Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
File: NrzwGgmAWLhROxb9nksbI4_Nb1g.mft (raw, json)
Hash identifier: Y0I/o6Aq6dl2NO1J/jsLFoT9tU8NKoE+1EcSeVVDQhQ=
Subject key identifier: 68:5C:B9:0D:11:5D:E0:F8:B5:C0:86:D1:3D:2C:19:4F:D0:1E:3A:AE
Authority key identifier: 36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58
Certificate issuer: /CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58
Certificate serial: 019D39778BA0C83A454B66BD3D6A4829F0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
Manifest number: 043D
Signing time: Sun 29 Mar 2026 12:00:28 +0000
Manifest this update: Sun 29 Mar 2026 12:00:28 +0000
Manifest next update: Mon 30 Mar 2026 12:00:28 +0000
Files and hashes: 1: NrzwGgmAWLhROxb9nksbI4_Nb1g.crl (hash: WP8Cc5XLXtaBuiqBWN23j+xwbENoJEQz5qOcth8nWiA=)
2: _8F0lsXlsoNmIGarfGop87h2ymI.roa (hash: vKpahHvP7psgUsaXQeYhHsIR4SzsOJrDnRksmg7tAyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:8b:a0:c8:3a:45:4b:66:bd:3d:6a:48:29:f0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58
Validity
Not Before: Mar 29 12:00:28 2026 GMT
Not After : Mar 30 12:00:28 2026 GMT
Subject: CN=685cb90d115de0f8b5c086d13d2c194fd01e3aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:7c:18:62:5a:94:d7:23:aa:83:d4:e4:95:
0b:87:8a:51:d9:c5:58:86:e5:99:37:a2:57:55:4d:
04:0e:a9:f6:9e:99:f8:d3:d9:67:15:7d:90:98:97:
39:ae:11:98:d6:74:cd:eb:7a:b6:5a:b8:43:c6:cb:
ba:06:cf:63:52:c4:8f:52:42:ca:33:b1:b4:c3:85:
cd:59:79:48:be:48:2f:6f:ba:e1:86:3d:6a:a9:10:
26:3e:ee:d0:95:74:c6:b4:3b:42:94:cd:b3:13:67:
5b:72:19:3a:7f:e8:37:e0:c3:44:14:3c:69:23:fb:
a2:06:14:d9:25:34:3a:98:ee:d0:78:0e:38:b3:af:
ca:4b:73:9d:49:f7:84:e8:5e:3c:f4:30:85:3c:1d:
f9:b6:86:45:05:e6:d2:ba:ae:6a:19:d5:36:c9:4d:
3b:ed:b6:bd:ca:fd:c1:e6:02:7e:32:14:53:d4:a3:
ff:82:7a:6f:24:02:23:41:86:84:1e:70:8a:74:6b:
fe:1e:7a:5f:df:e1:88:9a:eb:65:0e:d4:39:b2:5d:
d6:0f:fd:dc:8d:2c:f6:e2:26:7f:75:08:74:5d:5e:
39:f4:fa:3d:9b:f7:08:e1:44:42:96:40:2f:09:e6:
32:6a:5d:94:cb:ac:2b:42:02:07:71:1e:4b:a1:9c:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5C:B9:0D:11:5D:E0:F8:B5:C0:86:D1:3D:2C:19:4F:D0:1E:3A:AE
X509v3 Authority Key Identifier:
keyid:36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:40:21:37:7b:09:8f:08:09:5e:3e:45:d0:2e:8c:52:ca:fb:
52:0c:1a:a0:0b:3e:80:96:ac:da:ba:85:98:a2:88:a5:ef:8a:
