Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
File: NrVfs00p-WJUUTKgJbUmRP3_v28.mft (raw, json)
Hash identifier: lFHpBPda3PYF4cwZ7oHkkBQjlKIlPUf8E1xhcuIzd/8=
Subject key identifier: 38:F6:D0:13:7A:CC:82:89:01:09:CA:13:4C:2D:88:1D:A0:1F:0E:64
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial: 019E1F10EEBB861E70C3122D4371BEDE9BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
Manifest number: 14E4
Signing time: Wed 13 May 2026 02:01:03 +0000
Manifest this update: Wed 13 May 2026 02:01:03 +0000
Manifest next update: Thu 14 May 2026 02:01:03 +0000
Files and hashes: 1: 8Blpmhg56UtYFzHPUGEc8r1tGxk.roa (hash: ZeBRyf2GdsztNKgCVDcLxg6L0hXsn4muZMO3aaOgEDY=)
2: NrVfs00p-WJUUTKgJbUmRP3_v28.crl (hash: 9P+48wHYbklRrOAb74r8YvlBYvly12OdVs5/KdqWo74=)
3: kZxYAWzX74NAE37QVjZYwdiy08g.roa (hash: UpUGn6BX93JUf+igiqvnQCmLw41MVtW2FFB1GnAAkLs=)
4: nscX6HThd1wN8UnSg1ZdjqXq-gI.roa (hash: siyWzC01/7D6KwgOGvzUXqq60mfjtP7SOo5lCWwEAqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:ee:bb:86:1e:70:c3:12:2d:43:71:be:de:9b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
Validity
Not Before: May 13 02:01:03 2026 GMT
Not After : May 14 02:01:03 2026 GMT
Subject: CN=38f6d0137acc82890109ca134c2d881da01f0e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:c6:81:af:bd:7a:8c:08:c3:11:98:92:9a:
6b:61:22:5d:1d:73:c4:a7:8b:a8:f4:01:dd:be:1c:
86:5d:07:d5:62:21:ac:cb:bd:1c:1f:9f:eb:23:7b:
6a:83:e0:de:1d:c6:74:30:36:47:53:03:26:86:c0:
84:64:38:d3:be:c5:03:6e:8d:26:cf:61:5e:1e:eb:
6f:fc:76:03:d1:95:a2:f6:9b:ab:8b:1e:df:a8:b2:
65:c2:1f:f7:d5:94:ba:75:8d:3d:ac:9a:07:c8:6d:
b6:1f:30:39:cc:f0:0a:65:12:49:b7:9a:33:26:e6:
22:4b:35:4b:4a:cf:45:86:2e:a9:e0:5d:b8:7a:7f:
76:ba:0f:17:4c:f9:3f:8c:d6:94:b5:f2:d2:11:4e:
79:5a:00:f4:3b:5e:9e:4b:9b:3c:55:bf:51:81:f2:
3c:d8:34:43:f6:70:f5:c4:00:c3:ed:62:54:39:75:
77:41:56:c6:4d:70:8b:65:5a:f7:65:30:3d:82:27:
0e:ad:c6:fd:23:03:ca:d1:8b:13:3c:6d:99:a5:5d:
ae:15:5f:a5:24:4f:fa:39:d3:1e:03:b5:62:92:b7:
d2:b4:6c:bc:a3:ef:c4:8a:35:e8:bc:d8:1e:03:5e:
49:6a:be:e7:10:a4:1e:19:91:a5:b0:9c:dc:76:ed:
4d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F6:D0:13:7A:CC:82:89:01:09:CA:13:4C:2D:88:1D:A0:1F:0E:64
X509v3 Authority Key Identifier:
keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:86:19:83:0a:90:60:24:37:b6:b9:96:57:97:46:79:5f:63:
a6:03:85:b0:6c:cb:f8:b6:b8:d0:66:af:21:77:43:fb:cd:80:
e8:d1:ca:f5:3b:9e:43:81:3d:44:54:a1:e6:94:20:77:b2:a7:
6e:bd:2e:35:99:90:33:e8:30:14:19:fa:17:0f:e1:bb:dc:de:
49:1e:38:cf:b1:55:29:ed:79:8e:a6:3e:eb:4e:f2:85:58:9c:
0e:d0:12:89:8a:86:fe:44:1c:e3:59:02:a1:55:7f:26:bf:ce:
e3:37:d1:26:a0:c4:a4:28:ed:25:b7:8c:bc:4a:18:5e:ed:c0:
00:9b:99:0d:9d:f3:f2:f8:f4:af:d8:dd:65:13:4a:85:a7:2a:
89:5c:b4:39:fd:e0:b9:41:06:ae:76:2a:97:fa:db:c5:10:5f:
3b:92:9b:96:a2:fd:f7:d2:39:6c:a5:77:e4:82:00:c3:37:19:
2f:71:ea:2e:94:88:7d:e1:34:51:39:ac:c0:6b:43:d0:20:23:
61:b0:55:b4:f1:64:b6:66:c2:c7:de:87:1f:af:61:33:50:d0:
50:bd:1b:be:62:e0:8e:f3:a9:4d:08:ee:7e:87:34:81:e1:03:
9e:0e:92:7e:e7:45:4a:4f:85:4b:6e:ef:e0:de:84:d0:ae:26:
34:a2:ce:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEO67hh5wwxItQ3G+3pvpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YjU1ZmIzNGQyOWY5NjI1NDUxMzJhMDI1YjUyNjQ0ZmRm
ZmJmNmYwHhcNMjYwNTEzMDIwMTAzWhcNMjYwNTE0MDIwMTAzWjAzMTEwLwYDVQQD
EygzOGY2ZDAxMzdhY2M4Mjg5MDEwOWNhMTM0YzJkODgxZGEwMWYwZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd/Gga+9eowIwxGYkpprYSJdHXPE
p4uo9AHdvhyGXQfVYiGsy70cH5/rI3tqg+DeHcZ0MDZHUwMmhsCEZDjTvsUDbo0m
z2FeHutv/HYD0ZWi9purix7fqLJlwh/31ZS6dY09rJoHyG22HzA5zPAKZRJJt5oz
JuYiSzVLSs9Fhi6p4F24en92ug8XTPk/jNaUtfLSEU55WgD0O16eS5s8Vb9RgfI8
2DRD9nD1xADD7WJUOXV3QVbGTXCLZVr3ZTA9gicOrcb9IwPK0YsTPG2ZpV2uFV+l
JE/6OdMeA7VikrfStGy8o+/EijXovNgeA15Jar7nEKQeGZGlsJzcdu1NJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDj20BN6zIKJAQnKE0wtiB2gHw5kMB8GA1UdIwQY
MBaAFDa1X7NNKfliVFEyoCW1JkT9/79vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2Ut
ZjEwZjczYTllY2IzLzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2UtZjEwZjczYTllY2Iz
LzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjoYZgwqQ
YCQ3trmWV5dGeV9jpgOFsGzL+La40GavIXdD+82A6NHK9TueQ4E9RFSh5pQgd7Kn
br0uNZmQM+gwFBn6Fw/hu9zeSR44z7FVKe15jqY+607yhVicDtASiYqG/kQc41kC
oVV/Jr/O4zfRJqDEpCjtJbeMvEoYXu3AAJuZDZ3z8vj0r9jdZRNKhacqiVy0Of3g
uUEGrnYql/rbxRBfO5KblqL999I5bKV35IIAwzcZL3HqLpSIfeE0UTmswGtD0CAj
YbBVtPFktmbCx96HH69hM1DQUL0bvmLgjvOpTQjufoc0geEDng6SfudFSk+FS27v
4N6E0K4mNKLOmQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:44:23 2026 by rpki-client