Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
File: NHi9VqAesq4wdvaW0B1P_NFAGp8.mft (raw, json)
Hash identifier: jtmtbe5yI6GEiNTzjxhiqrHRzvFH1ka9jK1igGQSUSY=
Subject key identifier: D8:EE:BF:C6:87:63:9B:E4:77:B4:67:95:A4:2E:30:83:61:89:94:C6
Authority key identifier: 34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
Certificate issuer: /CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Certificate serial: 019D3866608035FFB6373B0726711FDE8EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:02:06 +0000
Manifest this update: Sun 29 Mar 2026 07:02:06 +0000
Manifest next update: Mon 30 Mar 2026 07:02:06 +0000
Files and hashes: 1: NHi9VqAesq4wdvaW0B1P_NFAGp8.crl (hash: fJvhlFbWyuNVZhB9V+z1nJiRh+Tcz9ddA8IHa+qG9o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:60:80:35:ff:b6:37:3b:07:26:71:1f:de:8e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Validity
Not Before: Mar 29 07:02:06 2026 GMT
Not After : Mar 30 07:02:06 2026 GMT
Subject: CN=d8eebfc687639be477b46795a42e3083618994c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:50:42:10:44:d0:c3:91:df:72:c4:8b:fa:89:
d5:08:a8:f7:0b:51:0d:3e:10:2e:f9:bc:2c:68:ba:
19:98:a0:7a:a6:43:17:57:62:27:03:3b:8b:68:89:
99:58:7d:e0:ed:47:10:e9:e3:3e:04:e3:e3:82:c3:
d3:19:76:b9:bd:03:95:4e:bf:de:2c:41:37:29:c4:
9c:b2:90:2a:b3:e8:eb:a7:18:5e:4f:28:f0:18:eb:
1a:d2:a1:ba:20:98:d0:74:8c:e6:59:6c:2b:f9:95:
51:ab:31:03:c7:fc:9f:b6:d7:6d:b0:28:41:03:d6:
cb:37:27:88:1f:b7:d4:b1:8a:80:d6:2a:00:19:24:
18:cb:9b:c0:36:84:e5:fb:0c:70:a1:67:1e:6a:cb:
27:e9:67:e6:6f:1e:12:70:2d:f8:1d:09:08:c2:7d:
e2:c8:2e:83:14:ed:63:e6:6a:d4:c9:6b:25:d1:a5:
20:67:5b:1d:b2:62:4d:dd:6f:89:ed:28:f1:20:c3:
4d:cb:ff:b8:db:20:0d:54:66:7f:d6:a3:1a:25:47:
e2:02:61:78:91:93:6b:fc:8e:af:16:81:e2:1e:c5:
81:d7:33:a3:5d:7b:94:f9:74:a5:91:e8:18:70:81:
2f:1b:49:50:ed:e5:f4:aa:a9:6a:15:9d:4f:60:e7:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EE:BF:C6:87:63:9B:E4:77:B4:67:95:A4:2E:30:83:61:89:94:C6
X509v3 Authority Key Identifier:
keyid:34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d1:0f:65:f7:48:e5:32:e9:70:b0:6a:d3:b2:1a:80:4f:87:
1f:03:19:dc:4e:bb:f5:ad:7a:ae:7c:1c:cc:d9:54:da:f0:48:
fe:68:3e:f7:03:df:2a:ff:b4:35:18:65:8d:a9:06:a0:9e:80:
45:ef:fe:e8:d3:7a:40:58:00:19:fc:ed:c5:ab:4a:18:16:41:
86:3c:b6:c8:01:50:df:0f:02:10:91:e0:60:a1:16:14:00:ce:
f1:d1:e6:f6:78:7c:2a:52:0b:94:e3:af:cc:1a:53:53:3d:a7:
4a:5e:37:43:38:12:88:c8:93:77:3c:cd:71:29:da:61:fe:4b:
65:80:3b:6b:09:bf:cf:3b:99:69:91:96:da:76:fc:64:c2:44:
37:81:41:79:5f:6c:a7:e0:db:b1:b7:d6:c7:ae:38:2c:6f:27:
f0:48:38:93:75:44:19:0b:b4:21:ba:ca:fc:98:58:f8:40:61:
8d:d0:c9:a3:04:40:00:09:78:2d:71:cb:46:93:c6:e1:c7:47:
18:38:77:76:07:cc:1e:b7:b6:95:7c:c4:5f:54:2b:e9:dc:c9:
60:c3:12:b8:37:a7:d2:77:d7:e3:95:f4:cf:9f:66:3b:62:1b:
4c:d5:21:79:24:e6:8e:51:2b:30:0e:8a:e3:14:08:f2:22:9a:
8c:57:4e:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZmCANf+2NzsHJnEf3o68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzhiZDU2YTAxZWIyYWUzMDc2ZjY5NmQwMWQ0ZmZjZDE0
MDFhOWYwHhcNMjYwMzI5MDcwMjA2WhcNMjYwMzMwMDcwMjA2WjAzMTEwLwYDVQQD
EyhkOGVlYmZjNjg3NjM5YmU0NzdiNDY3OTVhNDJlMzA4MzYxODk5NGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VBCEETQw5HfcsSL+onVCKj3C1EN
PhAu+bwsaLoZmKB6pkMXV2InAzuLaImZWH3g7UcQ6eM+BOPjgsPTGXa5vQOVTr/e
LEE3KcScspAqs+jrpxheTyjwGOsa0qG6IJjQdIzmWWwr+ZVRqzEDx/yfttdtsChB
A9bLNyeIH7fUsYqA1ioAGSQYy5vANoTl+wxwoWceassn6Wfmbx4ScC34HQkIwn3i
yC6DFO1j5mrUyWsl0aUgZ1sdsmJN3W+J7SjxIMNNy/+42yANVGZ/1qMaJUfiAmF4
kZNr/I6vFoHiHsWB1zOjXXuU+XSlkegYcIEvG0lQ7eX0qqlqFZ1PYOe2UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjuv8aHY5vkd7RnlaQuMINhiZTGMB8GA1UdIwQY
MBaAFDR4vVagHrKuMHb2ltAdT/zRQBqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wZmM3ZDgtMmE1Zi00YjM4LWEyMzAt
ODM5NmY4YzYyNTVhLzEvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wZmM3ZDgtMmE1Zi00YjM4LWEyMzAtODM5NmY4YzYyNTVh
LzEvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtEPZfdI
5TLpcLBq07IagE+HHwMZ3E679a16rnwczNlU2vBI/mg+9wPfKv+0NRhljakGoJ6A
Re/+6NN6QFgAGfztxatKGBZBhjy2yAFQ3w8CEJHgYKEWFADO8dHm9nh8KlILlOOv
zBpTUz2nSl43QzgSiMiTdzzNcSnaYf5LZYA7awm/zzuZaZGW2nb8ZMJEN4FBeV9s
p+DbsbfWx644LG8n8Eg4k3VEGQu0IbrK/JhY+EBhjdDJowRAAAl4LXHLRpPG4cdH
GDh3dgfMHre2lXzEX1Qr6dzJYMMSuDen0nfX45X0z59mO2IbTNUheSTmjlErMA6K
4xQI8iKajFdONw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:12 2026 by rpki-client