Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
File: Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft (raw, json)
Hash identifier: l5zJhRmfWwszrHNgAFmt3ASVN5qqpEIq2N/5b22EjcM=
Subject key identifier: CC:53:13:36:2B:B8:E5:2F:FC:0E:5F:9E:B4:CE:4C:25:EA:59:47:4A
Authority key identifier: 36:CF:B3:97:5B:BD:5E:F8:7B:29:C3:DC:4A:4B:98:EA:5C:25:C4:44
Certificate issuer: /CN=36cfb3975bbd5ef87b29c3dc4a4b98ea5c25c444
Certificate serial: 019D2A3B417211DD68E5C35CA6AB37AD6653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
Manifest number: 0F70
Signing time: Thu 26 Mar 2026 13:00:19 +0000
Manifest this update: Thu 26 Mar 2026 13:00:19 +0000
Manifest next update: Fri 27 Mar 2026 13:00:19 +0000
Files and hashes: 1: Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl (hash: 2x+uhfT58lm+QHNFdrUJzFSGwG8BKqqruBRKAIPl62w=)
2: XzoObcvIrvpe4E-joQhgqkoGqLA.roa (hash: S6Kp+ZpIF7hLDvCfmvBbRJUrOU1sswfc6F+dvz5fqJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:41:72:11:dd:68:e5:c3:5c:a6:ab:37:ad:66:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfb3975bbd5ef87b29c3dc4a4b98ea5c25c444
Validity
Not Before: Mar 26 13:00:19 2026 GMT
Not After : Mar 27 13:00:19 2026 GMT
Subject: CN=cc5313362bb8e52ffc0e5f9eb4ce4c25ea59474a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:c1:8a:9f:ec:db:0a:f6:f5:f9:4f:c6:a8:
85:84:b6:7f:ce:ac:3a:ec:1d:53:16:3b:92:0e:a1:
09:ac:db:09:6a:ec:6a:e6:7b:3a:c3:dc:79:ba:0c:
0b:52:ec:8f:f6:b1:00:92:7a:5a:0c:56:9c:ad:ca:
26:7d:a1:34:0e:c5:52:53:fd:7b:ec:a5:58:22:8f:
50:da:da:13:bf:81:5c:6e:84:4f:74:81:0c:36:69:
5b:c5:3e:8a:27:14:a6:d4:13:43:85:07:b4:ef:b8:
3e:e1:02:49:a2:a5:57:91:fc:19:b8:1b:56:80:39:
da:b1:2d:a2:43:9c:21:13:c6:e1:8f:bf:10:a0:cb:
0a:2c:a9:dc:88:51:79:a0:1d:e3:37:ac:53:12:72:
8b:3e:44:70:1e:53:90:59:21:7b:c3:32:36:b5:6d:
38:a1:60:d4:9f:05:50:5e:c7:90:be:ee:26:0e:65:
a2:54:a0:f0:de:b3:8d:66:af:70:b3:38:37:bf:4f:
f3:c4:4a:72:0e:4f:98:17:9c:4a:79:2b:84:72:77:
b0:92:bb:7f:bc:5d:49:c3:0e:2c:13:cc:10:b3:5c:
b3:1b:e0:22:d3:60:e2:6d:3d:1c:5c:9c:80:8e:8c:
d6:37:de:c7:50:88:9f:f4:ce:ca:b2:24:3a:20:5f:
09:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:53:13:36:2B:B8:E5:2F:FC:0E:5F:9E:B4:CE:4C:25:EA:59:47:4A
X509v3 Authority Key Identifier:
keyid:36:CF:B3:97:5B:BD:5E:F8:7B:29:C3:DC:4A:4B:98:EA:5C:25:C4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1d:bc:47:46:cb:b8:03:cd:f6:f7:c3:73:f9:ac:03:fa:fb:
