Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json)
Hash identifier: EfrMw7Q6qaqKFB2hoIfb2ve7rRx/c+ZM/SX9iYYSz9U=
Subject key identifier: 4A:51:01:A3:96:0D:8A:97:F0:E1:26:AC:21:57:9A:1A:11:E5:86:61
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial: 019CE66D0D0FF994E897B615A774967BBCE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
Manifest number: 03C5
Signing time: Fri 13 Mar 2026 09:00:32 +0000
Manifest this update: Fri 13 Mar 2026 09:00:32 +0000
Manifest next update: Sat 14 Mar 2026 09:00:32 +0000
Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: pUn1Tl3qd3sOfm1ERHAtr0+OdtV4ZxJLMpBB3MW4RCQ=)
2: wfRbCWoZLVmY8bAvM8RMoZB0PGc.roa (hash: bnGgZ1CdYYmazMBl45x5uGVuKXkwyk8jwkb9FImtueA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:0d:0f:f9:94:e8:97:b6:15:a7:74:96:7b:bc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Validity
Not Before: Mar 13 09:00:32 2026 GMT
Not After : Mar 14 09:00:32 2026 GMT
Subject: CN=4a5101a3960d8a97f0e126ac21579a1a11e58661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a5:19:aa:25:29:43:5a:93:86:4a:c0:e2:f0:
26:e3:61:47:5d:72:f4:65:ed:99:06:c9:bd:b0:c7:
0d:ec:96:20:7c:29:7d:d1:8b:ce:df:cd:0c:b9:95:
03:2c:e2:f2:08:7e:90:2e:41:ac:6c:ad:bd:b1:74:
2c:ff:b9:d8:a5:a1:b0:df:50:83:3e:f5:d9:0f:b4:
70:bf:0c:70:fb:f5:94:af:ae:9f:76:1c:e0:df:aa:
f5:5d:d0:32:d5:63:f3:ce:ec:ae:3a:1e:f0:ce:ec:
7d:47:44:63:18:3f:c3:6d:a7:e2:82:80:8f:60:39:
d1:42:78:05:68:15:cc:fc:8b:d9:9c:c5:7c:93:51:
3c:78:e8:2f:61:78:fe:b1:3b:18:59:6f:8e:2d:43:
2e:f5:dc:bc:0f:75:7f:ad:9d:64:27:de:a1:e4:64:
e5:97:19:05:30:06:17:3e:11:35:78:b0:27:ef:b7:
ef:9e:b1:6c:00:b5:f6:2c:92:2c:5f:4d:30:71:7d:
c5:b4:e4:f1:15:e5:d8:ca:01:a2:b1:8f:0b:1d:48:
64:50:ff:65:fb:ab:72:3a:e5:5a:b2:34:19:31:e0:
cb:59:0e:87:be:74:39:ef:d3:58:93:7c:0e:40:ea:
1d:88:70:35:99:99:c9:3d:7c:6f:a6:e3:cf:ec:a0:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:51:01:A3:96:0D:8A:97:F0:E1:26:AC:21:57:9A:1A:11:E5:86:61
X509v3 Authority Key Identifier:
keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5b:11:9a:d5:f4:a4:e6:15:5d:d7:f0:71:3b:58:1f:38:2b:
85:dd:47:20:78:17:14:d3:aa:34:f2:be:8d:01:2d:9a:1d:9c:
19:ab:87:46:2d:ea:06:87:b4:38:0c:00:c6:5c:3c:56:90:26:
c6:fe:3a:93:c9:85:b4:6b:c5:77:9b:dc:1d:8d:89:a3:1c:44:
f6:05:27:93:e1:d7:67:cb:03:85:13:85:da:3a:31:c6:5b:aa:
a3:27:5b:db:6b:21:0d:06:5e:cb:df:0d:ce:db:ae:2b:61:c4:
8e:17:38:7a:f6:ec:bd:67:c2:8e:ba:77:d9:98:02:ce:f0:3f:
e8:65:f8:96:8b:8f:fd:f5:e2:83:76:18:32:54:dd:a6:31:75:
90:7c:2d:1e:9a:f6:38:a3:dd:08:a5:8d:9a:47:1c:a1:b6:ba:
2c:3b:a7:21:f4:40:de:10:f3:2d:dc:4c:35:21:c9:ac:4d:14:
90:91:e8:5c:a5:b6:22:8a:56:e1:82:8b:4c:b0:7a:9a:84:c5:
67:8d:23:bb:90:35:3b:a1:67:6b:be:b2:c5:57:6e:32:da:97:
26:48:5e:0e:60:98:09:b6:d0:f6:7a:44:53:00:e5:3a:2d:9e:
a5:ad:53:25:71:28:69:0d:0f:60:33:0f:eb:de:23:c9:06:27:
c1:32:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:57:20 2026 by rpki-client