnVzFScEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZTNmZGQtYWQ4MS00OWIyLWI2ODAt
YWIwOTMzYWM5YWY1LzEvblV4eWZPRGs0V2FzYS1NRV9fSlJnVzFScEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lZTNmZGQtYWQ4MS00OWIyLWI2ODAtYWIwOTMzYWM5YWY1
LzEvblV4eWZPRGs0V2FzYS1NRV9fSlJnVzFScEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBG4LvYX
A7UBN+Wh+9u2SqwrJN8UKdoNnesdG0XrOTvEd8V0eE41URMYi5EDEzwJ45itNv5+
IUdov+TCo4BleRAzBjSk7Jq/UE8EhonIpBZAVWukbe8aoWIofvXudUmKHMSVFxON
hGRvUu4Pl2vz5T4/dd9zY3JacaQbOW+qCBAs0YM1f1Ih2aaVmv1XsliE7mKH0Alt
kue887kT6LmUVY9lc6Kast2UlY08n6NMbuESqEPrZthfaT+IG6381yHVGGNhBTsb
Ht15E15YVyTbf9B/SRZ6hS+Z/+hWPi3BiEEGZQm96Zk99Nb2qB6W7lw+ehVcl3s3
oETAJW5dfMEASg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:56 2026 by rpki-client