Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
File: NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json)
Hash identifier: ypJEaFQH8EHkbkIZhtWyXFHwgDSZbZVGLPJqPzaqres=
Subject key identifier: D6:8C:28:F1:8A:21:19:4E:FB:E8:EB:49:67:BE:3C:D5:5A:03:3B:88
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 019D39AF45D4013352392CAE0DEDAFDF6F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
Manifest number: 1494
Signing time: Sun 29 Mar 2026 13:01:21 +0000
Manifest this update: Sun 29 Mar 2026 13:01:21 +0000
Manifest next update: Mon 30 Mar 2026 13:01:21 +0000
Files and hashes: 1: 3ji0Wlm5mmLR8IrB0SjVb6LKBu8.roa (hash: epu2k++TCBPSDoOcNwdGM1yWxCA7jm2nmD6aInDJWwU=)
2: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: Ify3hyDGMIUmcGEdgvMn6WP/eZQosgaUuWURJwr2uLE=)
3: ki3i4uGb2pymrQuc6PTH8eApHJ0.asa (hash: cR3C02zA8I9gR3Y+/Z+ZCQNWMiMl6ofoAUTqfpPH8v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:45:d4:01:33:52:39:2c:ae:0d:ed:af:df:6f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Mar 29 13:01:21 2026 GMT
Not After : Mar 30 13:01:21 2026 GMT
Subject: CN=d68c28f18a21194efbe8eb4967be3cd55a033b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:e0:e0:1b:9a:46:1f:d0:91:25:b2:fe:b1:
00:be:ea:e1:06:21:6d:3a:e7:91:7d:24:98:83:54:
93:b4:08:64:61:ed:dc:c5:49:3f:8b:a0:f7:9f:e8:
6e:c7:ae:43:52:09:e3:82:e8:85:ea:ae:49:af:06:
af:1a:f1:ef:01:c8:b7:fb:72:16:39:ab:47:81:75:
11:37:4b:5a:35:e2:47:4f:76:2f:1b:c8:95:d4:0e:
ba:ac:eb:bf:65:ab:81:f2:35:81:25:68:76:ea:50:
f1:89:80:17:86:f6:e4:79:dd:9a:5a:59:68:9e:e8:
12:1b:8c:c2:f0:62:7b:39:5d:57:c8:cc:04:3e:59:
fd:ea:bb:03:0c:e4:83:37:43:8f:16:dd:25:4f:50:
95:9f:2a:da:dc:54:5a:13:54:05:36:f5:49:a3:fd:
f2:c3:5f:1f:18:6b:ac:41:59:99:e4:f8:ed:70:49:
84:8f:d5:1b:ce:fb:25:9b:11:e3:93:bf:80:b6:c4:
88:b9:5d:30:ed:c0:25:ee:50:d7:92:8c:0c:e2:7c:
3f:24:cd:cb:5f:d8:5a:36:4e:31:a9:09:e0:4b:49:
15:d6:e5:75:e8:f9:7e:03:13:c2:7b:41:0c:f1:b0:
15:4d:88:76:de:73:b0:08:41:69:9b:99:a5:8c:db:
53:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8C:28:F1:8A:21:19:4E:FB:E8:EB:49:67:BE:3C:D5:5A:03:3B:88
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:03:4d:1a:97:9b:5a:6b:5e:6d:a5:e7:39:26:85:70:07:e8:
3f:30:ee:17:e3:61:57:52:de:5a:db:32:8d:3a:88:83:a5:8f:
d9:22:c6:17:d3:da:61:27:7a:bf:69:86:4d:a2:f6:3e:36:27:
95:05:84:bb:f0:ba:23:24:dc:94:a6:66:37:2e:eb:0e:3f:4c:
65:92:7f:c4:9f:bb:de:96:63:81:76:13:3a:8c:62:e1:81:30:
0e:59:0e:72:cb:e9:13:ae:42:89:53:b4:4f:6d:fb:f1:79:40:
86:cf:1b:4c:dc:de:29:4c:87:50:fd:e4:d4:e5:4f:69:cb:e0:
d7:d0:e4:94:04:9c:42:0e:b0:1f:1d:22:64:5a:27:31:42:e4:
0b:c8:b1:62:ce:00:6f:87:8f:83:65:e1:dc:97:47:df:95:56:
5b:40:87:d1:63:5a:77:e2:a8:87:ad:07:b1:ec:e0:31:fd:0a:
7a:d6:44:14:e5:b1:0f:a7:d0:1a:30:71:75:65:ff:eb:01:d0:
32:9f:1b:f9:c5:ea:0f:1b:2b:45:82:a4:53:58:fe:4e:8f:3a:
9f:b2:0d:d6:1e:78:ca:4f:a4:6f:b1:6f:03:08:0d:9d:71:fa:
37:22:19:5f:0d:13:15:12:52:bb:86:1e:f9:46:6b:af:5c:1d:
c6:83:4c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:13 2026 by rpki-client