Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
File: NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft (raw, json)
Hash identifier: OCH6bMfgXPpGNDR+yb1FaKVX9zd2tPAK0sEgO4FfXx0=
Subject key identifier: 27:E2:75:EB:22:BA:CD:60:02:C8:26:6E:1C:2D:3C:FC:ED:05:BA:4C
Authority key identifier: 36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
Certificate issuer: /CN=36135f13abf02fa3fca505d568816afc59334916
Certificate serial: 019D371BC8D64BFA69EE56D4A7CDB4198963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
Manifest number: DE
Signing time: Sun 29 Mar 2026 01:01:00 +0000
Manifest this update: Sun 29 Mar 2026 01:01:00 +0000
Manifest next update: Mon 30 Mar 2026 01:01:00 +0000
Files and hashes: 1: NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl (hash: x2df3P3DJV5ngd5s1FqNuqRNrW7XprohCh9KLudCfAk=)
2: W-HA5m7hemLDXdHbhWk4pSkmXKQ.roa (hash: DFd6jBuLZXEJn0Y04obFpmXz6rYUp0KbjFhguWyn34c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:c8:d6:4b:fa:69:ee:56:d4:a7:cd:b4:19:89:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36135f13abf02fa3fca505d568816afc59334916
Validity
Not Before: Mar 29 01:01:00 2026 GMT
Not After : Mar 30 01:01:00 2026 GMT
Subject: CN=27e275eb22bacd6002c8266e1c2d3cfced05ba4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:93:4d:a9:01:3e:02:1a:33:a9:e5:a6:07:88:
56:21:5f:2c:32:a1:f7:4a:de:2c:9a:68:95:40:71:
5f:6c:ef:9b:f6:0e:68:12:31:48:c9:8f:47:3f:2b:
58:84:16:c7:91:42:73:8f:1f:4a:c0:fc:51:a3:ea:
ca:4f:d5:3b:8c:b0:30:2d:56:9b:97:e2:40:e7:97:
9e:af:13:a8:61:ca:42:54:e0:ec:0c:dc:41:f4:21:
7b:cf:2c:4f:dd:e6:2a:d9:99:21:b4:f9:2c:a0:e4:
fc:51:eb:73:fe:60:ad:fd:79:2d:ec:f8:43:aa:52:
fb:d4:76:60:11:5a:30:ee:fa:e1:ae:ab:97:08:26:
6b:cb:82:a9:05:92:36:84:1e:7f:69:28:27:4e:46:
76:2b:5e:be:31:90:c1:3e:5e:b0:1f:fd:f4:e7:cf:
0f:d1:de:cd:6d:1a:6a:a1:df:f3:2b:e0:e2:bf:eb:
e4:f9:16:20:fb:31:77:a7:8b:2c:3f:56:9e:eb:01:
78:02:90:a5:2f:e2:1c:fe:50:8b:b8:90:31:78:1f:
2b:60:25:8e:80:74:49:11:8f:b3:c8:94:58:25:d0:
a6:7a:a1:a8:ba:c0:0a:67:f6:19:94:b2:18:6f:a1:
65:0f:de:12:a7:9f:e7:9a:22:8d:34:45:85:c0:13:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E2:75:EB:22:BA:CD:60:02:C8:26:6E:1C:2D:3C:FC:ED:05:BA:4C
X509v3 Authority Key Identifier:
keyid:36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b5:2d:80:81:94:e2:b2:d6:fa:2e:c6:12:51:9e:cf:42:ed:
f1:3d:c1:95:e5:50:21:f9:d7:a3:c9:2c:c7:72:ce:7b:21:68:
a2:e0:d2:9b:46:d5:97:47:c1:da:f5:af:d0:08:ec:3d:7e:87:
97:74:a5:2b:f7:82:19:69:2d:1b:9a:0f:e7:7c:7c:20:7a:9c:
3a:c5:f4:e1:18:17:b3:17:e0:cb:cc:0a:a5:39:e1:42:96:e5:
da:df:7c:5f:86:39:72:f5:71:4f:5e:f6:06:10:73:3a:da:b4:
44:a9:44:19:7a:e2:7a:57:83:21:6b:ab:e9:0a:5c:6d:61:32:
ec:98:e5:62:d2:b3:d9:80:b5:69:ec:3d:ee:aa:f2:1a:81:17:
46:1c:5e:84:c2:5c:0b:48:59:26:a7:f1:cd:73:81:02:c0:2b:
73:96:6a:f4:a2:3f:82:ef:f5:b1:38:6e:3a:f2:fc:69:e6:6e:
ee:e1:19:09:90:52:72:a4:53:32:fe:34:8f:79:ed:cc:7e:95:
21:99:d0:15:5d:7e:7c:ed:e2:76:87:21:8d:9b:99:0d:cb:ba:
f2:2a:b1:a7:9d:d4:b6:79:24:1f:4a:a1:52:ad:ec:c7:ec:0c:
44:f9:de:b9:4d:ad:48:70:c2:d1:2b:9f:31:70:d5:0e:ce:de:
36:7d:51:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:56 2026 by rpki-client