Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
File: NMSVb4VnESWILFdM0uLSA6q97QU.mft (raw, json)
Hash identifier: 9e5CdDxxnJu2NT8q76Ru4IlgHO4PREEgfV8KKPpN6G8=
Subject key identifier: E2:19:34:DD:4B:E8:AD:DD:FC:C9:74:16:C4:FE:5D:73:11:DD:45:A4
Authority key identifier: 34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
Certificate issuer: /CN=34c4956f85671125882c574cd2e2d203aabded05
Certificate serial: 019D2929A733CA58C48DD1BD2358AAEAFF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:01:28 +0000
Manifest this update: Thu 26 Mar 2026 08:01:28 +0000
Manifest next update: Fri 27 Mar 2026 08:01:28 +0000
Files and hashes: 1: NMSVb4VnESWILFdM0uLSA6q97QU.crl (hash: z3xS/OhgzoacmRhUFADb9ghK124/pTAe9tFJmhRomKw=)
2: hzNlIQcoKwn0_37jGrfuWRGbt1g.roa (hash: yGgP4/jvKs4NKsaE3O2vHcLj+aOCBWAi35uwjfvRjck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:a7:33:ca:58:c4:8d:d1:bd:23:58:aa:ea:ff:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34c4956f85671125882c574cd2e2d203aabded05
Validity
Not Before: Mar 26 08:01:28 2026 GMT
Not After : Mar 27 08:01:28 2026 GMT
Subject: CN=e21934dd4be8adddfcc97416c4fe5d7311dd45a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:b7:fc:72:0b:57:47:be:a5:ed:94:1f:9f:
7d:1d:7c:75:94:15:0c:08:00:5a:03:2d:5c:96:f1:
3e:e7:e1:a4:e8:1e:2a:19:d4:62:2a:03:52:b0:73:
4c:42:e0:78:7f:3b:86:ee:11:8e:48:a3:31:56:dc:
a9:da:04:d3:95:1a:e8:ef:15:c5:5d:f3:b9:91:c8:
6e:ce:9e:9b:25:be:1c:bd:30:2d:0c:75:a7:e1:58:
0e:94:df:9b:f8:ee:2e:4b:59:53:e8:66:43:04:29:
48:ee:43:31:7a:03:58:1a:f3:e1:60:be:d9:15:5f:
85:6e:9a:b7:75:ad:18:d3:fc:42:84:25:e0:c0:04:
61:df:6b:85:9a:b4:08:a1:f5:76:fb:5a:86:38:62:
d2:de:09:92:0c:70:f5:40:0b:4e:9e:8b:b6:9e:0a:
d9:ef:24:fc:ab:03:1a:42:9c:79:a9:fb:89:8a:6a:
f3:88:14:5f:0b:d1:17:f0:b6:3b:cd:e6:43:04:63:
36:82:38:2b:55:dd:0f:27:6e:e7:af:8f:2f:f0:6c:
2b:62:f8:e8:af:67:08:6f:68:16:41:7a:05:4c:62:
99:ec:85:8f:ed:b0:b9:96:a3:29:22:e8:a0:e4:7c:
49:e4:a2:13:87:84:05:09:ee:3a:83:56:69:0e:28:
7f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:19:34:DD:4B:E8:AD:DD:FC:C9:74:16:C4:FE:5D:73:11:DD:45:A4
X509v3 Authority Key Identifier:
keyid:34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:64:bb:61:22:8e:13:c1:92:79:ea:1b:fa:53:0a:9a:4c:e4:
