Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
File: NscJXgRZhgU7mz6HiQNnJoN90fU.mft (raw, json)
Hash identifier: dk+JyubOtwTVO2iR92iE3rSPhyTp1MOe8eGGz6R/FKM=
Subject key identifier: 36:F5:20:E6:44:24:68:45:91:B9:65:6F:BE:44:98:78:BA:79:90:B7
Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
Certificate issuer: /CN=36c7095e045986053b9b3e8789036726837dd1f5
Certificate serial: 019D382EA78CA6B04650D3D81B1E5514DD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
Manifest number: 07B8
Signing time: Sun 29 Mar 2026 06:01:14 +0000
Manifest this update: Sun 29 Mar 2026 06:01:14 +0000
Manifest next update: Mon 30 Mar 2026 06:01:14 +0000
Files and hashes: 1: HuSnhil6lfXTqaq7JgeQk-Ofamg.roa (hash: gk7WHH1Fk2fGMGJjH6DsGNArwgZbzQBBGEMIBb7kSmE=)
2: NscJXgRZhgU7mz6HiQNnJoN90fU.crl (hash: CTKM8GYA4m38tYhLpfX1xtDqbjjYpG3Z44AFUqxJcuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a7:8c:a6:b0:46:50:d3:d8:1b:1e:55:14:dd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5
Validity
Not Before: Mar 29 06:01:14 2026 GMT
Not After : Mar 30 06:01:14 2026 GMT
Subject: CN=36f520e64424684591b9656fbe449878ba7990b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:ae:4c:e0:ff:6f:09:b8:ba:4a:62:41:cb:
50:57:76:9c:ea:90:a4:34:4f:1b:bf:ae:62:57:b8:
e1:b2:89:c6:7b:af:87:6e:3a:f5:e0:e4:20:10:e2:
77:79:d2:57:1d:0f:b7:fa:c0:3e:08:be:ae:f8:3f:
0b:71:17:d8:3a:97:10:90:fe:4f:c3:b9:8a:44:d8:
70:28:5a:29:10:5a:bd:7f:b9:87:c1:38:d0:7d:56:
fc:39:39:19:ae:77:8d:c4:e5:5f:83:1b:0a:6b:51:
3c:e3:f5:e7:d7:9b:e0:8f:ae:e5:c1:3e:ac:c4:4c:
01:52:20:64:8e:1b:b4:fa:9b:37:72:29:a2:93:6f:
e5:5d:00:dd:21:71:8b:19:8f:bc:e2:3b:89:0d:da:
50:26:fb:30:7b:30:ba:ab:90:bc:b1:b0:61:f5:9d:
a8:66:48:46:6f:51:7e:6d:b5:77:7b:94:2c:2b:6b:
61:f6:c5:30:b6:03:bb:98:53:de:33:5b:24:70:9b:
0a:56:91:4a:fb:0a:e9:ff:63:4f:4a:2d:0c:ae:a6:
06:ee:95:ab:7f:25:1c:3a:b6:bd:7a:36:78:74:97:
b0:cb:d3:53:84:28:4a:1a:12:cb:9c:44:97:8e:9e:
d1:b3:bf:f0:19:70:8d:3d:ce:d9:68:39:82:26:47:
a3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F5:20:E6:44:24:68:45:91:B9:65:6F:BE:44:98:78:BA:79:90:B7
X509v3 Authority Key Identifier:
keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:74:9c:3f:6d:7d:b9:f5:66:f7:d6:31:d2:ee:e8:69:3f:09:
14:02:35:2f:1f:58:54:2f:68:41:71:8b:6e:31:fc:b1:7f:ab:
ee:9c:67:cf:d4:56:37:f6:2a:e3:52:db:ed:ba:7d:05:a8:6a:
cb:cd:aa:f4:e0:c3:f6:a9:85:6b:a9:3c:83:6e:50:57:40:5a:
68:36:b8:72:41:6b:1c:df:7b:67:ff:f9:bb:1d:e6:34:d0:06:
58:25:fa:1c:62:3d:a7:41:6c:a6:9b:71:95:8e:f1:6e:16:bf:
ba:0f:d1:4b:90:cb:c1:af:3a:2e:5d:2c:52:92:a5:c5:34:3f:
01:a3:31:2b:6e:3c:5b:f1:83:85:f4:30:b5:1f:55:8c:8f:5b:
13:50:aa:41:53:e1:fa:3c:0d:99:c5:b5:69:0f:e3:86:73:87:
58:8b:a2:25:46:f3:21:1d:51:27:62:de:e2:cd:d2:5f:80:3c:
b8:01:a0:92:5a:93:8e:b8:20:8e:ea:cd:a2:5a:da:45:da:c3:
58:20:ce:87:35:65:fa:e1:c6:6f:56:0a:c7:f5:f8:64:4e:0a:
46:2c:ef:c7:93:48:4f:23:95:eb:5c:6b:41:23:f1:42:e5:58:
7e:03:cc:6c:60:47:04:bc:b6:6b:52:58:90:89:e2:7b:50:1a:
6f:f6:aa:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:14 2026 by rpki-client