Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
File: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft (raw, json)
Hash identifier: zCIYEQM47dZNfg9tSNuJCh0K+nEDf85iH32zk8ke+Kg=
Subject key identifier: B3:74:9E:7F:75:2F:F4:CE:06:95:87:99:82:89:FB:42:30:79:F8:C6
Authority key identifier: 35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
Certificate issuer: /CN=359ddc737684ce041754a95b56b5a076d8851048
Certificate serial: 019E2A022E07BF4E36DE4CCB528300AE61E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
Manifest number: 18E1
Signing time: Fri 15 May 2026 05:00:46 +0000
Manifest this update: Fri 15 May 2026 05:00:46 +0000
Manifest next update: Sat 16 May 2026 05:00:46 +0000
Files and hashes: 1: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl (hash: c3H66h/2CZvkjO2W5ysxO0o7KzyuVRamxlUcXAIjE00=)
2: XlSDqc4huU4T5pBV_rhm_39vHOA.asa (hash: y6lBqHLFbjHu8Lg/fkhH89s17tcMPV1sgWAsdIlsdfg=)
3: jMbXfYwQDm8CjXt4xxwnq70JuMY.roa (hash: FXNV3Qmyjy1ONKJk6QzKO0EfhVvk4xc2mM2Ngz7Mp/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:02:2e:07:bf:4e:36:de:4c:cb:52:83:00:ae:61:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359ddc737684ce041754a95b56b5a076d8851048
Validity
Not Before: May 15 05:00:46 2026 GMT
Not After : May 16 05:00:46 2026 GMT
Subject: CN=b3749e7f752ff4ce069587998289fb423079f8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:be:e4:a3:0c:14:36:77:84:20:e8:fb:08:1b:
5e:cd:b7:b9:8c:fa:74:a5:ea:4b:b8:48:d6:a2:6c:
a5:df:de:df:ee:f5:fb:92:f7:e9:a2:6e:17:89:cb:
02:9e:be:ae:2e:ef:1f:8e:7a:7e:e8:e2:c0:a0:3a:
5c:fc:e5:bc:9c:fd:d5:85:6f:95:28:13:11:85:84:
22:32:08:39:8f:ee:ef:4e:8f:ca:c2:50:bb:00:c6:
ac:9a:42:92:9e:8e:b6:52:8e:87:9f:50:c3:43:7b:
f1:a3:f1:55:3d:86:73:43:ec:cf:58:5b:c8:9e:82:
db:aa:a3:bf:4d:4f:c6:81:1a:ce:20:96:3b:bf:4e:
49:a8:c7:68:ff:61:0c:11:5d:86:df:38:d6:fa:c5:
17:ba:ed:12:c0:86:89:58:69:a3:63:4d:9c:f0:5e:
71:55:4d:fd:57:80:e6:d8:8d:d0:82:b4:a0:ab:f1:
c8:f2:97:bf:89:6d:90:76:0c:82:a7:af:74:71:26:
1f:f8:45:5a:57:1a:c7:13:c1:c6:c0:10:87:9d:f6:
74:76:23:17:6b:67:16:8b:87:f2:cc:ec:f0:7e:95:
4c:81:eb:d6:42:a5:ac:1f:59:07:53:0b:c4:66:1b:
51:07:20:2a:69:ef:eb:4c:45:63:62:d6:6a:2e:ca:
f9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:74:9E:7F:75:2F:F4:CE:06:95:87:99:82:89:FB:42:30:79:F8:C6
X509v3 Authority Key Identifier:
keyid:35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0a:58:a7:13:3e:d0:3f:9e:35:dd:56:d7:9d:7b:de:54:44:
dd:cb:a3:aa:07:5b:4e:2c:d7:dd:cb:8a:99:ed:e1:f6:2e:4e:
a3:21:14:ab:74:fa:a8:12:32:19:da:21:73:19:3d:b5:93:0e:
73:a5:f4:b7:71:58:64:9d:ae:2c:06:fd:e4:d6:33:02:f9:93:
99:cb:bd:51:71:e2:45:b3:0a:75:65:24:ff:f6:38:60:80:7e:
e2:eb:62:ad:a2:40:43:e9:50:3a:af:75:e6:23:4d:91:ee:25:
a3:27:98:be:7a:a5:b7:f0:50:d9:64:26:54:7f:3a:96:32:08:
f4:fc:a1:2b:49:9f:e2:b3:06:5f:e1:38:07:c3:46:2f:84:58:
4f:f9:9c:3e:39:16:73:9d:01:49:5b:2f:98:6a:3f:be:e3:5b:
b3:78:2c:28:e3:71:09:69:e7:72:e2:e9:cd:81:b7:4d:a3:d3:
b5:fc:52:ad:0d:99:86:cf:ac:80:fd:6e:60:da:5c:90:b9:5d:
9d:f6:5a:ab:3d:7b:9f:fe:37:1d:f7:87:c6:7f:14:c1:1a:c7:
ea:a4:b4:f1:41:9b:b8:26:91:4a:90:ae:d0:fb:7d:78:0a:af:
7a:51:61:58:af:4e:ea:ae:a7:de:9a:c3:c3:97:af:e2:90:02:
ef:f9:87:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:59:37 2026 by rpki-client