Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
File: 6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft (raw, json)
Hash identifier: By0kB2m5XvuI0J4C1kD1MAlfUEC6c2eD9d6uTcrv6Io=
Subject key identifier: 38:5C:E8:EC:DD:FA:85:E1:7F:59:78:B3:DA:C0:2A:2F:B4:B8:FA:33
Authority key identifier: E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB
Certificate issuer: /CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
Certificate serial: 019D3866579DF759F2F24C603DEED9FF8BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
Manifest number: 0739
Signing time: Sun 29 Mar 2026 07:02:03 +0000
Manifest this update: Sun 29 Mar 2026 07:02:03 +0000
Manifest next update: Mon 30 Mar 2026 07:02:03 +0000
Files and hashes: 1: 6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl (hash: bFNVWQWIXBFLpQPCgtQgkANxpzVERJ8aJnhJjScFCag=)
2: G2J1mbO5SfOgCeh5sYzB_zBsUlY.roa (hash: yJMiIGusOoKDUJh8IDxxzE/Bfvy2Ug2/08WIutRLszo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:57:9d:f7:59:f2:f2:4c:60:3d:ee:d9:ff:8b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
Validity
Not Before: Mar 29 07:02:03 2026 GMT
Not After : Mar 30 07:02:03 2026 GMT
Subject: CN=385ce8ecddfa85e17f5978b3dac02a2fb4b8fa33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:91:81:0f:a8:8a:9d:fe:6b:63:8c:13:96:ca:
e2:30:ad:7d:15:f4:70:ea:f9:60:f6:e0:3d:7e:59:
4d:ca:cd:57:8e:d3:12:17:ca:90:e7:52:26:80:c4:
05:ab:8a:67:55:4b:6d:2e:0c:5b:fe:7c:b8:7a:2b:
c8:df:59:7d:e8:af:5e:58:13:79:c7:01:43:ad:8e:
ed:4e:09:57:92:78:3e:66:e8:78:6e:19:69:5b:97:
57:3f:ad:ac:f7:56:ca:f2:d4:84:f3:45:a4:ed:17:
13:de:ef:e8:73:b0:de:c0:8c:2d:ad:4f:d1:57:51:
5a:ce:4b:6e:0e:9d:23:8b:64:ca:99:bf:1d:8d:22:
98:bf:2b:be:6c:a7:5d:ab:48:c4:d4:6c:eb:0f:5d:
1d:f1:e6:2a:7f:05:15:50:be:f0:8b:37:1a:8a:95:
7f:93:64:73:82:df:51:23:0b:47:5e:fc:aa:74:b7:
b0:f9:d7:de:10:2e:90:32:ab:cd:b5:96:29:30:0e:
f5:ab:28:63:f8:f7:11:84:a2:dd:1a:1a:42:0f:b6:
fb:15:a8:3c:f8:73:5b:15:3f:35:c0:d8:be:5d:f2:
9a:6c:17:90:54:f7:03:9c:e1:3a:91:ba:da:f4:e1:
18:0f:91:ec:b5:29:60:06:87:44:75:cb:05:eb:93:
20:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5C:E8:EC:DD:FA:85:E1:7F:59:78:B3:DA:C0:2A:2F:B4:B8:FA:33
X509v3 Authority Key Identifier:
keyid:E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f5:7c:b4:95:c5:76:9c:fd:da:e9:3e:89:d4:12:cb:88:83:
d8:db:9c:06:ce:1f:19:fb:bb:9d:c6:51:10:65:b0:e9:bc:1e:
61:d8:10:48:7a:db:40:0b:0c:c3:f3:f2:15:05:69:95:e7:79:
8e:d9:eb:d5:f3:ed:a7:a8:d6:53:e3:07:03:fb:0d:22:ce:81:
df:e1:1b:f5:01:58:6f:28:02:e9:ca:98:64:f1:18:85:c3:dd:
80:32:5b:60:9b:a1:0c:f5:34:95:ab:e2:37:8a:34:15:6f:f0:
e8:ee:92:d4:b1:49:e2:3d:38:d2:3f:c1:37:68:3e:2c:33:c1:
a2:e3:35:8a:13:10:eb:81:2c:d2:25:b1:e1:ed:dd:4e:2f:f6:
66:c9:b0:92:bc:33:f0:d3:18:49:d3:be:69:59:a5:fa:25:f5:
af:50:f7:b2:a7:65:77:f6:50:ad:4e:6d:e5:ca:c2:c9:5d:6f:
a4:d7:57:93:e4:d8:11:ba:af:79:c1:75:5e:c5:b2:30:41:ab:
01:d9:ac:8d:24:ca:36:61:66:5f:d3:2f:12:fe:0a:61:17:f6:
6a:5a:38:16:9d:fc:22:4a:9a:e1:6e:6e:0d:35:a4:98:97:04:
bd:df:fa:ba:89:8b:da:23:b1:e3:58:29:89:b6:a5:ca:02:03:
f6:a0:f2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:03 2026 by rpki-client