Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
File: NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json)
Hash identifier: 4X+zldnVyyY/8gp6jnp1G1/yZwZR7teLbOBCX8DhmT0=
Subject key identifier: 69:05:05:A5:5E:87:A1:58:B3:86:20:DD:39:89:88:98:D3:D4:41:E5
Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
Certificate issuer: /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Certificate serial: 019D333EDE7565D952E47F3D5CFF5A70951F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
Manifest number: 188C
Signing time: Sat 28 Mar 2026 07:00:51 +0000
Manifest this update: Sat 28 Mar 2026 07:00:51 +0000
Manifest next update: Sun 29 Mar 2026 07:00:51 +0000
Files and hashes: 1: A1iR6bQzfWrt-3S-DrDY84sQ1JU.roa (hash: yW7YhSTGjTCd5hdSGTzNJGlqpUw27PcefgpccczhLt0=)
2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: 0cIISFK8WR6tLs4gIg4R/RQSnnUsUuZFpMgMy3MOdc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:de:75:65:d9:52:e4:7f:3d:5c:ff:5a:70:95:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Validity
Not Before: Mar 28 07:00:51 2026 GMT
Not After : Mar 29 07:00:51 2026 GMT
Subject: CN=690505a55e87a158b38620dd39898898d3d441e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:37:28:6f:ae:94:6b:f4:94:a7:d6:6c:90:
74:73:17:28:de:df:36:eb:bc:ad:82:54:25:75:7c:
b1:eb:34:cc:d9:ab:fc:75:07:bb:ff:1e:d0:f9:64:
76:9f:eb:19:8a:c1:d1:cc:77:2c:19:29:b7:0f:ba:
45:50:f4:72:94:1c:d6:9e:7e:5e:0a:ab:48:31:1c:
bb:03:82:1a:ba:d2:fd:3d:08:86:b2:1c:87:85:39:
6f:82:f0:0e:e3:f9:f5:df:fd:77:87:40:53:dd:05:
4e:70:5e:6d:26:55:37:5a:33:ad:84:75:e3:b0:94:
ca:fd:ab:f0:f9:4c:50:09:c8:18:52:b3:10:de:ac:
d9:f4:32:10:25:d5:a5:04:f2:dd:94:8a:4d:0a:91:
25:f6:d0:c4:d8:8e:f6:c6:24:dc:25:d5:98:a9:3a:
73:79:da:95:b7:87:9e:1e:3b:03:52:c0:97:4c:bd:
47:97:c7:32:a3:c5:93:53:a1:1c:8c:b2:4c:df:a9:
28:98:33:21:ce:75:e5:21:0e:96:89:4c:88:27:8a:
73:39:d5:94:50:05:93:bc:02:2e:77:60:a0:ed:da:
70:7d:09:2f:4b:fc:da:6b:3e:c7:0f:6a:0c:a8:29:
3b:0b:31:9d:08:2c:d5:b7:e8:79:3a:9f:88:77:72:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:05:05:A5:5E:87:A1:58:B3:86:20:DD:39:89:88:98:D3:D4:41:E5
X509v3 Authority Key Identifier:
keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5e:11:d5:3e:85:65:3c:33:59:5c:8a:ef:ed:90:8b:1a:f8:
0e:c9:57:ee:96:5d:44:8b:b3:1a:35:f6:01:43:56:42:af:4d:
51:8b:ef:79:37:3c:6a:69:01:a6:1e:11:44:ba:f4:9a:66:98:
c2:b5:f9:b6:55:46:9a:a4:8c:16:33:b8:f0:44:4e:69:31:7d:
d6:ce:da:c5:d5:19:71:4e:09:64:1f:23:a8:b7:2a:bb:23:f4:
94:41:40:4f:8a:3f:4f:b4:93:b4:7a:9b:95:b5:2a:8c:c5:02:
ce:04:8c:8f:7f:1e:61:08:8d:01:be:6b:4d:79:fc:5e:d3:05:
7c:db:53:1f:a0:c8:a0:a8:f8:ea:43:0e:94:d0:47:bc:97:08:
85:a6:64:18:70:53:f2:fe:32:6e:ea:ad:8f:01:10:0e:89:61:
04:ca:7a:aa:f1:41:9e:46:4b:37:a4:7f:90:74:c8:9e:80:55:
b3:04:a3:fd:ea:13:f8:8b:e3:8f:90:8e:6f:b6:f3:a6:4e:77:
17:94:c3:7d:49:d8:50:11:da:30:ac:cb:7c:0c:1f:46:70:7b:
85:ba:76:d9:62:0e:05:82:d3:1c:b5:12:99:d4:0c:9b:28:f6:
f6:79:fc:71:c2:65:b0:58:f6:72:42:40:ec:a6:f5:56:f5:d6:
ab:13:c0:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPt51ZdlS5H89XP9acJUfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Y2IxNmU0NGNmYmYwN2U5N2Y2ZjVlNDRhZTcxOGFhNTBk
MDUyOTEwHhcNMjYwMzI4MDcwMDUxWhcNMjYwMzI5MDcwMDUxWjAzMTEwLwYDVQQD
Eyg2OTA1MDVhNTVlODdhMTU4YjM4NjIwZGQzOTg5ODg5OGQzZDQ0MWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyY3KG+ulGv0lKfWbJB0cxco3t82
67ytglQldXyx6zTM2av8dQe7/x7Q+WR2n+sZisHRzHcsGSm3D7pFUPRylBzWnn5e
CqtIMRy7A4IautL9PQiGshyHhTlvgvAO4/n13/13h0BT3QVOcF5tJlU3WjOthHXj
sJTK/avw+UxQCcgYUrMQ3qzZ9DIQJdWlBPLdlIpNCpEl9tDE2I72xiTcJdWYqTpz
edqVt4eeHjsDUsCXTL1Hl8cyo8WTU6EcjLJM36komDMhznXlIQ6WiUyIJ4pzOdWU
UAWTvAIud2Cg7dpwfQkvS/zaaz7HD2oMqCk7CzGdCCzVt+h5Op+Id3Jc4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkFBaVeh6FYs4Yg3TmJiJjT1EHlMB8GA1UdIwQY
MBaAFDbLFuRM+/B+l/b15ErnGKpQ0FKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jODA0M2UtZWE5NS00ODUxLWEyZmIt
MTBjYmM1OTdhNzFhLzEvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jODA0M2UtZWE5NS00ODUxLWEyZmItMTBjYmM1OTdhNzFh
LzEvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMF4R1T6F
ZTwzWVyK7+2Qixr4DslX7pZdRIuzGjX2AUNWQq9NUYvveTc8amkBph4RRLr0mmaY
wrX5tlVGmqSMFjO48EROaTF91s7axdUZcU4JZB8jqLcquyP0lEFAT4o/T7STtHqb
lbUqjMUCzgSMj38eYQiNAb5rTXn8XtMFfNtTH6DIoKj46kMOlNBHvJcIhaZkGHBT
8v4ybuqtjwEQDolhBMp6qvFBnkZLN6R/kHTInoBVswSj/eoT+Ivjj5COb7bzpk53
F5TDfUnYUBHaMKzLfAwfRnB7hbp22WIOBYLTHLUSmdQMmyj29nn8ccJlsFj2ckJA
7Kb1VvXWqxPA+g==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:28 2026 by rpki-client