Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.mft
File: nVXDPIsCBMRAwPl46lhSCAHixcc.mft (raw, json)
Hash identifier: fTV/R0wwnzg6Fl1ssFVAqilCuQfAcE6PZSJZkV4L0q8=
Subject key identifier: 1F:EE:A2:E3:3F:1C:E8:0F:88:22:E5:E2:BF:5A:42:1A:71:79:12:9F
Authority key identifier: 9D:55:C3:3C:8B:02:04:C4:40:C0:F9:78:EA:58:52:08:01:E2:C5:C7
Certificate issuer: /CN=9d55c33c8b0204c440c0f978ea58520801e2c5c7
Certificate serial: 019D389BC1416316A33FC0380369B32D00B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVXDPIsCBMRAwPl46lhSCAHixcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.mft
Manifest number: 0134
Signing time: Sun 29 Mar 2026 08:00:24 +0000
Manifest this update: Sun 29 Mar 2026 08:00:24 +0000
Manifest next update: Mon 30 Mar 2026 08:00:24 +0000
Files and hashes: 1: nVXDPIsCBMRAwPl46lhSCAHixcc.crl (hash: zddcDADfE2zMNEXOwiv2/GJfciWTc2LAuA/zpvNLn54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVXDPIsCBMRAwPl46lhSCAHixcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c1:41:63:16:a3:3f:c0:38:03:69:b3:2d:00:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d55c33c8b0204c440c0f978ea58520801e2c5c7
Validity
Not Before: Mar 29 08:00:24 2026 GMT
Not After : Mar 30 08:00:24 2026 GMT
Subject: CN=1feea2e33f1ce80f8822e5e2bf5a421a7179129f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:8f:ab:90:4a:4b:f5:52:37:9d:49:88:3f:
e1:56:9b:1b:bb:06:b1:86:14:85:d6:ef:c6:3d:c3:
20:17:22:ec:b3:85:69:67:e1:f0:30:a9:01:e3:c8:
54:ae:38:be:11:31:d4:34:85:ae:10:a1:7b:15:93:
6d:87:d7:86:a6:a3:64:9c:fb:23:33:6c:62:df:44:
a2:45:a4:b4:fc:d1:65:ca:87:2a:43:a7:2e:1c:0e:
25:73:ef:d6:cf:4a:26:f0:53:b1:0d:6e:c2:87:b6:
cb:bc:e2:e8:5e:12:92:95:74:ef:f3:c0:c7:c3:fd:
4d:2b:8c:38:8e:60:92:21:0a:bb:9f:2e:8f:55:15:
a6:d0:eb:63:53:63:a5:07:e5:02:d3:e6:89:40:ca:
9b:9d:28:61:32:71:81:0c:5c:a0:e5:65:94:c9:43:
8a:4f:5e:74:45:54:45:93:fd:fa:82:10:47:14:73:
05:5a:9b:26:5c:d1:c7:e7:23:a4:12:74:a9:90:fb:
ba:fb:31:a7:09:2d:19:57:cf:21:28:bd:c1:b5:f2:
71:7f:1e:2e:ba:92:45:d1:a9:02:87:74:2a:eb:ec:
85:0e:1c:09:5f:9a:40:3a:cd:b0:df:3d:0c:2b:23:
ab:e5:c1:e9:2c:fb:70:68:59:97:91:61:b3:b6:e8:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EE:A2:E3:3F:1C:E8:0F:88:22:E5:E2:BF:5A:42:1A:71:79:12:9F
X509v3 Authority Key Identifier:
keyid:9D:55:C3:3C:8B:02:04:C4:40:C0:F9:78:EA:58:52:08:01:E2:C5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVXDPIsCBMRAwPl46lhSCAHixcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d3:d2:ab:6a:1f:0b:d2:d8:2f:1e:40:93:61:90:49:9f:e8:
