Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json)
Hash identifier: fszYco4CpAyNL+MTorXr2Kz8iee+FjMO46w/Hhg3RKU=
Subject key identifier: 27:4C:E9:DB:7C:D5:C1:CC:CE:59:91:49:F4:F6:C1:70:D9:A8:0F:AB
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial: 019EB9C5E2D88539369A67FCEBFBD8BE9246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
Manifest number: 04B7
Signing time: Fri 12 Jun 2026 03:00:13 +0000
Manifest this update: Fri 12 Jun 2026 03:00:13 +0000
Manifest next update: Sat 13 Jun 2026 03:00:13 +0000
Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: Uaf4/gswv4DGTs0KdFdY9VFL5UAVZO0HWiLs4+ezQ/A=)
2: wfRbCWoZLVmY8bAvM8RMoZB0PGc.roa (hash: bnGgZ1CdYYmazMBl45x5uGVuKXkwyk8jwkb9FImtueA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c5:e2:d8:85:39:36:9a:67:fc:eb:fb:d8:be:92:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Validity
Not Before: Jun 12 03:00:13 2026 GMT
Not After : Jun 13 03:00:13 2026 GMT
Subject: CN=274ce9db7cd5c1ccce599149f4f6c170d9a80fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:68:10:b4:35:dd:1f:e4:62:ec:18:55:19:
7b:45:0e:da:2f:15:22:55:af:91:f9:5c:e9:ac:8a:
80:39:16:2a:f9:37:21:f9:95:e8:d6:62:c1:0e:b4:
a1:26:4e:5b:8f:a9:9a:12:8c:95:84:90:29:ad:e4:
f1:ed:4f:39:b4:19:de:10:7e:bd:72:f0:87:72:22:
4f:3b:16:1d:19:83:b6:2a:5a:9f:75:11:eb:4a:d6:
d4:e0:bd:0a:bd:e5:f8:15:02:d3:c3:c4:86:5a:16:
3f:29:db:62:a5:f5:65:1f:e1:5b:5e:57:a1:6c:0e:
67:97:e9:f5:0f:bd:d0:6e:55:d3:8f:8f:e7:6a:92:
90:d6:34:cc:cc:69:8f:d5:a2:55:90:1f:bf:bc:20:
71:d9:49:69:3a:14:71:11:f0:98:52:97:b1:d8:1a:
63:04:8e:42:ed:c7:81:7a:9e:0a:66:0c:64:04:bd:
8d:0d:89:8a:9f:c2:3e:3f:45:7e:a4:9d:19:ed:84:
c4:c4:ea:7f:40:56:71:98:45:f9:6c:7b:ee:08:c3:
a0:7d:15:f3:34:3e:96:93:54:14:8e:5a:f4:26:28:
3d:a3:b9:fa:c4:d0:9a:03:84:4c:34:5d:42:de:05:
3e:b8:16:34:7c:76:eb:0c:b0:47:38:6a:f5:90:03:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4C:E9:DB:7C:D5:C1:CC:CE:59:91:49:F4:F6:C1:70:D9:A8:0F:AB
X509v3 Authority Key Identifier:
keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ea:c5:39:25:0b:9b:f4:6b:b5:9b:b2:fe:27:a3:59:16:6a:
41:7c:96:0a:9a:50:d0:ba:44:20:c6:2a:4b:f3:dc:6a:9e:87:
2d:60:b5:88:e5:f5:e7:bf:29:3b:9f:b8:c0:52:30:14:c7:e3:
ca:22:ad:47:10:93:42:eb:a6:4d:cf:07:c9:c4:62:03:a9:c4:
19:49:98:a2:de:8b:2c:14:66:42:9a:35:75:7d:bc:e7:9c:81:
a9:f1:0c:13:0b:92:09:59:af:2e:85:02:98:e5:f8:f7:20:d2:
5f:8d:a7:92:07:0d:ac:2a:c7:c3:85:7f:17:22:fa:20:6d:4d:
10:23:56:13:67:5a:a8:18:c8:8e:ce:20:b9:8a:65:87:d9:d9:
ed:f8:45:2a:da:cf:dc:c0:07:41:db:0a:11:6f:e6:fb:66:4e:
63:23:db:43:ec:e6:e3:53:00:5a:0d:50:6e:f2:37:17:f2:82:
f8:81:e7:31:82:c2:6c:30:9d:99:c0:30:10:46:42:96:d1:e7:
e8:f7:cc:e1:0c:c0:ce:da:d7:01:bb:1b:e7:be:94:6c:da:da:
83:18:84:9f:3e:cf:09:ad:c4:04:ac:a8:e2:e0:7e:05:f7:20:
09:ab:c3:7d:fb:69:90:68:e6:15:ab:37:be:01:ff:05:74:7e:
2e:6b:bc:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65xeLYhTk2mmf86/vYvpJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZjFkNTY3NmJkZDcwNDMzNGIyZGIzNGNhOTA0ZDc3Y2Rk
MmJhY2EwHhcNMjYwNjEyMDMwMDEzWhcNMjYwNjEzMDMwMDEzWjAzMTEwLwYDVQQD
EygyNzRjZTlkYjdjZDVjMWNjY2U1OTkxNDlmNGY2YzE3MGQ5YTgwZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIFoELQ13R/kYuwYVRl7RQ7aLxUi
Va+R+VzprIqAORYq+Tch+ZXo1mLBDrShJk5bj6maEoyVhJApreTx7U85tBneEH69
cvCHciJPOxYdGYO2KlqfdRHrStbU4L0KveX4FQLTw8SGWhY/KdtipfVlH+FbXleh
bA5nl+n1D73QblXTj4/napKQ1jTMzGmP1aJVkB+/vCBx2UlpOhRxEfCYUpex2Bpj
BI5C7ceBep4KZgxkBL2NDYmKn8I+P0V+pJ0Z7YTExOp/QFZxmEX5bHvuCMOgfRXz
ND6Wk1QUjlr0Jig9o7n6xNCaA4RMNF1C3gU+uBY0fHbrDLBHOGr1kAOWBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdM6dt81cHMzlmRSfT2wXDZqA+rMB8GA1UdIwQY
MBaAFDbx1Wdr3XBDNLLbNMqQTXfN0rrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnZIVloydmRjRU0wc3RzMHlwQk5kODNTdXNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80ZDg2NWMtNzBmNS00NGI5LTg4YTYt
ZWE4YWZlNjc4OTcwLzEvTnZIVloydmRjRU0wc3RzMHlwQk5kODNTdXNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS80ZDg2NWMtNzBmNS00NGI5LTg4YTYtZWE4YWZlNjc4OTcw
LzEvTnZIVloydmRjRU0wc3RzMHlwQk5kODNTdXNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADurFOSUL
m/RrtZuy/iejWRZqQXyWCppQ0LpEIMYqS/Pcap6HLWC1iOX1578pO5+4wFIwFMfj
yiKtRxCTQuumTc8HycRiA6nEGUmYot6LLBRmQpo1dX2855yBqfEMEwuSCVmvLoUC
mOX49yDSX42nkgcNrCrHw4V/FyL6IG1NECNWE2daqBjIjs4guYplh9nZ7fhFKtrP
3MAHQdsKEW/m+2ZOYyPbQ+zm41MAWg1QbvI3F/KC+IHnMYLCbDCdmcAwEEZCltHn
6PfM4QzAztrXAbsb576UbNragxiEnz7PCa3EBKyo4uB+BfcgCavDfftpkGjmFas3
vgH/BXR+Lmu82g==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:09:41 2026 by rpki-client