Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
File: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json)
Hash identifier: 696TlU6yPxW4xA9946DDhOkRUwLPSIkuDPWuj0Usx50=
Subject key identifier: F1:B3:C4:6E:0B:24:C2:E1:CB:A9:BF:F8:41:77:5B:AC:0C:E9:C2:05
Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
Certificate issuer: /CN=36be697c8489f482220f5c4064babe4c83c419d6
Certificate serial: 019E2023D5DD6F5F09303F160604E490F24D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
Manifest number: 0D96
Signing time: Wed 13 May 2026 07:01:19 +0000
Manifest this update: Wed 13 May 2026 07:01:19 +0000
Manifest next update: Thu 14 May 2026 07:01:19 +0000
Files and hashes: 1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: KSxh5lJXVNOtBQ+JMigPJGxNmrFyolU+C30BQXNQixM=)
2: V7ehPHGc-IPjCptiIqNGOp1gBiE.roa (hash: J/1jCxZxkRbRLNpc2zFMuakcbWm535PWrbp1jxC/YvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:d5:dd:6f:5f:09:30:3f:16:06:04:e4:90:f2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6
Validity
Not Before: May 13 07:01:19 2026 GMT
Not After : May 14 07:01:19 2026 GMT
Subject: CN=f1b3c46e0b24c2e1cba9bff841775bac0ce9c205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:26:fc:90:c7:d8:13:b9:9b:82:be:3e:e1:
41:7b:75:e3:02:64:6f:d8:06:00:93:53:fb:fa:9c:
f7:82:3b:05:e8:88:b9:5f:dd:b9:ec:dc:7f:dd:cd:
ac:5d:9c:c8:17:2e:51:eb:97:ba:d2:96:23:f8:21:
65:d5:29:8e:0d:ae:0a:d2:5f:33:17:fe:b8:25:a3:
b9:50:d3:85:b8:f6:63:de:44:72:7f:36:c9:83:0d:
92:ec:52:c7:74:7e:fc:b3:84:b9:1c:ad:5f:a8:ea:
7b:4a:cb:7d:1f:5f:1b:a3:c6:4d:e2:76:0e:49:44:
99:e0:21:ff:57:74:15:b6:f8:14:e4:15:ee:40:f7:
c9:ac:3c:f2:de:6e:5b:53:dc:7d:4b:a1:7e:33:a7:
63:4b:22:6f:8f:19:b6:59:a8:51:93:ff:6a:67:ec:
da:f7:b2:7f:f0:4a:3f:e5:9a:86:e2:a8:04:bd:70:
e8:09:fd:08:18:bf:59:42:e3:9c:8d:93:5b:7b:d8:
c2:c1:2c:dd:cc:e9:a0:ae:d9:c4:43:d9:04:b9:69:
39:c2:2d:08:c3:1c:c7:c0:7d:19:fe:ae:05:cc:92:
ec:20:14:06:b8:0f:2b:e8:b8:5b:b1:a5:fb:ed:84:
d3:b2:56:2d:8b:e6:7b:ee:8a:f9:6d:8b:1a:34:b0:
a5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B3:C4:6E:0B:24:C2:E1:CB:A9:BF:F8:41:77:5B:AC:0C:E9:C2:05
X509v3 Authority Key Identifier:
keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b6:70:dc:27:ec:37:45:4d:3d:10:1b:b6:cb:55:e2:f4:c5:
27:0f:39:b9:d0:ee:02:a4:e8:ce:e1:ee:bc:df:c8:4f:01:ac:
1d:cc:f3:ec:d0:11:d7:db:1a:fe:35:e7:b3:38:ac:ce:7d:34:
47:db:86:b8:df:7e:9c:c2:31:ed:e2:c9:c9:83:c7:40:f4:21:
b1:a1:cc:90:e5:6c:2f:50:c0:85:00:8f:f7:aa:fb:54:b1:e7:
89:84:84:76:c5:4c:96:96:68:b3:1e:ad:c4:c1:c3:7a:03:eb:
2b:02:ec:df:14:8e:6d:75:9d:34:3f:0b:42:b6:c1:2c:9b:cf:
0c:ba:7c:74:45:c0:5f:6a:e2:5a:05:08:97:86:6a:91:e2:61:
38:66:f7:07:ee:1b:04:c1:12:3a:2a:0a:52:79:d4:94:80:60:
43:df:cc:38:a6:40:a5:da:0a:ef:7e:0a:38:e9:14:1b:39:c8:
dd:2b:87:f9:83:8b:d4:8c:8f:3e:51:9d:f6:25:0f:c0:8a:d5:
15:2e:90:f4:6f:8b:bf:be:8d:0c:eb:b2:1f:a2:56:1f:3f:45:
f9:95:8d:bc:c2:8f:ae:e3:f2:ed:a0:2c:76:16:f6:4b:c2:ce:
ff:4f:68:95:a6:4f:6c:30:9e:d9:5b:9e:a6:5f:2f:89:a1:3f:
55:ab:4a:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI9Xdb18JMD8WBgTkkPJNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YmU2OTdjODQ4OWY0ODIyMjBmNWM0MDY0YmFiZTRjODNj
NDE5ZDYwHhcNMjYwNTEzMDcwMTE5WhcNMjYwNTE0MDcwMTE5WjAzMTEwLwYDVQQD
EyhmMWIzYzQ2ZTBiMjRjMmUxY2JhOWJmZjg0MTc3NWJhYzBjZTljMjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyQm/JDH2BO5m4K+PuFBe3XjAmRv
2AYAk1P7+pz3gjsF6Ii5X9257Nx/3c2sXZzIFy5R65e60pYj+CFl1SmODa4K0l8z
F/64JaO5UNOFuPZj3kRyfzbJgw2S7FLHdH78s4S5HK1fqOp7Sst9H18bo8ZN4nYO
SUSZ4CH/V3QVtvgU5BXuQPfJrDzy3m5bU9x9S6F+M6djSyJvjxm2WahRk/9qZ+za
97J/8Eo/5ZqG4qgEvXDoCf0IGL9ZQuOcjZNbe9jCwSzdzOmgrtnEQ9kEuWk5wi0I
wxzHwH0Z/q4FzJLsIBQGuA8r6LhbsaX77YTTslYti+Z77or5bYsaNLClKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGzxG4LJMLhy6m/+EF3W6wM6cIFMB8GA1UdIwQY
MBaAFDa+aXyEifSCIg9cQGS6vkyDxBnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2M1OWMtZDI1Ny00OGFjLWJhMzMt
YjBlZWFkN2MyNDg4LzEvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wM2M1OWMtZDI1Ny00OGFjLWJhMzMtYjBlZWFkN2MyNDg4
LzEvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7Zw3Cfs
N0VNPRAbtstV4vTFJw85udDuAqTozuHuvN/ITwGsHczz7NAR19sa/jXnsziszn00
R9uGuN9+nMIx7eLJyYPHQPQhsaHMkOVsL1DAhQCP96r7VLHniYSEdsVMlpZosx6t
xMHDegPrKwLs3xSObXWdND8LQrbBLJvPDLp8dEXAX2riWgUIl4ZqkeJhOGb3B+4b
BMESOioKUnnUlIBgQ9/MOKZApdoK734KOOkUGznI3SuH+YOL1IyPPlGd9iUPwIrV
FS6Q9G+Lv76NDOuyH6JWHz9F+ZWNvMKPruPy7aAsdhb2S8LO/09olaZPbDCe2Vue
pl8viaE/VatK4Q==
-----END CERTIFICATE-----
Generated at Wed May 13 11:03:07 2026 by rpki-client