Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json)
Hash identifier: SqsGl8aYqd9hPnsBUqXu/Bn3VAwWXTDSs1aHR9WOnSA=
Subject key identifier: C4:76:DD:E6:27:8D:B5:58:A0:A4:C2:63:A1:68:69:3B:9A:D2:FC:7C
Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Certificate serial: 019D389BAA1ACA15A68D49D9EB6328EAE74F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
Manifest number: 0608
Signing time: Sun 29 Mar 2026 08:00:18 +0000
Manifest this update: Sun 29 Mar 2026 08:00:18 +0000
Manifest next update: Mon 30 Mar 2026 08:00:18 +0000
Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: EQ8jpQYetwWbAqAgfHR5BGCvmOZ2Q1e9YbAzY1i/x6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:aa:1a:ca:15:a6:8d:49:d9:eb:63:28:ea:e7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Validity
Not Before: Mar 29 08:00:18 2026 GMT
Not After : Mar 30 08:00:18 2026 GMT
Subject: CN=c476dde6278db558a0a4c263a168693b9ad2fc7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:07:bc:1d:38:31:1f:a4:09:51:43:33:80:
48:9d:33:aa:1b:6a:66:7d:b9:0e:41:7a:72:35:f8:
a4:7d:86:b0:16:c2:99:d9:74:a2:3a:e7:b8:ec:56:
76:fc:b9:ff:5e:8d:e8:e1:35:a7:90:25:f5:27:34:
8c:6b:e6:0e:5c:c4:c3:11:4f:72:f0:1a:83:95:3c:
96:a8:f6:16:19:db:a3:3e:cb:2b:e3:73:5d:5b:69:
0f:ab:34:0d:55:7c:38:dc:90:ee:d9:f7:25:94:0f:
dc:7f:c4:87:7e:ca:1b:fb:27:4e:63:8f:6a:cc:e1:
98:fb:50:23:0d:1f:f2:46:a0:5f:d0:da:1a:ef:e4:
b9:d2:e9:41:d4:8d:21:0b:4e:cf:80:32:2b:45:a6:
c8:ea:18:83:8b:68:07:82:0a:6f:7b:7d:f7:af:cc:
18:dd:77:bc:b3:5b:8c:1d:bf:1b:d8:11:ad:db:d5:
d8:d3:96:8d:0e:64:bd:f8:ba:1a:1b:c9:07:aa:4b:
0d:58:13:89:22:2e:e7:3f:fc:ff:28:0e:bb:31:45:
37:25:67:9d:e7:0e:33:f4:90:36:7a:79:d7:db:be:
b4:76:8b:f4:96:e7:ba:2a:de:3d:40:e7:a0:51:3e:
b0:7a:54:f0:df:b6:fc:c2:95:39:84:d6:85:1d:c4:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:76:DD:E6:27:8D:B5:58:A0:A4:C2:63:A1:68:69:3B:9A:D2:FC:7C
X509v3 Authority Key Identifier:
keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0a:c5:fc:cf:2b:73:0b:3c:e3:b0:cc:1b:c8:27:b2:c2:2d:
3a:b4:ef:23:6c:3d:e3:8f:37:ac:fa:7e:d4:83:26:ca:52:6f:
08:69:b3:59:3c:0e:33:fb:7d:1d:cd:b7:b3:99:6c:ef:d6:13:
51:c4:c4:29:66:ff:d2:9e:d5:5d:77:c0:6d:2c:cd:1a:2a:01:
41:14:ac:9b:ac:06:39:7f:a5:6e:74:c5:d7:d9:5b:ad:bd:e8:
9d:86:c7:60:3a:f7:a8:b2:7f:ce:9b:90:fc:a0:26:ed:50:92:
b7:ee:ab:4e:88:bc:97:0b:7e:1c:d9:b0:1e:90:1f:fc:ec:4f:
9e:49:fb:d9:7d:71:96:cd:96:49:60:d4:85:51:68:cf:fa:e3:
80:e0:7b:a9:fc:de:83:50:48:a3:b4:7d:f8:30:58:f0:ce:f1:
ad:17:f3:10:a1:dd:87:4a:25:56:13:69:1b:a9:ff:82:fd:7e:
a5:6c:06:b0:b7:54:e4:83:58:12:d0:d6:e2:b8:7a:58:f0:e5:
3e:df:e7:56:7a:8c:f1:b1:6b:ae:fa:8d:82:36:00:23:cb:55:
16:cc:a5:c7:85:52:ee:07:9c:57:b6:15:fb:ea:02:61:2f:f9:
eb:e1:2a:d7:f2:8b:f1:ff:4c:b2:82:98:f4:08:a0:1e:8d:39:
0e:7a:18:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m6oayhWmjUnZ62Mo6udPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllY2NjN2RkYWUxMWY4OGUxMGJkMjA4NjZlMWJkNmU2NTc1
Njk3ZTMwHhcNMjYwMzI5MDgwMDE4WhcNMjYwMzMwMDgwMDE4WjAzMTEwLwYDVQQD
EyhjNDc2ZGRlNjI3OGRiNTU4YTBhNGMyNjNhMTY4NjkzYjlhZDJmYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIsHvB04MR+kCVFDM4BInTOqG2pm
fbkOQXpyNfikfYawFsKZ2XSiOue47FZ2/Ln/Xo3o4TWnkCX1JzSMa+YOXMTDEU9y
8BqDlTyWqPYWGdujPssr43NdW2kPqzQNVXw43JDu2fcllA/cf8SHfsob+ydOY49q
zOGY+1AjDR/yRqBf0Noa7+S50ulB1I0hC07PgDIrRabI6hiDi2gHggpve333r8wY
3Xe8s1uMHb8b2BGt29XY05aNDmS9+LoaG8kHqksNWBOJIi7nP/z/KA67MUU3JWed
5w4z9JA2ennX2760dov0lue6Kt49QOegUT6welTw37b8wpU5hNaFHcSioQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMR23eYnjbVYoKTCY6FoaTua0vx8MB8GA1UdIwQY
MBaAFJ7Mx92uEfiOEL0ghm4b1uZXVpfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnN6SDNhNFItSTRRdlNDR2Jodlc1bGRXbC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lYjRkZmUtMDM4NC00ODMxLWIzYWQt
ZTY3MmIzMTkwNjg3LzEvbnN6SDNhNFItSTRRdlNDR2Jodlc1bGRXbC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lYjRkZmUtMDM4NC00ODMxLWIzYWQtZTY3MmIzMTkwNjg3
LzEvbnN6SDNhNFItSTRRdlNDR2Jodlc1bGRXbC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgrF/M8r
cws847DMG8gnssItOrTvI2w94483rPp+1IMmylJvCGmzWTwOM/t9Hc23s5ls79YT
UcTEKWb/0p7VXXfAbSzNGioBQRSsm6wGOX+lbnTF19lbrb3onYbHYDr3qLJ/zpuQ
/KAm7VCSt+6rToi8lwt+HNmwHpAf/OxPnkn72X1xls2WSWDUhVFoz/rjgOB7qfze
g1BIo7R9+DBY8M7xrRfzEKHdh0olVhNpG6n/gv1+pWwGsLdU5INYEtDW4rh6WPDl
Pt/nVnqM8bFrrvqNgjYAI8tVFsylx4VS7gecV7YV++oCYS/56+Eq1/KL8f9MsoKY
9AigHo05DnoYuw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:23 2026 by rpki-client