a4:a2:f0:73:5f:40:44:4a:d6:7c:7f:3a:8c:e9:27:c0:ef:1c:
24:52:73:9f:45:d5:4a:9f:0d:02:c8:ad:eb:37:58:63:5a:11:
db:c5:72:df:b5:89:b1:2f:f8:d4:c7:1e:06:5a:0c:28:65:a8:
9e:8d:eb:86:02:8d:0a:08:3d:43:41:2a:95:ab:f7:95:a4:81:
73:7e:c6:f2:8f:a7:51:23:63:3f:dc:69:0c:ff:a6:18:a8:df:
9f:51:27:48:89:19:b7:ba:23:8e:da:af:0f:96:23:4d:17:e9:
54:f4:ac:3b:ff:0d:9a:6a:89:75:c5:be:86:73:b9:73:73:76:
3e:42:24:a1:b1:24:ae:a9:3e:e0:1e:75:6a:65:d1:18:c1:0e:
97:80:0c:31:11:cd:f8:8f:0e:00:80:fb:0c:96:d5:09:e6:bd:
88:05:49:74:20:22:86:45:2a:71:db:fa:5d:77:71:7e:85:ec:
95:ce:7c:a9:0f:0b:c5:bb:1d:26:f3:f5:cb:d0:70:12:d7:6d:
d4:b6:64:91:e7:f2:09:c0:f3:bc:91:9c:b9:ca:13:b8:4c:c5:
fc:82:69:f4:d5:04:da:8c:9b:7b:93:7c:f9:d1:0e:b2:aa:ed:
6c:b1:4d:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m8FBYxajP8A4A2mzLQC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNTVjMzNjOGIwMjA0YzQ0MGMwZjk3OGVhNTg1MjA4MDFl
MmM1YzcwHhcNMjYwMzI5MDgwMDI0WhcNMjYwMzMwMDgwMDI0WjAzMTEwLwYDVQQD
EygxZmVlYTJlMzNmMWNlODBmODgyMmU1ZTJiZjVhNDIxYTcxNzkxMjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMyPq5BKS/VSN51JiD/hVpsbuwax
hhSF1u/GPcMgFyLss4VpZ+HwMKkB48hUrji+ETHUNIWuEKF7FZNth9eGpqNknPsj
M2xi30SiRaS0/NFlyocqQ6cuHA4lc+/Wz0om8FOxDW7Ch7bLvOLoXhKSlXTv88DH
w/1NK4w4jmCSIQq7ny6PVRWm0OtjU2OlB+UC0+aJQMqbnShhMnGBDFyg5WWUyUOK
T150RVRFk/36ghBHFHMFWpsmXNHH5yOkEnSpkPu6+zGnCS0ZV88hKL3BtfJxfx4u
upJF0akCh3Qq6+yFDhwJX5pAOs2w3z0MKyOr5cHpLPtwaFmXkWGztui1owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/uouM/HOgPiCLl4r9aQhpxeRKfMB8GA1UdIwQY
MBaAFJ1VwzyLAgTEQMD5eOpYUggB4sXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblZYRFBJc0NCTVJBd1BsNDZsaFNDQUhpeGNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yNmYzYjEtODk4OC00ZjM5LWIyMzEt
YzNhYjg3NzM4ZmU3LzEvblZYRFBJc0NCTVJBd1BsNDZsaFNDQUhpeGNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8yNmYzYjEtODk4OC00ZjM5LWIyMzEtYzNhYjg3NzM4ZmU3
LzEvblZYRFBJc0NCTVJBd1BsNDZsaFNDQUhpeGNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtPSq2of
C9LYLx5Ak2GQSZ/opKLwc19ARErWfH86jOknwO8cJFJzn0XVSp8NAsit6zdYY1oR
28Vy37WJsS/41MceBloMKGWono3rhgKNCgg9Q0Eqlav3laSBc37G8o+nUSNjP9xp
DP+mGKjfn1EnSIkZt7ojjtqvD5YjTRfpVPSsO/8NmmqJdcW+hnO5c3N2PkIkobEk
rqk+4B51amXRGMEOl4AMMRHN+I8OAID7DJbVCea9iAVJdCAihkUqcdv6XXdxfoXs
lc58qQ8LxbsdJvP1y9BwEtdt1LZkkefyCcDzvJGcucoTuEzF/IJp9NUE2oybe5N8
+dEOsqrtbLFNbg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:26 2026 by rpki-client