Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File: Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier: gUlFGnr0QdB1JrhYdAQoU+iHXFtuSzVkVj6b4jS4HtE=
Subject key identifier: B3:15:6D:9B:72:C3:2A:EE:02:C3:19:35:E5:6E:58:62:B6:CB:57:72
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer: /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial: 019D38D2E5BA0E93B9A95EC821C2840F5365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 09:00:38 +0000
Manifest this update: Sun 29 Mar 2026 09:00:38 +0000
Manifest next update: Mon 30 Mar 2026 09:00:38 +0000
Files and hashes: 1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: rBGBVuoda2bVxZrqQjKRMwVWRnr2vWos1UyGuVCqCxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e5:ba:0e:93:b9:a9:5e:c8:21:c2:84:0f:53:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Validity
Not Before: Mar 29 09:00:38 2026 GMT
Not After : Mar 30 09:00:38 2026 GMT
Subject: CN=b3156d9b72c32aee02c31935e56e5862b6cb5772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:a2:fd:bf:fe:ea:b8:47:78:53:97:4a:15:
f9:9d:46:2f:ab:63:5f:13:11:2b:d4:b4:bd:07:a2:
fd:24:91:dd:0c:ec:7c:36:b6:2a:f4:22:d3:d7:21:
36:f3:0b:e4:58:9a:5d:d3:58:52:bc:a2:e4:a0:12:
f2:e2:8f:5e:c3:83:9d:bf:05:76:30:72:d0:0c:9a:
c2:f8:44:37:12:6b:bf:d8:d5:50:0e:7f:8d:f8:0b:
32:78:a7:b7:bb:49:0d:ed:6f:3b:76:1f:84:b6:80:
5f:d5:2a:b2:34:6e:22:72:52:37:eb:76:21:8c:1e:
9f:19:f7:35:d9:ba:1b:9a:97:2b:85:60:e3:dc:7a:
73:d1:b3:7d:67:d7:cc:5d:55:32:d4:b9:cd:fc:6a:
3b:75:b0:65:79:2d:75:2a:37:2a:82:0b:1c:e8:9c:
91:a4:4c:2c:0c:a6:b8:2b:15:6a:41:ac:2d:37:c2:
29:da:5a:33:47:e1:7e:51:8b:ea:1f:f5:06:cd:35:
e7:ba:e2:49:ff:3e:21:3d:08:96:4c:b8:e1:93:10:
e9:17:d0:5f:c5:ce:c9:4c:af:be:68:da:d7:2a:27:
26:38:9a:12:ad:1c:3d:de:70:9b:b1:1f:12:e6:0f:
d9:bf:f4:d9:de:20:cc:8e:31:82:a5:64:92:00:44:
d0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:15:6D:9B:72:C3:2A:EE:02:C3:19:35:E5:6E:58:62:B6:CB:57:72
X509v3 Authority Key Identifier:
keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fc:ff:8d:3e:45:9d:5c:2b:76:57:73:cf:b6:b9:de:7d:39:
5e:ea:f9:0a:51:46:e4:74:dc:19:ce:6d:73:41:9a:d3:ef:e3:
d3:d4:af:4d:6f:f1:60:28:d1:cb:96:bc:64:3c:10:91:2a:60:
32:75:b0:b5:68:74:19:dc:ed:19:00:07:be:4d:87:59:3d:a0:
f5:e1:c3:33:36:fc:f1:fb:53:c4:15:a8:65:bd:78:35:32:d6:
f6:49:de:f3:cd:46:90:84:db:9e:bb:cf:60:43:99:5a:99:47:
76:fb:23:23:0a:82:1b:5c:89:08:bc:33:f4:ea:66:ed:a7:e7:
56:d9:2b:dc:37:36:18:0c:91:1b:95:fc:e0:70:d5:e2:8d:e9:
8d:c9:88:46:73:53:5d:32:d9:53:2a:2d:d2:79:82:4a:1d:98:
db:00:d9:b0:8c:d7:e8:bb:76:4f:e8:21:ae:60:f2:17:44:ba:
dc:32:c6:db:99:69:19:51:ea:76:4d:85:3e:9c:16:a3:78:bf:
56:71:49:01:20:5e:2e:9b:42:a4:cb:13:4f:bc:58:cb:2a:18:
01:83:7f:1a:b1:7c:1e:9e:08:70:f4:19:fc:ea:4c:ad:60:5a:
5d:7c:67:f3:04:07:4d:4e:0b:42:ac:8b:43:b5:ea:00:cf:13:
ea:55:85:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040uW6DpO5qV7IIcKED1NlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NmZhNjRjMmJiYWE3MjVhYzI2YTRmZjYxODAyNjZmYWVk
MjA4YTMwHhcNMjYwMzI5MDkwMDM4WhcNMjYwMzMwMDkwMDM4WjAzMTEwLwYDVQQD
EyhiMzE1NmQ5YjcyYzMyYWVlMDJjMzE5MzVlNTZlNTg2MmI2Y2I1NzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT6i/b/+6rhHeFOXShX5nUYvq2Nf
ExEr1LS9B6L9JJHdDOx8NrYq9CLT1yE28wvkWJpd01hSvKLkoBLy4o9ew4OdvwV2
MHLQDJrC+EQ3Emu/2NVQDn+N+AsyeKe3u0kN7W87dh+EtoBf1SqyNG4iclI363Yh
jB6fGfc12bobmpcrhWDj3Hpz0bN9Z9fMXVUy1LnN/Go7dbBleS11Kjcqggsc6JyR
pEwsDKa4KxVqQawtN8Ip2lozR+F+UYvqH/UGzTXnuuJJ/z4hPQiWTLjhkxDpF9Bf
xc7JTK++aNrXKicmOJoSrRw93nCbsR8S5g/Zv/TZ3iDMjjGCpWSSAETQtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMVbZtywyruAsMZNeVuWGK2y1dyMB8GA1UdIwQY
MBaAFDZvpkwruqclrCak/2GAJm+u0gijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm0tbVRDdTZweVdzSnFUX1lZQW1iNjdTQ0tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83M2U1MWUtOTg5NC00ZTc4LWJjMjIt
OGRkODIxZmFjNmM4LzEvTm0tbVRDdTZweVdzSnFUX1lZQW1iNjdTQ0tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83M2U1MWUtOTg5NC00ZTc4LWJjMjItOGRkODIxZmFjNmM4
LzEvTm0tbVRDdTZweVdzSnFUX1lZQW1iNjdTQ0tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvz/jT5F
nVwrdldzz7a53n05Xur5ClFG5HTcGc5tc0Ga0+/j09SvTW/xYCjRy5a8ZDwQkSpg
MnWwtWh0GdztGQAHvk2HWT2g9eHDMzb88ftTxBWoZb14NTLW9kne881GkITbnrvP
YEOZWplHdvsjIwqCG1yJCLwz9Opm7afnVtkr3Dc2GAyRG5X84HDV4o3pjcmIRnNT
XTLZUyot0nmCSh2Y2wDZsIzX6Lt2T+ghrmDyF0S63DLG25lpGVHqdk2FPpwWo3i/
VnFJASBeLptCpMsTT7xYyyoYAYN/GrF8Hp4IcPQZ/OpMrWBaXXxn8wQHTU4LQqyL
Q7XqAM8T6lWFYg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:02 2026 by rpki-client