Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
File: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft (raw, json)
Hash identifier: f3tmhZVNixdarvxDN3DGslvZtUINjWqIJUpTSRgWwsI=
Subject key identifier: F1:41:29:C6:CD:54:0B:C0:27:6C:FF:DA:B0:0B:FD:C3:93:A9:45:B5
Authority key identifier: 36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
Certificate issuer: /CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Certificate serial: 019D273B4310A5CE40A00EEAF43E3B274376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
Manifest number: 0767
Signing time: Wed 25 Mar 2026 23:01:28 +0000
Manifest this update: Wed 25 Mar 2026 23:01:28 +0000
Manifest next update: Thu 26 Mar 2026 23:01:28 +0000
Files and hashes: 1: 8mygXMnQNTeGF8cdXDDRJQ7VnrU.roa (hash: nZE7NA5ce2dUYz+AJKjNwGtnkc4g6xM8VyuB9faP4Ko=)
2: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl (hash: 4afuwmoJCNsjWWTBdjxS5N0wx197AwEDI8dMqfi1HrY=)
3: e2xgXuwJHd2kCUvRcc0JZ_ZWpIU.roa (hash: ghMimNEZUb3ZFVFJUrfR1g8VeQyoHCCHBKZY/69OpTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:43:10:a5:ce:40:a0:0e:ea:f4:3e:3b:27:43:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Validity
Not Before: Mar 25 23:01:28 2026 GMT
Not After : Mar 26 23:01:28 2026 GMT
Subject: CN=f14129c6cd540bc0276cffdab00bfdc393a945b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:94:1d:a0:05:81:6c:5e:17:bc:7a:da:93:a0:
af:d4:07:df:7c:33:87:57:0a:2b:0c:7d:fc:18:05:
c2:ed:55:a0:6b:df:4d:a5:af:01:5b:7b:07:fe:e1:
77:9a:a9:c9:85:8d:3f:1f:70:e1:51:31:99:2c:aa:
23:e6:ba:1c:92:f2:b8:4c:d7:a1:54:aa:2e:c8:6d:
8d:a4:d7:2a:de:27:07:bc:b4:c3:8b:e9:31:98:93:
2b:7b:89:69:8d:1f:f3:64:e2:68:c0:96:55:58:4a:
43:e2:db:e5:f9:92:4f:15:3f:29:4c:6e:51:8e:50:
1a:09:86:ea:37:ac:0d:03:e2:f4:c3:08:b5:50:01:
d7:00:53:39:1c:0d:27:72:28:51:ec:05:45:b9:bf:
0f:6d:3c:b6:50:68:07:06:4a:9d:01:b3:b2:3f:06:
22:14:2d:93:74:8b:61:32:67:a4:0c:ae:de:18:8a:
74:ee:b5:a4:22:0b:62:28:20:ab:9a:85:e3:33:7f:
8b:76:7a:fd:8c:c2:4e:4a:3b:5f:ab:6f:40:06:ef:
ec:25:e0:94:37:52:19:c0:0c:54:16:b3:8d:1e:04:
02:26:d9:f1:59:f4:a1:a4:a4:c9:b6:d5:d6:c9:56:
ed:33:f4:80:40:87:a9:01:16:74:62:83:ef:5f:f5:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:41:29:C6:CD:54:0B:C0:27:6C:FF:DA:B0:0B:FD:C3:93:A9:45:B5
X509v3 Authority Key Identifier:
keyid:36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:56:1e:5f:b8:83:30:00:17:0e:1b:17:27:91:b9:db:26:59:
0e:27:58:75:7c:3f:7d:f3:58:0b:aa:82:0b:77:63:be:b8:c7:
35:ed:29:c1:8e:93:c3:71:01:dc:ec:07:60:f2:64:0b:e4:c0:
a9:ce:46:20:32:be:dd:c0:54:46:e1:a6:c1:05:fc:3a:75:96:
89:d1:46:04:bb:66:91:95:b2:ec:df:0a:d6:a4:9b:77:2d:5a:
ee:8f:12:5a:72:24:64:65:06:f3:48:bd:b3:48:a5:5f:19:9a:
e9:ad:1d:9a:7d:b1:60:e2:1f:8f:03:96:08:41:fd:b6:0b:c2:
5c:df:50:9a:8b:7d:55:12:d1:39:1e:3b:0c:8f:9c:d7:5c:da:
af:9e:3a:27:fc:77:07:8c:10:e5:38:0f:60:19:bc:fa:f8:1f:
dc:6a:41:bb:a7:e1:91:1d:62:ef:7f:37:aa:64:48:a8:f3:88:
be:a3:18:30:ed:ba:5f:45:ce:81:ab:06:39:fa:27:1d:db:1d:
a5:ee:4b:87:f2:7d:1c:1a:74:54:8c:cf:1b:ae:7c:bc:e2:2d:
8e:49:99:8d:ba:f7:a1:c1:55:10:74:f4:85:e6:62:99:6c:3c:
b3:34:15:52:33:5b:71:af:97:8f:ff:d1:86:03:54:b3:71:3c:
a5:f0:0c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:55 2026 by rpki-client