Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
File: NW5HRHMdpE8I-l6SxesqR01JqJI.mft (raw, json)
Hash identifier: tT8d4sqJ7C8ixG9kawwG5mnRjTJGF3KVc3HJRb7Y77M=
Subject key identifier: 27:B8:14:17:C8:9A:F9:B9:D0:DF:05:FB:DF:A1:EE:A9:E5:EA:0D:4B
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial: 019D39AE66B46A323DA98E00D88E43A6286F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 13:00:23 +0000
Manifest this update: Sun 29 Mar 2026 13:00:23 +0000
Manifest next update: Mon 30 Mar 2026 13:00:23 +0000
Files and hashes: 1: NW5HRHMdpE8I-l6SxesqR01JqJI.crl (hash: 6KCVH8HxPugPkjwl7UGve4SumRMxoheti6qMX01QbcU=)
2: fk9U3XR8wWwd2opanzwEAz6eKk4.roa (hash: 5EeRjXWRWUv9RoV34Pw35rxYHtcF/8u2AEnciChzLxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:66:b4:6a:32:3d:a9:8e:00:d8:8e:43:a6:28:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Validity
Not Before: Mar 29 13:00:23 2026 GMT
Not After : Mar 30 13:00:23 2026 GMT
Subject: CN=27b81417c89af9b9d0df05fbdfa1eea9e5ea0d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:b4:63:4e:eb:28:f0:69:9e:d3:08:3c:88:
c1:9b:5c:03:24:6b:6c:79:25:9b:70:35:60:48:68:
3e:12:a1:83:00:06:77:93:6e:76:fb:2f:d4:d1:c2:
2f:f9:29:8c:ea:75:48:56:d3:ac:67:36:d3:57:cc:
64:b6:8c:70:45:16:53:78:89:3e:32:b6:c3:86:fb:
83:ab:15:09:59:f5:10:47:64:69:dc:b5:55:62:74:
31:de:09:13:89:39:34:4f:d2:c6:a5:46:cf:4b:83:
e8:25:56:54:f9:fe:26:7c:72:7e:c7:4d:0a:a9:b6:
cb:42:df:7c:8a:d4:f4:49:58:24:61:da:74:92:04:
53:80:00:1a:8e:6a:20:f5:e4:56:6f:e6:62:c3:47:
93:0e:25:3d:7d:3e:bf:24:54:a9:9b:e9:a8:75:35:
2e:a4:de:73:e3:35:76:32:a5:09:fc:64:fc:58:1b:
32:ee:cd:6d:63:b2:1d:3e:15:68:4d:6f:b2:97:fd:
d8:07:ae:c5:06:60:c3:24:9d:19:fb:59:81:78:d2:
5a:e0:59:60:f8:1e:f1:4d:a6:ba:d0:0d:29:91:5c:
29:a5:73:32:9c:c8:79:24:f5:a6:43:0b:ef:c1:1d:
e2:05:0e:9e:41:e5:b0:12:10:89:9d:88:26:bb:b3:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B8:14:17:C8:9A:F9:B9:D0:DF:05:FB:DF:A1:EE:A9:E5:EA:0D:4B
X509v3 Authority Key Identifier:
keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2b:fd:e1:d9:4c:c0:9f:dd:f6:7a:ae:41:f5:76:1f:7d:a5:
9e:e2:7c:ec:c2:d1:fe:98:c9:6a:18:c2:39:63:21:c9:53:78:
fe:84:8e:ee:ca:31:82:b6:79:d7:cc:e0:f7:dc:f3:37:a9:8e:
ea:a7:42:7e:d8:f2:6a:20:65:24:8e:9b:fe:c0:5f:85:72:5f:
9f:f0:37:40:1d:4f:77:b4:29:23:9d:df:5b:31:92:ca:37:df:
52:98:ff:4a:16:0d:3f:69:b8:81:f1:01:71:f0:f6:be:b1:73:
86:a5:86:f9:31:67:ed:85:ed:bf:ae:d4:7f:c6:8d:07:c1:39:
ea:9b:b7:da:d9:e4:76:6c:c3:47:d2:40:4c:02:56:8d:ef:83:
a7:02:9f:ae:9f:af:c3:7a:96:72:87:f9:16:b8:fd:8e:a6:af:
cd:78:e7:93:f2:54:a2:79:ad:fe:cc:13:6e:4d:6d:88:43:ee:
e7:a1:be:f8:c7:49:51:e7:de:db:69:50:8c:18:07:8d:c8:f2:
6f:03:96:7d:c9:09:4d:f0:94:58:43:2a:43:59:8d:27:d9:5d:
04:9d:c5:d0:75:1b:20:a8:40:2f:29:28:ca:0c:9c:0e:22:a0:
34:b6:d7:0c:9a:8b:26:d8:72:2e:bd:90:e0:7e:0f:53:93:f4:
13:0a:ea:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:01 2026 by rpki-client