Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
File: NhIf0uc0bus8H451uTyE-VhB9EY.mft (raw, json)
Hash identifier: mjWgHC67Iwh41AOeyUn5VWuV6AknSGhBx4Mq3t1aH8A=
Subject key identifier: B5:5F:2C:9C:8E:40:FE:08:0F:7C:5C:B0:09:29:85:D9:E9:7D:B3:EE
Authority key identifier: 36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
Certificate issuer: /CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Certificate serial: 019D378929EFD7EA88FB4DBDFC8CB2564D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
Manifest number: 05A5
Signing time: Sun 29 Mar 2026 03:00:29 +0000
Manifest this update: Sun 29 Mar 2026 03:00:29 +0000
Manifest next update: Mon 30 Mar 2026 03:00:29 +0000
Files and hashes: 1: NhIf0uc0bus8H451uTyE-VhB9EY.crl (hash: l8VMGqd90AfHGOK7d8L0flegzteR/aWeKUYc74t5SXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:29:ef:d7:ea:88:fb:4d:bd:fc:8c:b2:56:4d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Validity
Not Before: Mar 29 03:00:29 2026 GMT
Not After : Mar 30 03:00:29 2026 GMT
Subject: CN=b55f2c9c8e40fe080f7c5cb0092985d9e97db3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:e5:c5:bd:47:13:55:e7:3a:42:d3:44:6b:
60:2a:ec:e5:fe:f4:1d:cc:45:8f:2c:f1:e4:39:c9:
04:87:c0:67:7c:eb:2b:b5:2d:95:e0:46:c7:9a:9b:
d9:76:33:ec:08:fa:60:15:4a:2c:45:3d:fc:00:88:
f9:6b:dd:40:30:91:40:50:fb:c5:f4:5d:bf:1e:80:
a5:0b:1e:61:a6:9c:42:6a:5b:9c:96:28:ac:3b:cf:
d5:76:0c:89:a4:95:0f:5d:a7:24:31:c6:c1:93:d2:
3f:71:fa:5c:94:3c:45:28:07:56:c0:95:09:86:04:
9b:b7:02:ce:85:d8:d6:9e:cf:de:89:8a:22:2c:b6:
0d:40:03:64:7e:99:11:14:e3:fe:64:18:01:ea:1f:
0f:0a:a3:a8:88:b0:6f:88:ce:3e:77:63:ec:ff:1f:
e2:99:a3:56:8d:fe:ff:39:eb:94:11:1c:59:50:06:
aa:63:c6:8d:0a:16:14:92:6e:da:70:e0:4b:6c:9d:
56:8e:a2:39:a3:a9:33:2d:83:83:b8:7a:b7:bd:42:
f8:72:a9:b1:9c:53:ff:d2:74:46:ff:89:6f:77:65:
8e:ec:c4:b9:ab:f6:33:6c:38:2c:54:7f:2e:83:5e:
94:68:ff:c5:dc:71:2c:94:7e:92:f9:3a:df:7d:c4:
66:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5F:2C:9C:8E:40:FE:08:0F:7C:5C:B0:09:29:85:D9:E9:7D:B3:EE
X509v3 Authority Key Identifier:
keyid:36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:37:97:94:f4:f9:77:04:42:e4:28:ec:a3:9d:5f:db:11:4d:
51:25:7d:a5:c3:0e:e4:90:55:af:7d:07:c3:98:cb:2e:28:b1:
78:5c:62:35:68:c6:6f:8b:cf:3c:af:05:6f:2b:f1:b5:3c:39:
ec:30:c6:d4:65:cb:6e:03:d3:1c:a3:3d:e0:24:39:27:26:b3:
81:26:1d:f9:69:b8:4b:e8:35:86:db:25:ee:58:53:d4:da:d6:
6a:af:d6:d1:81:6a:df:3a:33:5f:fe:f4:76:21:b0:10:de:7f:
c0:43:ab:ae:54:a7:28:52:36:fa:92:37:cb:61:b5:6e:7d:66:
ed:ca:51:68:6a:0b:d6:72:77:77:14:33:42:d0:ef:35:70:09:
a8:16:64:a5:34:88:49:37:f0:62:f0:6f:57:4c:4d:12:08:be:
37:d7:58:dc:1a:ce:39:90:c6:57:7e:9f:a2:83:b2:9f:16:d1:
aa:50:05:bc:34:03:fe:1c:75:36:22:50:19:6a:9e:e7:a2:69:
05:d2:50:7f:d4:b3:9c:df:90:c7:f5:3c:4f:d7:12:0e:d8:3a:
ad:ff:e2:d5:31:7f:fc:26:b4:85:b8:6d:3d:bb:98:9b:ae:b7:
11:3a:a4:30:15:41:f0:25:a9:4d:73:6f:91:6e:02:1f:9e:b1:
a3:cb:42:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iSnv1+qI+029/IyyVk0PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTIxZmQyZTczNDZlZWIzYzFmOGU3NWI5M2M4NGY5NTg0
MWY0NDYwHhcNMjYwMzI5MDMwMDI5WhcNMjYwMzMwMDMwMDI5WjAzMTEwLwYDVQQD
EyhiNTVmMmM5YzhlNDBmZTA4MGY3YzVjYjAwOTI5ODVkOWU5N2RiM2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcblxb1HE1XnOkLTRGtgKuzl/vQd
zEWPLPHkOckEh8BnfOsrtS2V4EbHmpvZdjPsCPpgFUosRT38AIj5a91AMJFAUPvF
9F2/HoClCx5hppxCalucliisO8/VdgyJpJUPXackMcbBk9I/cfpclDxFKAdWwJUJ
hgSbtwLOhdjWns/eiYoiLLYNQANkfpkRFOP+ZBgB6h8PCqOoiLBviM4+d2Ps/x/i
maNWjf7/OeuUERxZUAaqY8aNChYUkm7acOBLbJ1WjqI5o6kzLYODuHq3vUL4cqmx
nFP/0nRG/4lvd2WO7MS5q/YzbDgsVH8ug16UaP/F3HEslH6S+TrffcRm6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVfLJyOQP4ID3xcsAkphdnpfbPuMB8GA1UdIwQY
MBaAFDYSH9LnNG7rPB+Odbk8hPlYQfRGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhJZjB1YzBidXM4SDQ1MXVUeUUtVmhCOUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yMWQ1NjAtY2IxNS00NmMzLWFmMzQt
YTg5ZTkzN2UyOWQxLzEvTmhJZjB1YzBidXM4SDQ1MXVUeUUtVmhCOUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yMWQ1NjAtY2IxNS00NmMzLWFmMzQtYTg5ZTkzN2UyOWQx
LzEvTmhJZjB1YzBidXM4SDQ1MXVUeUUtVmhCOUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjeXlPT5
dwRC5Cjso51f2xFNUSV9pcMO5JBVr30Hw5jLLiixeFxiNWjGb4vPPK8FbyvxtTw5
7DDG1GXLbgPTHKM94CQ5JyazgSYd+Wm4S+g1htsl7lhT1NrWaq/W0YFq3zozX/70
diGwEN5/wEOrrlSnKFI2+pI3y2G1bn1m7cpRaGoL1nJ3dxQzQtDvNXAJqBZkpTSI
STfwYvBvV0xNEgi+N9dY3BrOOZDGV36fooOynxbRqlAFvDQD/hx1NiJQGWqe56Jp
BdJQf9SznN+Qx/U8T9cSDtg6rf/i1TF//Ca0hbhtPbuYm663ETqkMBVB8CWpTXNv
kW4CH56xo8tCHQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:32 2026 by rpki-client