Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
File: Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft (raw, json)
Hash identifier: E7jIYiGUOWDzHB1wjir1yM3tirMvn7RuZ1QpY9vVCsI=
Subject key identifier: C4:5C:B2:23:72:95:7F:1D:53:39:89:A6:57:0D:40:A8:50:A2:B8:9A
Authority key identifier: 36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1
Certificate issuer: /CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
Certificate serial: 019D37BFEDAD866C18BCCEBB13487DDCC792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
Manifest number: 0838
Signing time: Sun 29 Mar 2026 04:00:18 +0000
Manifest this update: Sun 29 Mar 2026 04:00:18 +0000
Manifest next update: Mon 30 Mar 2026 04:00:18 +0000
Files and hashes: 1: Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl (hash: Q4g4BqUrZIlpmT3ciIf9AkzDtjHmC7P4vx2HUzHNSJs=)
2: jVkKuhLBgjcxgmZ4JbZooBHVJTA.roa (hash: l52OV0jVhno5nCt35UFaMCMSSD9pL5Av6xQOaLd6nNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:ed:ad:86:6c:18:bc:ce:bb:13:48:7d:dc:c7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
Validity
Not Before: Mar 29 04:00:18 2026 GMT
Not After : Mar 30 04:00:18 2026 GMT
Subject: CN=c45cb22372957f1d533989a6570d40a850a2b89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:dd:82:37:d8:2b:ab:72:a7:c7:58:e2:08:
84:93:3b:0c:51:25:22:f9:f4:7e:5c:84:aa:03:9a:
cd:ed:e1:cb:f2:23:4e:f1:9e:4f:db:5d:74:40:cf:
99:b3:5c:d9:95:92:58:30:49:b5:18:25:96:ea:1f:
8f:e7:cf:ec:87:a0:97:57:35:a3:5a:a2:93:dd:e2:
9d:5c:8e:61:bf:65:7d:24:cc:4a:15:6a:07:4c:ae:
89:1b:83:3e:27:5f:be:b3:db:57:51:11:f6:19:9b:
a8:78:a1:ad:e2:ee:1e:f7:5d:44:3d:f9:57:05:b9:
e2:fb:a6:fe:29:31:89:fa:02:52:39:c3:ce:50:a4:
27:bb:ff:fd:aa:0c:12:d5:d7:75:01:d3:63:3d:2f:
cd:98:58:83:25:13:ab:5c:07:bf:e0:d5:17:19:aa:
27:59:2d:2c:c0:7b:4e:86:00:01:32:b5:c4:56:44:
7c:6a:70:7c:2e:e1:90:15:a1:7e:a8:72:fe:19:a8:
c3:b1:2d:bf:c5:59:bc:c2:80:1b:75:32:c7:4a:65:
ca:9f:42:1d:70:e9:d0:36:0e:9d:bd:fd:50:66:bf:
a1:21:1a:92:36:1a:74:f0:43:68:b9:01:20:05:a2:
b6:28:b4:5f:d7:94:0f:78:ac:cb:d9:85:d0:2b:5b:
dd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5C:B2:23:72:95:7F:1D:53:39:89:A6:57:0D:40:A8:50:A2:B8:9A
X509v3 Authority Key Identifier:
keyid:36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:64:5a:53:6f:32:fe:48:6b:0f:cd:85:2e:df:b2:68:bf:78:
80:28:ad:da:85:cc:dc:b8:75:df:9b:a3:2c:56:53:13:52:8f:
0a:21:bf:94:24:ba:36:f3:5e:70:51:be:f2:bd:72:51:ca:42:
74:e0:14:60:89:e2:7b:22:6c:e1:11:a0:d8:27:92:1d:cb:5c:
f3:28:21:66:29:88:1f:65:5b:6b:75:32:1e:20:ea:ed:ee:4d:
17:2d:86:03:e8:1e:1c:35:64:60:cc:24:11:23:34:cc:ea:b0:
12:b7:ab:f9:3c:cd:e9:09:aa:07:6b:01:f5:83:ee:5b:53:74:
57:27:2e:b9:74:6a:f3:cb:ba:50:f1:e8:75:37:ed:a0:03:05:
c1:a8:ab:c1:96:ab:a6:6e:ba:1e:23:38:4b:df:3e:00:46:a5:
b5:26:c4:4e:d0:d9:e6:2d:82:7c:1c:90:da:15:2a:f2:c2:c7:
65:f5:5b:bd:5f:d6:53:8b:ba:ba:31:78:60:e6:cd:44:a6:de:
8a:dd:28:38:b2:ee:24:75:79:7f:fc:7e:8e:bb:48:72:a8:0c:
99:cc:dc:d3:69:e4:41:f6:de:02:46:de:4f:59:f2:53:13:9e:
83:97:40:4b:66:d3:26:18:a2:d7:bc:1a:b5:e1:a5:20:ef:ea:
6f:f4:08:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:15 2026 by rpki-client