Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
File: NfH9aecZau9eKbp5VoDaw-NIaMg.mft (raw, json)
Hash identifier: GIoTLfYGyzd3021RUTCulb8R/hBIzhUHaUKLnHsnccc=
Subject key identifier: 3B:5D:A4:F2:A0:99:75:15:1F:31:46:B2:50:D2:CC:EC:B8:6C:F4:19
Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Certificate serial: 019D37C0EC482D60B23CB1D8C67BAC062822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
Manifest number: 1813
Signing time: Sun 29 Mar 2026 04:01:23 +0000
Manifest this update: Sun 29 Mar 2026 04:01:23 +0000
Manifest next update: Mon 30 Mar 2026 04:01:23 +0000
Files and hashes: 1: NfH9aecZau9eKbp5VoDaw-NIaMg.crl (hash: OQisg1CO9/7fvzuTKV9RstyhA3Rfbd4zxc6rWvCo14Y=)
2: zX13-oU7cBG6cIg8ROGm1tDQrik.roa (hash: iojJpLqSVjV4cIjGJVDdqQHg6vG+JzagzhFK3HWdZsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ec:48:2d:60:b2:3c:b1:d8:c6:7b:ac:06:28:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Validity
Not Before: Mar 29 04:01:23 2026 GMT
Not After : Mar 30 04:01:23 2026 GMT
Subject: CN=3b5da4f2a09975151f3146b250d2ccecb86cf419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:f5:4b:f9:5a:03:7e:e8:66:3e:b9:d1:2b:
dc:4f:96:6f:4a:95:5a:0b:24:00:eb:16:af:05:54:
15:75:56:5d:89:0d:a3:95:84:1d:50:90:09:59:db:
b2:19:eb:af:3f:38:ce:83:24:95:f5:42:a8:96:bf:
82:2e:4e:ca:59:7e:35:e0:f6:c4:7d:bb:7b:ad:2e:
5f:d8:b7:a5:ed:bd:b4:f9:2f:44:47:06:02:7a:07:
97:0e:5b:c0:47:d0:29:8a:28:a1:3a:19:2b:89:1a:
97:33:33:32:1f:db:7e:28:cb:8b:c2:65:1f:ca:ea:
c7:9d:1a:7a:20:88:59:41:fa:c8:b9:ee:08:47:18:
ba:06:df:87:86:53:34:05:67:5d:7a:25:a5:71:1d:
cc:c0:a0:cd:06:ad:c1:19:9f:dd:89:83:36:05:57:
28:c9:9c:82:22:d9:89:11:c5:ec:55:f1:54:e4:79:
6f:6f:05:7e:1e:42:4b:80:aa:32:72:5d:4c:d5:f2:
15:86:b8:c1:6a:85:4f:4a:54:dd:6b:c9:35:af:6f:
d2:58:0a:d5:27:5f:86:10:72:26:78:f7:3e:20:87:
8b:c9:e7:ef:de:06:c4:31:b8:9f:70:f0:91:5a:07:
77:c9:58:ce:13:eb:e8:16:df:fd:e6:71:9b:ed:e8:
d7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5D:A4:F2:A0:99:75:15:1F:31:46:B2:50:D2:CC:EC:B8:6C:F4:19
X509v3 Authority Key Identifier:
keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:cf:ce:fe:d0:c3:9d:21:91:fe:22:f8:e8:4a:c8:34:3d:ed:
58:06:1c:ee:7b:2f:b1:84:ba:18:ab:e4:cc:7a:f1:6d:d7:52:
79:7e:54:d7:95:bc:38:c6:35:91:e9:d4:c4:29:ec:89:31:66:
cf:74:9e:de:f0:90:0e:22:f4:be:3e:b0:c1:b3:c5:98:f8:79:
ee:84:08:9c:8c:fd:53:05:e7:cf:9e:7a:c3:d4:64:a9:02:fa:
26:c2:5f:77:bc:27:d3:d6:3e:c1:e3:f3:8f:97:c8:e4:2f:7a:
c6:d2:1a:a4:0a:cb:a7:a5:2e:55:39:96:7e:98:e6:45:40:be:
98:f5:1b:23:d4:5d:bc:05:30:99:61:ec:d1:15:a7:7e:78:90:
5b:6e:a4:24:f3:2a:e9:98:c8:92:4c:a2:cf:ef:40:0c:4a:15:
38:5d:73:1f:84:d1:99:75:b6:ac:a9:c4:f9:bf:90:85:85:aa:
b3:73:99:f4:be:2c:04:cf:cf:b1:40:4d:24:88:15:ef:9b:df:
43:5a:62:c7:a3:84:5d:24:e9:bc:b7:25:6e:53:22:d4:b5:44:
5c:a1:46:05:ce:19:bd:a9:86:0f:60:23:ae:7f:38:98:35:a7:
77:58:e1:a6:a7:8f:e9:a8:7d:6a:cf:eb:62:7c:36:c3:64:be:
c3:d1:ad:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wOxILWCyPLHYxnusBigiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZjFmZDY5ZTcxOTZhZWY1ZTI5YmE3OTU2ODBkYWMzZTM0
ODY4YzgwHhcNMjYwMzI5MDQwMTIzWhcNMjYwMzMwMDQwMTIzWjAzMTEwLwYDVQQD
EygzYjVkYTRmMmEwOTk3NTE1MWYzMTQ2YjI1MGQyY2NlY2I4NmNmNDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo71S/laA37oZj650SvcT5ZvSpVa
CyQA6xavBVQVdVZdiQ2jlYQdUJAJWduyGeuvPzjOgySV9UKolr+CLk7KWX414PbE
fbt7rS5f2Lel7b20+S9ERwYCegeXDlvAR9ApiiihOhkriRqXMzMyH9t+KMuLwmUf
yurHnRp6IIhZQfrIue4IRxi6Bt+HhlM0BWddeiWlcR3MwKDNBq3BGZ/diYM2BVco
yZyCItmJEcXsVfFU5HlvbwV+HkJLgKoycl1M1fIVhrjBaoVPSlTda8k1r2/SWArV
J1+GEHImePc+IIeLyefv3gbEMbifcPCRWgd3yVjOE+voFt/95nGb7ejXUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtdpPKgmXUVHzFGslDSzOy4bPQZMB8GA1UdIwQY
MBaAFDXx/WnnGWrvXim6eVaA2sPjSGjIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmZIOWFlY1phdTllS2JwNVZvRGF3LU5JYU1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82NmYzNzktZjU5OC00ZTYwLWI0OTMt
ZjljYTcxMjRmMDk4LzEvTmZIOWFlY1phdTllS2JwNVZvRGF3LU5JYU1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82NmYzNzktZjU5OC00ZTYwLWI0OTMtZjljYTcxMjRmMDk4
LzEvTmZIOWFlY1phdTllS2JwNVZvRGF3LU5JYU1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8/O/tDD
nSGR/iL46ErIND3tWAYc7nsvsYS6GKvkzHrxbddSeX5U15W8OMY1kenUxCnsiTFm
z3Se3vCQDiL0vj6wwbPFmPh57oQInIz9UwXnz556w9RkqQL6JsJfd7wn09Y+wePz
j5fI5C96xtIapArLp6UuVTmWfpjmRUC+mPUbI9RdvAUwmWHs0RWnfniQW26kJPMq
6ZjIkkyiz+9ADEoVOF1zH4TRmXW2rKnE+b+QhYWqs3OZ9L4sBM/PsUBNJIgV75vf
Q1pix6OEXSTpvLclblMi1LVEXKFGBc4ZvamGD2Ajrn84mDWnd1jhpqeP6ah9as/r
Ynw2w2S+w9GtfQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:25 2026 by rpki-client