Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
File: NsxJTEqTS7s89Gulgk1mZsiUei8.mft (raw, json)
Hash identifier: qORvplhKHi075Kq2DBVzn8U+i5q0VSlUwQUzFcY6n/Q=
Subject key identifier: E1:3D:7C:2B:E1:9B:15:DD:87:7B:F9:FF:E2:79:35:7C:6E:BD:3B:7C
Authority key identifier: 36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F
Certificate issuer: /CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
Certificate serial: 019D37C11C93548E4DE68B6EB5BE993E2C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
Manifest number: 084D
Signing time: Sun 29 Mar 2026 04:01:35 +0000
Manifest this update: Sun 29 Mar 2026 04:01:35 +0000
Manifest next update: Mon 30 Mar 2026 04:01:35 +0000
Files and hashes: 1: 7Nw66k4HGDgniHjPpIYuFlo7wts.roa (hash: xkBwde/whvV3zzujO/2yU/8uxz1ZIVTTivP0Kf+ua7o=)
2: NsxJTEqTS7s89Gulgk1mZsiUei8.crl (hash: DQO1vZtRU0Sc1a90O46BhWncYvjN4fWLP9eP+3SygV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:1c:93:54:8e:4d:e6:8b:6e:b5:be:99:3e:2c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
Validity
Not Before: Mar 29 04:01:35 2026 GMT
Not After : Mar 30 04:01:35 2026 GMT
Subject: CN=e13d7c2be19b15dd877bf9ffe279357c6ebd3b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:bf:5d:ee:2f:48:f1:6d:33:79:18:78:1a:
aa:d3:53:0d:39:68:2b:7c:3b:26:c1:a2:f1:4b:c0:
c9:7b:94:90:c3:fe:fa:16:01:b2:cc:1d:5b:8c:93:
58:a3:a9:ef:5e:1a:b0:42:06:67:2a:49:05:f1:25:
cf:69:e3:56:37:c3:e8:de:03:ad:c2:bc:5c:1e:44:
ed:7b:91:f4:32:6b:98:35:15:ba:1e:4e:a3:91:12:
7f:8e:2e:bf:fa:26:90:58:ff:97:52:b9:10:ef:b6:
c2:90:7e:65:6a:66:b3:f8:07:60:38:ec:17:00:37:
7a:e2:f8:5d:94:73:24:1a:d0:b2:fb:69:37:89:82:
cc:f5:0f:dc:b3:9c:54:8b:d6:4c:9e:98:57:79:f6:
2f:bc:b5:52:74:ef:45:d8:2d:e8:d8:d8:39:6a:20:
79:a1:cf:da:32:34:48:82:12:e3:9e:36:0d:38:9b:
c3:01:e2:56:75:53:e6:3e:31:27:fe:29:1e:34:01:
d3:ed:c9:41:59:4f:2d:92:8d:a1:4d:e9:35:96:24:
93:62:dd:a4:60:65:2c:27:9a:68:46:74:14:9a:dc:
09:0f:0c:0f:40:17:ea:db:82:07:95:bf:55:45:87:
6a:f8:29:9a:de:52:29:f8:f9:07:90:32:47:35:09:
9f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3D:7C:2B:E1:9B:15:DD:87:7B:F9:FF:E2:79:35:7C:6E:BD:3B:7C
X509v3 Authority Key Identifier:
keyid:36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:54:9b:d1:5f:7b:a2:13:5e:d0:41:ae:14:4d:8d:51:5f:71:
12:ed:75:25:8e:63:09:1f:d3:bb:4b:e1:52:4e:58:98:b3:5e:
5d:b4:d7:a2:a4:9a:f9:f7:c9:2b:37:e7:74:3d:14:f1:5f:ff:
eb:60:a8:38:4d:e6:96:a2:b0:d1:12:9a:74:69:45:6d:a6:ef:
67:85:2e:88:a3:ca:36:be:ce:ef:1b:a7:4e:80:d5:5f:0a:34:
60:bf:ee:fb:f5:4b:8c:f0:1d:aa:b1:32:8f:1f:b3:9e:04:04:
99:fb:5e:e1:6f:b0:1b:5b:a8:36:2d:71:89:3b:4e:a8:b2:13:
29:63:51:17:14:1e:f9:d3:96:99:8f:cd:1d:54:cd:80:15:70:
17:67:f8:b5:08:f4:d0:5c:24:d0:e0:27:61:42:c9:32:0c:ad:
2f:1f:6a:ad:f1:aa:88:ee:14:56:c7:49:73:1c:87:44:3c:f8:
a8:f9:4f:35:6f:34:0b:94:92:20:ae:15:ca:a4:a0:5d:d1:52:
c3:74:7e:1c:12:f7:bc:d4:46:45:59:27:3e:91:55:50:49:eb:
fa:48:71:da:8a:b5:ac:14:32:d1:7a:13:d7:a5:aa:13:d7:31:
75:bb:62:d5:f6:67:29:ae:5e:d2:f4:e6:d6:70:86:ce:43:8e:
8f:84:65:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:26 2026 by rpki-client