ae:8e:2b:eb:64:f9:d3:c3:4c:f0:2f:c1:0f:6a:c7:8c:ca:c8:
64:ae:f1:41:44:93:6a:9a:7d:70:12:9f:da:42:30:18:98:07:
a5:87:a2:fa:db:18:7f:49:85:d1:ee:eb:91:d9:c5:65:70:e7:
32:7e:06:30:0a:cc:b3:1e:ac:c1:77:ec:dc:0e:3d:dd:d0:ab:
c3:28:ef:3b:06:8b:d9:cf:5a:29:32:21:32:f2:78:17:05:f7:
e6:62:6c:cc:07:de:9f:d6:53:3e:bc:5f:e9:77:3a:08:a3:76:
1c:8c:c3:84:df:2e:60:e5:9a:f4:0e:9f:cd:86:31:ac:37:83:
82:df:c2:b1:95:26:84:b7:b7:8b:77:bf:70:cb:f1:f3:84:34:
8d:5c:e5:22:78:67:33:73:45:4b:af:c2:b9:dd:df:f5:3f:07:
fb:d9:07:65:c1:06:1b:67:0f:10:e8:6e:a6:e4:43:48:85:4b:
73:be:9d:05:97:89:87:f1:fe:03:f7:50:ce:d1:80:4e:5e:8b:
a6:42:87:40:59:ad:34:b6:c1:e0:7a:f7:25:d7:63:bb:1f:71:
b2:bb:82:85:1c:5a:8c:15:68:a1:2e:6a:b3:c2:e5:af:4e:a7:
ef:89:a5:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKaczyljEjdG9I1iq6v8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YzQ5NTZmODU2NzExMjU4ODJjNTc0Y2QyZTJkMjAzYWFi
ZGVkMDUwHhcNMjYwMzI2MDgwMTI4WhcNMjYwMzI3MDgwMTI4WjAzMTEwLwYDVQQD
EyhlMjE5MzRkZDRiZThhZGRkZmNjOTc0MTZjNGZlNWQ3MzExZGQ0NWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoa3/HILV0e+pe2UH599HXx1lBUM
CABaAy1clvE+5+Gk6B4qGdRiKgNSsHNMQuB4fzuG7hGOSKMxVtyp2gTTlRro7xXF
XfO5kchuzp6bJb4cvTAtDHWn4VgOlN+b+O4uS1lT6GZDBClI7kMxegNYGvPhYL7Z
FV+Fbpq3da0Y0/xChCXgwARh32uFmrQIofV2+1qGOGLS3gmSDHD1QAtOnou2ngrZ
7yT8qwMaQpx5qfuJimrziBRfC9EX8LY7zeZDBGM2gjgrVd0PJ27nr48v8GwrYvjo
r2cIb2gWQXoFTGKZ7IWP7bC5lqMpIuig5HxJ5KITh4QFCe46g1ZpDih/1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIZNN1L6K3d/Ml0FsT+XXMR3UWkMB8GA1UdIwQY
MBaAFDTElW+FZxEliCxXTNLi0gOqve0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mM2U2N2EtY2ZkNy00NzQ1LTgyYjct
MmQ5MGM3ZmQwZDYwLzEvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9mM2U2N2EtY2ZkNy00NzQ1LTgyYjctMmQ5MGM3ZmQwZDYw
LzEvTk1TVmI0Vm5FU1dJTEZkTTB1TFNBNnE5N1FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGS7YSKO
E8GSeeob+lMKmkzkro4r62T508NM8C/BD2rHjMrIZK7xQUSTapp9cBKf2kIwGJgH
pYei+tsYf0mF0e7rkdnFZXDnMn4GMArMsx6swXfs3A493dCrwyjvOwaL2c9aKTIh
MvJ4FwX35mJszAfen9ZTPrxf6Xc6CKN2HIzDhN8uYOWa9A6fzYYxrDeDgt/CsZUm
hLe3i3e/cMvx84Q0jVzlInhnM3NFS6/Cud3f9T8H+9kHZcEGG2cPEOhupuRDSIVL
c76dBZeJh/H+A/dQztGATl6LpkKHQFmtNLbB4Hr3Jddjux9xsruChRxajBVooS5q
s8Llr06n74ml9A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:33:15 2026 by rpki-client