Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
File: x_nvdcTr2Q5NisU39pPdM6xIVko.mft (raw, json)
Hash identifier: elYWedFotXJ3rbkNNW69e3LxM2JIB21W/Cr1dpm735Y=
Subject key identifier: E8:43:E5:27:92:22:66:DD:92:2B:2E:23:6E:E6:3A:B2:D3:51:2D:BD
Authority key identifier: C7:F9:EF:75:C4:EB:D9:0E:4D:8A:C5:37:F6:93:DD:33:AC:48:56:4A
Certificate issuer: /CN=c7f9ef75c4ebd90e4d8ac537f693dd33ac48564a
Certificate serial: 019D28F2BBE8F32F022D2AB58AA411B297D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
Manifest number: 033D
Signing time: Thu 26 Mar 2026 07:01:29 +0000
Manifest this update: Thu 26 Mar 2026 07:01:29 +0000
Manifest next update: Fri 27 Mar 2026 07:01:29 +0000
Files and hashes: 1: x_nvdcTr2Q5NisU39pPdM6xIVko.crl (hash: pqpfb8+QsJfWI13ZnDwJcGlLmxeTbIUWfGH/lwATZaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:bb:e8:f3:2f:02:2d:2a:b5:8a:a4:11:b2:97:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f9ef75c4ebd90e4d8ac537f693dd33ac48564a
Validity
Not Before: Mar 26 07:01:29 2026 GMT
Not After : Mar 27 07:01:29 2026 GMT
Subject: CN=e843e527922266dd922b2e236ee63ab2d3512dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f9:fd:78:09:41:48:9f:a0:a5:f5:95:a0:3f:
4b:0e:44:f1:1f:85:35:86:58:74:6c:98:33:1a:bb:
a3:c3:35:58:ed:1a:d7:9b:91:89:09:3f:6e:6d:c2:
35:8b:35:c8:f4:ea:8d:82:b6:6c:0d:f9:30:7d:20:
08:ef:bb:18:d3:dc:22:17:29:2d:b7:5d:8d:21:1f:
6a:08:5e:7b:7d:ca:62:d4:b8:f0:2e:4a:7e:fe:67:
13:6f:eb:4c:72:25:ad:f7:10:14:23:c4:2a:5c:33:
12:0d:31:3a:10:a1:01:b8:a8:47:c3:f0:20:7e:3e:
01:23:63:fe:1a:e0:ec:01:d7:09:20:ea:6d:6b:7e:
0e:68:04:61:a3:bc:75:0c:a0:17:42:dc:09:97:6d:
b9:6e:b2:3f:4b:d7:2f:66:9a:64:2e:ff:04:5a:c8:
20:62:ef:12:4e:44:5a:73:da:34:ef:56:73:1a:08:
d5:7e:53:b3:3c:21:f8:a8:20:f6:33:f2:9f:24:42:
3d:56:8c:5b:1c:ef:c8:cc:13:12:16:27:65:89:9b:
53:7c:54:f7:6e:2a:8c:16:3d:76:aa:0b:98:c1:6f:
b0:da:b7:30:d7:b7:9f:bf:e3:e0:fc:91:8b:dd:71:
df:f0:a6:2f:d5:b1:8e:60:49:f8:d5:02:32:40:10:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:43:E5:27:92:22:66:DD:92:2B:2E:23:6E:E6:3A:B2:D3:51:2D:BD
X509v3 Authority Key Identifier:
keyid:C7:F9:EF:75:C4:EB:D9:0E:4D:8A:C5:37:F6:93:DD:33:AC:48:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_nvdcTr2Q5NisU39pPdM6xIVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1d3c0e-fd35-4eb1-b9d8-85c36a7235d0/1/x_nvdcTr2Q5NisU39pPdM6xIVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b4:74:1e:a5:01:c8:cd:3a:82:a4:14:c2:5f:1f:c0:16:b9:
9d:c7:5f:ca:b8:c1:f5:41:50:8a:cc:47:a6:5d:77:e9:ed:19:
18:7c:10:c3:65:48:23:26:62:d5:41:ca:13:b4:28:ba:5b:ac:
01:e2:54:5b:85:4a:bf:bc:9c:15:6f:0e:af:ab:d4:d3:f3:12:
b3:6a:5f:86:f0:db:8e:ff:e2:8a:cf:3d:4f:85:ca:11:e1:ee:
b0:7d:08:6c:94:18:4c:c6:69:14:89:a4:73:32:b5:74:25:02:
61:a0:6c:b7:d8:ec:80:ab:2b:e2:86:03:74:cb:60:86:dd:53:
e1:bd:7f:5f:a7:14:c9:d5:95:56:7c:84:b0:92:1d:3b:3c:81:
2a:bf:32:d1:92:cf:32:e9:a3:f5:98:a9:fd:1d:4a:36:db:2b:
d9:55:cf:7c:f0:23:c9:2b:da:bf:93:f8:ca:bd:c1:e5:80:5e:
b1:7c:23:8c:0d:1f:02:1d:a5:39:f6:d7:44:81:f8:c7:22:80:
8b:40:fa:0c:82:d4:87:75:bc:c7:1d:56:84:07:f0:37:02:bd:
8f:e6:f8:ea:80:72:b5:d4:62:7e:99:70:57:31:ce:47:af:e0:
9d:95:a6:29:b2:29:9e:dd:0b:10:0e:a6:8a:6d:bb:33:d7:88:
69:82:be:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:30 2026 by rpki-client