Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
File: NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json)
Hash identifier: jHymEa7J1KpaeIzt1U+ldLEbVeAncrDpAS8ZvbZSLHg=
Subject key identifier: FC:A5:08:F5:F9:A8:3E:2B:C2:3B:98:E6:09:B6:23:5D:EE:89:C4:8C
Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Certificate serial: 019D38D2AA8035D3BF91499F146B6E45C4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:00:23 +0000
Manifest this update: Sun 29 Mar 2026 09:00:23 +0000
Manifest next update: Mon 30 Mar 2026 09:00:23 +0000
Files and hashes: 1: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: via9sKYsYPgjTQrhpSXkZwFw4/g5W8UPM4roQgVYOrI=)
2: h0Ifd57oi9lfBeUdeRd9nSCgSg8.roa (hash: kiI/t9Fma+sRPCboiwT26YcfI7j4ilrF6LxmsduO9hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:aa:80:35:d3:bf:91:49:9f:14:6b:6e:45:c4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Validity
Not Before: Mar 29 09:00:23 2026 GMT
Not After : Mar 30 09:00:23 2026 GMT
Subject: CN=fca508f5f9a83e2bc23b98e609b6235dee89c48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:97:e2:42:c7:da:d5:01:d7:7e:3f:65:c9:ad:
8f:72:fc:91:5b:1a:ca:58:76:60:69:1c:0f:41:e0:
f0:ae:7d:8c:e6:a1:39:d8:d4:d9:c8:89:0c:34:83:
2d:5b:fb:d2:17:30:e0:f2:47:67:f7:f9:51:a6:f7:
f1:6a:a1:f4:03:38:76:78:50:05:e7:4c:4c:f4:66:
29:52:6d:16:4a:71:03:8c:f7:be:c6:20:f6:d9:9e:
54:11:c5:26:0b:33:3d:8d:df:1d:d6:9b:3b:c2:23:
b6:1d:39:3c:c4:92:25:1b:f5:79:ae:cd:39:7f:b0:
5f:0f:54:24:be:c1:5a:24:09:fe:8c:7c:9f:40:dc:
f3:69:d4:c2:8f:cf:68:ad:0f:5f:16:4d:38:cb:c7:
48:df:18:9d:be:94:77:cf:ac:f5:22:40:71:a7:aa:
7c:9b:95:29:7c:b6:28:41:35:f5:d8:23:b1:5a:78:
54:51:3c:62:d9:b3:9a:bf:9c:1c:6f:86:e3:62:85:
66:6d:89:b2:39:8f:08:b0:84:8b:ed:f2:55:12:a5:
82:98:6c:de:42:b0:5f:49:7a:17:b3:26:1e:31:21:
2f:26:70:76:f1:6a:c3:a9:81:16:75:13:97:b2:f0:
56:68:cf:ea:45:4c:5a:84:a4:69:f4:ab:a6:f7:f5:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A5:08:F5:F9:A8:3E:2B:C2:3B:98:E6:09:B6:23:5D:EE:89:C4:8C
X509v3 Authority Key Identifier:
keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:dc:95:e9:70:3b:11:35:4e:25:18:90:f4:b6:b6:4a:ed:8a:
80:85:e4:dd:d0:da:97:3e:3c:fe:1c:94:ce:38:52:13:7b:d3:
5a:3c:ef:08:6a:4f:c8:a9:f8:99:0c:70:d8:87:3e:f5:3d:c6:
5d:6e:34:62:31:26:f9:75:18:9f:59:48:84:ac:27:a7:c3:7a:
f3:47:15:da:3a:b3:f8:9c:bc:6c:9d:c4:69:72:9f:27:f5:8d:
f0:0a:50:72:d9:42:14:89:a7:ba:60:68:53:a3:77:08:ae:9f:
8b:95:6c:b1:eb:86:8b:72:10:65:8e:f5:75:8d:34:91:a6:30:
b5:ac:45:e6:ab:c0:fc:be:31:bb:00:99:73:5e:ff:c4:c2:37:
ee:77:fd:9f:b4:4c:47:a7:5d:de:33:df:d4:05:5b:b6:3f:09:
bd:7a:24:5e:c2:73:f6:eb:9e:f1:99:07:cc:75:df:d3:bf:1d:
32:bc:43:b4:ce:dd:a5:fc:5c:f1:37:e8:6c:f7:80:a3:0a:8f:
07:4f:4c:dc:c3:f4:d6:6a:3b:39:d6:7e:e8:27:0f:76:f0:1e:
93:2f:e7:ec:5e:53:5f:15:ab:ca:ac:b9:c1:07:52:32:54:0d:
23:78:16:ac:2e:ba:54:98:c4:f9:0a:01:2a:cf:f5:e9:f9:f4:
8c:be:6b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:11 2026 by rpki-client