Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
File: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json)
Hash identifier: uqpmNVvci47o6Gm96+yUcmHwqzjkEpBRS7yEpmbYng0=
Subject key identifier: 17:32:DA:38:D8:1B:AA:A3:7A:9B:89:90:CE:30:B8:5E:D1:89:BF:42
Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
Certificate issuer: /CN=36be697c8489f482220f5c4064babe4c83c419d6
Certificate serial: 019D28F20DB40EBDA012BC04338C7193E1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
Manifest number: 0D16
Signing time: Thu 26 Mar 2026 07:00:45 +0000
Manifest this update: Thu 26 Mar 2026 07:00:45 +0000
Manifest next update: Fri 27 Mar 2026 07:00:45 +0000
Files and hashes: 1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: RAck7zNdy5cN3N8aFgb1sw015u3ZIPjjQGfC6EuW2Qw=)
2: V7ehPHGc-IPjCptiIqNGOp1gBiE.roa (hash: J/1jCxZxkRbRLNpc2zFMuakcbWm535PWrbp1jxC/YvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:0d:b4:0e:bd:a0:12:bc:04:33:8c:71:93:e1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6
Validity
Not Before: Mar 26 07:00:45 2026 GMT
Not After : Mar 27 07:00:45 2026 GMT
Subject: CN=1732da38d81baaa37a9b8990ce30b85ed189bf42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:3f:65:24:d0:90:ef:a9:ce:97:68:33:79:
10:d0:c0:54:3b:ba:ab:91:3f:8b:83:39:bd:ec:8f:
24:66:3c:f9:49:7d:5f:3b:a1:b9:3f:2e:31:a4:db:
87:39:1b:a0:64:c7:ca:b6:0f:14:8f:28:3a:e8:b7:
5c:17:53:d3:ab:0c:7f:23:83:9c:b4:26:56:f8:ab:
83:c7:1b:c7:44:40:72:eb:e5:c5:7d:d1:f0:30:bf:
38:5c:2f:11:89:4d:dc:98:8c:0f:c7:3a:a3:2f:e1:
2f:fd:84:08:38:6b:46:9e:1b:5a:2c:ed:f9:6e:d1:
be:af:94:16:a7:ea:b0:05:8e:fd:fe:0b:ba:1d:f7:
c3:a4:b6:3b:bb:0c:86:71:e6:98:8d:2a:58:c5:73:
3c:1d:8d:f7:26:10:15:7c:f9:9e:1c:80:b6:40:f2:
dd:ec:6a:ed:23:de:8a:88:b8:14:85:8c:c8:df:fe:
f7:49:7a:c4:12:4e:09:e2:09:88:10:87:a2:5f:e8:
38:cc:27:eb:14:cf:eb:da:8b:7a:ac:6d:fd:e7:96:
70:72:ab:f8:73:fe:67:40:53:90:e0:a2:5c:c6:5d:
65:29:9a:c9:50:c2:08:c7:c0:19:d9:08:b6:11:94:
da:49:b6:e7:06:1f:02:f5:c2:11:04:d9:94:a0:d2:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:32:DA:38:D8:1B:AA:A3:7A:9B:89:90:CE:30:B8:5E:D1:89:BF:42
X509v3 Authority Key Identifier:
keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b2:65:5b:06:06:8e:1b:dd:50:2b:e3:d4:66:89:ab:50:a6:
a8:ad:ef:84:37:4f:aa:33:2b:1f:77:e2:b5:50:c1:c3:bc:19:
36:8b:55:fa:7b:c8:9f:bf:f4:3c:c6:d4:94:d0:e5:eb:53:0a:
16:8c:75:11:87:84:99:19:f4:9f:47:5a:29:92:a2:c4:ca:b2:
34:f2:a4:9e:20:a7:68:a6:04:fb:29:08:2d:70:cf:a7:a4:7c:
d8:b7:7f:e3:86:1a:23:74:75:81:09:84:c2:ce:a5:ad:f9:f4:
3f:ec:6d:02:80:8e:43:d9:1c:66:34:a0:cf:d6:36:55:c3:97:
35:43:fe:42:b2:c0:78:67:dd:1d:e7:2d:58:c3:f7:24:44:0c:
7d:55:e7:8c:98:48:52:a3:3a:f6:4e:3c:7d:58:c9:87:16:05:
09:c0:cb:71:b0:e2:26:08:71:39:2a:87:0f:b2:cb:60:3c:79:
3d:33:90:29:60:4f:cf:75:4f:1b:bd:a2:84:1e:d2:1e:4d:49:
65:f5:cf:67:a6:3c:7a:79:0f:b4:db:b2:5e:01:17:f9:2b:4f:
9e:dd:0f:43:de:09:f3:32:6f:ca:99:00:66:4e:63:d7:74:2b:
d2:56:0c:be:db:bc:8e:02:ed:33:f1:aa:7e:11:f2:a2:77:ef:
24:2b:bf:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8g20Dr2gErwEM4xxk+H2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YmU2OTdjODQ4OWY0ODIyMjBmNWM0MDY0YmFiZTRjODNj
NDE5ZDYwHhcNMjYwMzI2MDcwMDQ1WhcNMjYwMzI3MDcwMDQ1WjAzMTEwLwYDVQQD
EygxNzMyZGEzOGQ4MWJhYWEzN2E5Yjg5OTBjZTMwYjg1ZWQxODliZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAY/ZSTQkO+pzpdoM3kQ0MBUO7qr
kT+Lgzm97I8kZjz5SX1fO6G5Py4xpNuHORugZMfKtg8Ujyg66LdcF1PTqwx/I4Oc
tCZW+KuDxxvHREBy6+XFfdHwML84XC8RiU3cmIwPxzqjL+Ev/YQIOGtGnhtaLO35
btG+r5QWp+qwBY79/gu6HffDpLY7uwyGceaYjSpYxXM8HY33JhAVfPmeHIC2QPLd
7GrtI96KiLgUhYzI3/73SXrEEk4J4gmIEIeiX+g4zCfrFM/r2ot6rG3955Zwcqv4
c/5nQFOQ4KJcxl1lKZrJUMIIx8AZ2Qi2EZTaSbbnBh8C9cIRBNmUoNLAMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcy2jjYG6qjepuJkM4wuF7Rib9CMB8GA1UdIwQY
MBaAFDa+aXyEifSCIg9cQGS6vkyDxBnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2M1OWMtZDI1Ny00OGFjLWJhMzMt
YjBlZWFkN2MyNDg4LzEvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wM2M1OWMtZDI1Ny00OGFjLWJhMzMtYjBlZWFkN2MyNDg4
LzEvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLJlWwYG
jhvdUCvj1GaJq1CmqK3vhDdPqjMrH3fitVDBw7wZNotV+nvIn7/0PMbUlNDl61MK
Fox1EYeEmRn0n0daKZKixMqyNPKkniCnaKYE+ykILXDPp6R82Ld/44YaI3R1gQmE
ws6lrfn0P+xtAoCOQ9kcZjSgz9Y2VcOXNUP+QrLAeGfdHectWMP3JEQMfVXnjJhI
UqM69k48fVjJhxYFCcDLcbDiJghxOSqHD7LLYDx5PTOQKWBPz3VPG72ihB7SHk1J
ZfXPZ6Y8enkPtNuyXgEX+StPnt0PQ94J8zJvypkAZk5j13Qr0lYMvtu8jgLtM/Gq
fhHyonfvJCu/nA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:51 2026 by rpki-client