bd:f3:62:6f:38:8e:91:18:86:f7:da:1d:c1:04:41:2c:2d:ee:
72:bf:47:83:bb:ec:02:d7:19:71:e7:d4:7d:a5:cd:fb:c0:b3:
4f:fc:df:80:0c:cf:60:5c:80:71:ac:41:f5:f4:4e:99:1c:45:
bb:d9:8a:7f:2e:47:3f:81:07:9e:7e:2f:30:2b:71:71:3e:37:
2b:cc:6b:55:d2:e6:23:68:17:b4:cd:c3:68:83:07:fa:4e:ea:
83:9b:43:d4:1f:40:66:a5:9e:d8:51:ac:f5:69:9d:79:df:2a:
fb:d0:bb:87:e8:8d:50:4d:7f:14:6f:6e:d0:d7:2f:a0:4d:d1:
b6:54:c6:84:38:1b:55:2d:0d:61:d3:e7:bf:f9:e8:d3:4d:52:
53:08:a3:b0:48:1e:6f:25:f2:e8:ae:bd:94:8d:41:c5:36:31:
04:63:71:39:8e:63:13:7a:c8:62:50:ad:56:fb:0c:1d:d6:18:
e7:e9:6a:ef:2b:30:fa:32:ad:e3:03:8c:52:08:59:a8:4a:63:
8e:47:c9:64:a3:db:10:22:c4:47:d6:70:21:12:27:25:fd:12:
37:38:70:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d4ugyDpFS2a9PWpIKfCzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YmNmMDFhMDk4MDU4Yjg1MTNiMTZmZDllNGIxYjIzOGZj
ZDZmNTgwHhcNMjYwMzI5MTIwMDI4WhcNMjYwMzMwMTIwMDI4WjAzMTEwLwYDVQQD
Eyg2ODVjYjkwZDExNWRlMGY4YjVjMDg2ZDEzZDJjMTk0ZmQwMWUzYWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3V8GGJalNcjqoPU5JULh4pR2cVY
huWZN6JXVU0EDqn2npn409lnFX2QmJc5rhGY1nTN63q2WrhDxsu6Bs9jUsSPUkLK
M7G0w4XNWXlIvkgvb7rhhj1qqRAmPu7QlXTGtDtClM2zE2dbchk6f+g34MNEFDxp
I/uiBhTZJTQ6mO7QeA44s6/KS3OdSfeE6F489DCFPB35toZFBebSuq5qGdU2yU07
7ba9yv3B5gJ+MhRT1KP/gnpvJAIjQYaEHnCKdGv+Hnpf3+GImutlDtQ5sl3WD/3c
jSz24iZ/dQh0XV459Po9m/cI4URClkAvCeYyal2Uy6wrQgIHcR5LoZyoeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhcuQ0RXeD4tcCG0T0sGU/QHjquMB8GA1UdIwQY
MBaAFDa88BoJgFi4UTsW/Z5LGyOPzW9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnJ6d0dnbUFXTGhST3hiOW5rc2JJNF9OYjFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wYzhkYjYtNzFmZC00MzIwLWEwZGMt
MTg2MDgwZWQ5MDAyLzEvTnJ6d0dnbUFXTGhST3hiOW5rc2JJNF9OYjFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8wYzhkYjYtNzFmZC00MzIwLWEwZGMtMTg2MDgwZWQ5MDAy
LzEvTnJ6d0dnbUFXTGhST3hiOW5rc2JJNF9OYjFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0AhN3sJ
jwgJXj5F0C6MUsr7UgwaoAs+gJas2rqFmKKIpe+KvfNibziOkRiG99odwQRBLC3u
cr9Hg7vsAtcZcefUfaXN+8CzT/zfgAzPYFyAcaxB9fROmRxFu9mKfy5HP4EHnn4v
MCtxcT43K8xrVdLmI2gXtM3DaIMH+k7qg5tD1B9AZqWe2FGs9Wmded8q+9C7h+iN
UE1/FG9u0NcvoE3RtlTGhDgbVS0NYdPnv/no001SUwijsEgebyXy6K69lI1BxTYx
BGNxOY5jE3rIYlCtVvsMHdYY5+lq7ysw+jKt4wOMUghZqEpjjkfJZKPbECLER9Zw
IRInJf0SNzhwdA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:44 2026 by rpki-client