d0:3d:73:d4:8a:52:0c:6a:3b:81:9e:c4:3f:23:34:34:eb:3b:
b9:77:66:37:0d:3e:aa:4d:78:99:be:e1:41:f8:8a:58:a9:16:
81:63:60:d1:59:3c:98:4c:47:12:35:c1:b5:60:74:31:43:ed:
bf:78:bc:15:af:7d:1c:cf:30:ef:f7:91:97:fd:a8:16:64:19:
ba:cb:87:5e:05:6b:89:bd:23:56:ba:37:5c:46:7a:5e:f8:c7:
fb:85:34:c0:ab:c8:94:cc:d5:15:4c:74:25:1d:8b:67:e7:f2:
81:5f:13:e8:d1:4f:f6:3d:ff:d4:7c:b6:6c:0c:59:20:a2:4f:
25:fd:e8:6e:16:12:c9:22:2c:93:05:e7:b5:f3:35:12:23:e6:
3b:e8:dd:bd:7a:3e:8b:2f:07:cc:a4:be:2b:25:e2:94:df:66:
84:d6:2b:e9:67:d8:16:13:10:27:5d:d7:05:4f:f3:04:95:64:
09:55:30:36:59:49:ea:cf:56:77:66:3d:33:dd:6b:23:0a:96:
58:0a:65:72:85:47:4d:69:92:01:39:60:f6:d6:a9:6b:a3:6e:
16:7f:20:d1:21:ea:3a:27:14:47:73:ca:ad:21:2f:c8:fb:e2:
74:a9:dc:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO0FyEd1o5cNcpqs3rWZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Y2ZiMzk3NWJiZDVlZjg3YjI5YzNkYzRhNGI5OGVhNWMy
NWM0NDQwHhcNMjYwMzI2MTMwMDE5WhcNMjYwMzI3MTMwMDE5WjAzMTEwLwYDVQQD
EyhjYzUzMTMzNjJiYjhlNTJmZmMwZTVmOWViNGNlNGMyNWVhNTk0NzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuTBip/s2wr29flPxqiFhLZ/zqw6
7B1TFjuSDqEJrNsJauxq5ns6w9x5ugwLUuyP9rEAknpaDFacrcomfaE0DsVSU/17
7KVYIo9Q2toTv4FcboRPdIEMNmlbxT6KJxSm1BNDhQe077g+4QJJoqVXkfwZuBtW
gDnasS2iQ5whE8bhj78QoMsKLKnciFF5oB3jN6xTEnKLPkRwHlOQWSF7wzI2tW04
oWDUnwVQXseQvu4mDmWiVKDw3rONZq9wszg3v0/zxEpyDk+YF5xKeSuEcnewkrt/
vF1Jww4sE8wQs1yzG+Ai02DibT0cXJyAjozWN97HUIif9M7KsiQ6IF8JqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxTEzYruOUv/A5fnrTOTCXqWUdKMB8GA1UdIwQY
MBaAFDbPs5dbvV74eynD3EpLmOpcJcREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnMtemwxdTlYdmg3S2NQY1NrdVk2bHdseEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yYzEwNjEtZGIyNS00NGJkLTgwNGMt
YTE0ZGNlZTU3ZTc0LzEvTnMtemwxdTlYdmg3S2NQY1NrdVk2bHdseEVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yYzEwNjEtZGIyNS00NGJkLTgwNGMtYTE0ZGNlZTU3ZTc0
LzEvTnMtemwxdTlYdmg3S2NQY1NrdVk2bHdseEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASx28R0bL
uAPN9vfDc/msA/r70D1z1IpSDGo7gZ7EPyM0NOs7uXdmNw0+qk14mb7hQfiKWKkW
gWNg0Vk8mExHEjXBtWB0MUPtv3i8Fa99HM8w7/eRl/2oFmQZusuHXgVrib0jVro3
XEZ6XvjH+4U0wKvIlMzVFUx0JR2LZ+fygV8T6NFP9j3/1Hy2bAxZIKJPJf3obhYS
ySIskwXntfM1EiPmO+jdvXo+iy8HzKS+KyXilN9mhNYr6WfYFhMQJ13XBU/zBJVk
CVUwNllJ6s9Wd2Y9M91rIwqWWAplcoVHTWmSATlg9tapa6NuFn8g0SHqOicUR3PK
rSEvyPvidKncaQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:12:18 2026 by rpki-client