Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
File: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft (raw, json)
Hash identifier: EZtxVI4iqrPDRcQtKwLacHMouWACqCnxHnzMj0SdLNA=
Subject key identifier: 47:2E:88:7B:E7:B6:7F:12:69:2D:9D:D3:AF:29:8F:EA:88:20:D1:B0
Authority key identifier: 35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
Certificate issuer: /CN=359ddc737684ce041754a95b56b5a076d8851048
Certificate serial: 019D389BB54597DDE677483EBDF94ECD2734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
Manifest number: 1864
Signing time: Sun 29 Mar 2026 08:00:21 +0000
Manifest this update: Sun 29 Mar 2026 08:00:21 +0000
Manifest next update: Mon 30 Mar 2026 08:00:21 +0000
Files and hashes: 1: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl (hash: Xmf243THiVOHr8bqTr1dk1ucSMUlI2DrjbaWRcvB3y4=)
2: XlSDqc4huU4T5pBV_rhm_39vHOA.asa (hash: y6lBqHLFbjHu8Lg/fkhH89s17tcMPV1sgWAsdIlsdfg=)
3: jMbXfYwQDm8CjXt4xxwnq70JuMY.roa (hash: FXNV3Qmyjy1ONKJk6QzKO0EfhVvk4xc2mM2Ngz7Mp/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b5:45:97:dd:e6:77:48:3e:bd:f9:4e:cd:27:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359ddc737684ce041754a95b56b5a076d8851048
Validity
Not Before: Mar 29 08:00:21 2026 GMT
Not After : Mar 30 08:00:21 2026 GMT
Subject: CN=472e887be7b67f12692d9dd3af298fea8820d1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:98:7a:16:fa:89:10:5f:5a:cb:0c:37:ae:60:
78:29:73:45:6f:24:99:07:e5:b7:fa:63:8a:3b:d1:
b9:3b:dd:4c:fa:7e:07:b6:5a:a7:6d:25:60:d4:14:
eb:f7:af:8c:93:cb:c1:19:57:6f:ff:89:fb:4e:2e:
3f:42:dc:84:96:1c:02:17:b0:33:a0:0c:4d:bc:28:
1c:15:5c:c5:06:95:16:c0:0c:4e:f5:dc:07:72:69:
7a:cb:f9:d5:4c:12:dc:77:d8:7c:ae:66:fc:32:7d:
de:e4:69:05:34:f7:b9:a9:13:71:e3:1f:bf:ed:e8:
08:35:6a:c4:be:90:ca:ba:7c:fc:3d:fe:02:a6:35:
13:73:09:78:6b:bd:2f:11:35:85:ca:91:64:3b:a2:
ec:6b:6c:75:67:76:ec:cc:e7:f4:cf:9d:77:dc:90:
49:92:01:36:e7:be:3d:a9:88:e3:8e:5b:97:9e:eb:
8c:f7:7b:bc:23:11:60:a8:87:93:05:52:0a:43:aa:
2a:a2:6d:ea:08:84:4d:c1:8d:d7:38:a3:59:1d:b6:
71:1f:c6:29:f6:8d:23:a0:83:ae:5b:fc:bc:a1:fb:
e3:98:58:62:2a:b2:90:d1:20:c1:65:fd:ab:a7:0d:
54:0b:a8:78:e4:de:bb:8f:9b:b0:6d:f4:39:ad:79:
ae:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2E:88:7B:E7:B6:7F:12:69:2D:9D:D3:AF:29:8F:EA:88:20:D1:B0
X509v3 Authority Key Identifier:
keyid:35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6c:e7:12:e7:62:14:3a:e0:59:87:fa:59:a6:8c:d0:82:60:
2e:24:f9:b9:69:27:ec:5a:b9:22:f9:c7:19:69:66:f3:a9:e3:
59:c1:49:62:ae:b6:49:be:ed:b9:71:c6:c3:09:f0:f9:c9:89:
37:5b:74:25:78:06:35:ab:67:1f:4d:e5:4e:d0:5d:07:a2:4b:
df:8d:e3:41:45:35:f7:92:68:85:7d:c4:ef:40:23:90:8f:47:
32:bb:13:17:f3:e4:80:1e:45:2f:7e:2d:1e:d8:d2:3b:d0:0f:
4a:59:35:2c:9a:a6:95:fc:40:9c:10:96:36:f6:0b:8e:14:ee:
cf:34:16:9c:a8:42:02:ca:bd:bc:44:8c:41:81:41:42:ae:cd:
ee:f2:3d:40:3c:76:45:fd:e0:2c:59:37:53:13:b8:b0:8b:b2:
f7:33:89:10:23:e2:14:82:d3:48:8b:d1:88:20:bc:c1:50:79:
ae:de:0b:55:20:4a:e8:74:4d:75:36:81:39:18:b2:a9:41:03:
1f:02:d3:36:a4:d1:3a:1a:0a:fa:00:7d:e3:77:a5:c8:b2:83:
5d:f7:a6:45:33:40:ac:d7:1a:3d:b1:a8:2d:69:9e:31:b9:ca:
91:71:de:c9:d8:37:88:a1:82:08:85:a1:2b:79:7a:c9:d6:f6:
99:c4:5c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:06 2026 by rpki-client