Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json)
Hash identifier: 6yqHbYurWBKtzo2EtpmjyLU5II9jdGKRAZnORVNP8Kw=
Subject key identifier: 59:D0:D4:9C:FE:A1:DB:D2:1B:D2:34:99:C7:D2:99:E5:11:24:BB:F2
Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Certificate serial: 019D389C19F6D3C5ACD2ACE8CE5CC731BFD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:47 +0000
Manifest this update: Sun 29 Mar 2026 08:00:47 +0000
Manifest next update: Mon 30 Mar 2026 08:00:47 +0000
Files and hashes: 1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: dslLwyHfwrBMa252C36fsC5lK2sL6KjRqSR8bEoyau0=)
2: TM1bxUMPDPyCHRavcIw7WxQjRbU.roa (hash: UaG8J2YnGAjViEmyxsyTzCRJYYoHOIo0htvybh8voBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:19:f6:d3:c5:ac:d2:ac:e8:ce:5c:c7:31:bf:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Validity
Not Before: Mar 29 08:00:47 2026 GMT
Not After : Mar 30 08:00:47 2026 GMT
Subject: CN=59d0d49cfea1dbd21bd23499c7d299e51124bbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:69:3d:68:18:50:50:b4:27:4c:66:12:b6:
f0:27:15:42:57:28:29:69:51:41:4c:f9:27:b4:11:
f8:dd:03:20:9d:5a:5d:b5:ec:be:9f:12:db:a0:13:
6c:aa:18:23:88:f8:ec:11:7e:07:61:0b:2f:f1:87:
c8:84:f4:31:8b:50:97:22:6a:57:a7:c6:58:e9:92:
49:db:c9:16:76:d3:ff:cc:8f:90:d4:fe:58:ab:c1:
6e:63:60:f2:42:45:2a:e8:85:d7:0b:a6:96:16:47:
58:c7:e6:0c:68:40:69:94:d0:c9:ba:ba:c5:ef:c3:
37:d9:53:a1:e3:b9:ba:84:71:4c:60:70:02:bd:be:
af:8c:5f:88:e9:a7:16:2d:6c:2d:ea:57:a9:f1:94:
6b:bf:b6:6b:cc:0b:28:e0:0b:ed:fd:37:f4:4b:b6:
b1:9e:90:88:47:38:ba:03:db:08:54:62:bf:20:e6:
74:44:85:78:7e:75:bb:1a:59:28:8d:cc:15:28:3f:
54:7f:a3:df:05:bd:1d:c1:07:71:f6:3f:fc:ab:0f:
48:c1:22:e0:bf:ad:82:f6:b3:04:d3:8f:6e:1d:9e:
f9:7b:0f:5e:79:f7:bb:f2:95:73:ab:32:16:2e:28:
73:43:7e:9c:82:67:56:75:92:72:1b:55:60:0c:33:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D0:D4:9C:FE:A1:DB:D2:1B:D2:34:99:C7:D2:99:E5:11:24:BB:F2
X509v3 Authority Key Identifier:
keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:05:16:32:63:57:86:44:d2:8b:66:e7:f8:03:bd:ed:35:2f:
8b:5e:61:c0:c9:06:a6:1d:4d:14:c6:c8:16:95:a4:37:76:7f:
ac:4c:01:a9:95:a9:c3:1c:bc:0a:fd:b1:ac:40:b7:ee:60:23:
ba:2a:6f:87:f0:09:54:d1:cf:f9:e2:27:4c:4c:e4:5c:33:f4:
26:0e:1b:71:5a:16:34:fc:55:ed:ea:30:be:82:72:b6:2e:ad:
54:da:37:b4:3d:32:25:80:e3:c3:8b:eb:7b:41:58:2e:f3:e4:
39:b2:2c:11:78:d4:c0:82:03:9c:80:a5:dd:c6:4a:fa:44:d1:
f9:85:4a:04:9a:0d:6b:88:8a:13:1e:bc:11:4f:b2:ef:d6:78:
ea:9a:19:d2:4b:8f:f1:f7:43:ec:2d:d8:15:bf:6f:16:51:e0:
13:68:9d:52:50:a4:e3:ec:a1:dd:62:45:7b:a1:43:6b:e8:08:
f5:5a:11:5c:db:2e:f5:81:a3:e2:0d:53:9b:99:42:d3:81:64:
64:f6:c9:de:68:6c:b3:24:dd:bb:91:ac:b6:2f:36:2b:cd:8c:
be:1d:51:05:3d:b9:3a:31:42:7e:ba:6f:c4:90:03:8d:3c:53:
8d:95:38:e7:5b:c6:dc:46:6b:a5:4f:b9:ff:3c:80:33:7c:1a:
8b:77:a3:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBn208Ws0qzozlzHMb/XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MWZiODVkNGY4MDhjYjE2MDdhMmJlNGY0YTc5OGNhM2Vh
ZDM4MTAwHhcNMjYwMzI5MDgwMDQ3WhcNMjYwMzMwMDgwMDQ3WjAzMTEwLwYDVQQD
Eyg1OWQwZDQ5Y2ZlYTFkYmQyMWJkMjM0OTljN2QyOTllNTExMjRiYmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLdpPWgYUFC0J0xmErbwJxVCVygp
aVFBTPkntBH43QMgnVpdtey+nxLboBNsqhgjiPjsEX4HYQsv8YfIhPQxi1CXImpX
p8ZY6ZJJ28kWdtP/zI+Q1P5Yq8FuY2DyQkUq6IXXC6aWFkdYx+YMaEBplNDJurrF
78M32VOh47m6hHFMYHACvb6vjF+I6acWLWwt6lep8ZRrv7ZrzAso4Avt/Tf0S7ax
npCIRzi6A9sIVGK/IOZ0RIV4fnW7GlkojcwVKD9Uf6PfBb0dwQdx9j/8qw9IwSLg
v62C9rME049uHZ75ew9eefe78pVzqzIWLihzQ36cgmdWdZJyG1VgDDNhFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnQ1Jz+odvSG9I0mcfSmeURJLvyMB8GA1UdIwQY
MBaAFDcfuF1PgIyxYHor5PSnmMo+rTgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNWE4NDgtMjYwZC00YWQwLWFlZjMt
ZDdiMmM5MzQ0MmQzLzEvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jNWE4NDgtMjYwZC00YWQwLWFlZjMtZDdiMmM5MzQ0MmQz
LzEvTngtNFhVLUFqTEZnZWl2azlLZVl5ajZ0T0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgUWMmNX
hkTSi2bn+AO97TUvi15hwMkGph1NFMbIFpWkN3Z/rEwBqZWpwxy8Cv2xrEC37mAj
uipvh/AJVNHP+eInTEzkXDP0Jg4bcVoWNPxV7eowvoJyti6tVNo3tD0yJYDjw4vr
e0FYLvPkObIsEXjUwIIDnICl3cZK+kTR+YVKBJoNa4iKEx68EU+y79Z46poZ0kuP
8fdD7C3YFb9vFlHgE2idUlCk4+yh3WJFe6FDa+gI9VoRXNsu9YGj4g1Tm5lC04Fk
ZPbJ3mhssyTdu5Gsti82K82Mvh1RBT25OjFCfrpvxJADjTxTjZU451vG3EZrpU+5
/zyAM3wai3ejWQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:01 2026 by rpki-client