Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: +fkMaFM34/0wNftmzSMtE37ca5CNwotybxGuDSY41D4=
Subject key identifier: 3F:A6:7E:8E:C0:D4:A8:A7:0F:E0:2E:5B:74:33:E8:3E:39:5F:4B:8D
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 019D39E56F184E05F783AD49355B0F0C2C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 138C
Signing time: Sun 29 Mar 2026 14:00:30 +0000
Manifest this update: Sun 29 Mar 2026 14:00:30 +0000
Manifest next update: Mon 30 Mar 2026 14:00:30 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: JbY/7S0ZdeV9ehmiBNc3IjE4m5sEbK+UQqrSxS0/1iw=)
2: dZFOf_4rHWP0daflfl4Ux8b9Boc.roa (hash: 0QO7/byKb+RG54RJyLydLAZJC5oemICOMqsjQMbIvGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:6f:18:4e:05:f7:83:ad:49:35:5b:0f:0c:2c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Mar 29 14:00:30 2026 GMT
Not After : Mar 30 14:00:30 2026 GMT
Subject: CN=3fa67e8ec0d4a8a70fe02e5b7433e83e395f4b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:6d:09:ce:0c:9a:55:81:09:4c:6a:46:4d:
b9:fb:4f:0c:79:c7:ba:08:ff:db:fa:18:6a:8e:0a:
b8:97:ab:11:07:34:aa:7d:5f:7c:4c:06:11:1e:82:
89:97:8b:df:21:09:88:af:58:30:e1:6a:66:5f:40:
4b:38:99:20:1d:46:b7:56:74:ed:c5:e4:f8:6c:1e:
b0:25:b2:e3:89:32:6a:d8:f7:5a:b0:90:48:49:f8:
d5:0f:bd:4a:d7:3c:cf:ab:e7:27:12:2d:1b:71:79:
73:40:b4:96:e7:25:29:42:ea:f1:ed:5d:e3:ff:c1:
b1:20:74:e8:aa:52:4b:86:05:5f:a4:fd:9a:99:ab:
1f:81:b2:42:45:ac:3a:57:6b:52:8b:b0:81:66:f4:
e2:32:2d:5c:61:f5:3d:1d:19:5a:6d:92:35:4e:a4:
a5:ea:ad:7e:db:a2:fa:c8:39:c2:af:6d:14:5c:45:
df:80:07:22:63:e6:a1:f1:ac:6b:6b:32:7c:e5:d0:
61:1a:52:3d:28:45:6e:13:0e:0a:fd:b7:fe:9e:ae:
ac:dd:14:f8:5c:fa:2b:cf:bd:b3:a7:20:8a:28:e7:
bb:db:18:1c:0c:32:a1:68:d1:e2:dd:60:6f:a9:c0:
66:0e:94:97:93:b5:55:3d:3c:ff:75:c8:16:45:38:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A6:7E:8E:C0:D4:A8:A7:0F:E0:2E:5B:74:33:E8:3E:39:5F:4B:8D
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:47:23:59:d7:3e:1e:be:50:d6:f9:0a:6a:f0:0a:e3:ec:9d:
cf:5c:fe:92:cf:ac:6c:a7:e3:94:c4:ac:80:a8:f5:b3:f6:89:
95:0d:bd:ad:fc:49:60:48:fd:90:e9:f6:90:36:e9:eb:11:0a:
2a:b9:34:1f:81:cb:91:2a:9d:73:9b:c5:3f:ab:81:e7:e6:8b:
0b:82:77:b4:97:92:ec:37:d9:94:32:84:3a:02:f8:fc:a2:a6:
02:a4:8e:a2:a4:8d:e2:50:c7:4a:a9:1a:0d:85:6b:e9:35:4f:
4a:0c:a3:c5:c5:6f:86:31:a8:8c:5d:9b:65:a0:60:a2:0e:aa:
5a:3e:04:6b:a7:d4:46:e4:f0:b2:13:02:88:ac:d3:8b:d2:84:
e7:3a:02:a9:ac:df:70:5b:c3:6a:a2:63:3f:34:7f:7f:ab:d4:
84:42:75:14:cf:9d:58:ca:fc:db:c2:c0:9d:69:1b:08:12:f8:
23:9b:68:95:9e:ec:43:86:d7:2a:00:38:b6:78:26:ff:d1:3f:
6b:5f:11:82:f6:aa:39:ab:be:d4:05:a0:63:ca:f7:59:cb:a1:
27:d1:ee:85:04:89:52:c6:47:8b:1d:1e:d5:55:d1:a0:0a:3d:
17:c2:d2:25:e3:ec:6b:c4:2c:19:a2:94:b9:62:e0:94:87:13:
f0:ff:8e:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055W8YTgX3g61JNVsPDCyTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NDJiYmM4M2UyOGMxMDNjMTdkNWEyMDFlZGVmNTY3MjYz
NGRiZTgwHhcNMjYwMzI5MTQwMDMwWhcNMjYwMzMwMTQwMDMwWjAzMTEwLwYDVQQD
EygzZmE2N2U4ZWMwZDRhOGE3MGZlMDJlNWI3NDMzZTgzZTM5NWY0YjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmNtCc4MmlWBCUxqRk25+08Mece6
CP/b+hhqjgq4l6sRBzSqfV98TAYRHoKJl4vfIQmIr1gw4WpmX0BLOJkgHUa3VnTt
xeT4bB6wJbLjiTJq2PdasJBISfjVD71K1zzPq+cnEi0bcXlzQLSW5yUpQurx7V3j
/8GxIHToqlJLhgVfpP2amasfgbJCRaw6V2tSi7CBZvTiMi1cYfU9HRlabZI1TqSl
6q1+26L6yDnCr20UXEXfgAciY+ah8axrazJ85dBhGlI9KEVuEw4K/bf+nq6s3RT4
XPorz72zpyCKKOe72xgcDDKhaNHi3WBvqcBmDpSXk7VVPTz/dcgWRTiv0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+mfo7A1KinD+AuW3Qz6D45X0uNMB8GA1UdIwQY
MBaAFDZCu8g+KMEDwX1aIB7e9WcmNNvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYt
NmNiMmUwMmNhZWYyLzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYtNmNiMmUwMmNhZWYy
LzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUcjWdc+
Hr5Q1vkKavAK4+ydz1z+ks+sbKfjlMSsgKj1s/aJlQ29rfxJYEj9kOn2kDbp6xEK
Krk0H4HLkSqdc5vFP6uB5+aLC4J3tJeS7DfZlDKEOgL4/KKmAqSOoqSN4lDHSqka
DYVr6TVPSgyjxcVvhjGojF2bZaBgog6qWj4Ea6fURuTwshMCiKzTi9KE5zoCqazf
cFvDaqJjPzR/f6vUhEJ1FM+dWMr828LAnWkbCBL4I5tolZ7sQ4bXKgA4tngm/9E/
a18RgvaqOau+1AWgY8r3WcuhJ9HuhQSJUsZHix0e1VXRoAo9F8LSJePsa8QsGaKU
uWLglIcT8P+OzA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:10 2026 by rpki-client