Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
File: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft (raw, json)
Hash identifier: GbWEDQz9+rYy8Iz83LPJ/DLPOYEoHRBSaT5G8t09Blc=
Subject key identifier: 73:AD:19:E4:8F:0A:AA:9A:91:E1:1F:90:9A:DE:5D:48:17:13:E5:96
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 019D27A890206CF4532925F6B8D12211B75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
Manifest number: 18C3
Signing time: Thu 26 Mar 2026 01:00:51 +0000
Manifest this update: Thu 26 Mar 2026 01:00:51 +0000
Manifest next update: Fri 27 Mar 2026 01:00:51 +0000
Files and hashes: 1: 41lbXeJXKl4CiDGWnnMHpB24gPU.roa (hash: kG6Cncs4+D3tofS5cOrSl2kOR5wHI2wRUBR4uUbXqUs=)
2: 9eWyQcwhhtcWSOgLAyvjVSN69_0.roa (hash: WQam9mNIAyIv9GJMj3n6lEuVNq1iCgTWLcCsWIhP4W4=)
3: B5xzluZY3MO07Y-DnPhReukzoAM.roa (hash: yLbG1QhNKSifZB6S6ehHViwPbt5RRExGQbO6VZAzEXk=)
4: EL9_D6jbpPm0f93FbIMJFjXA39Q.roa (hash: u2EHA4Ca3HUJR0DK3eXdJPDlTwL0hlSO69OLTZssz5Y=)
5: Mx6U3rxhWqix0ypXk8FP2VQkzu4.roa (hash: SXovFZCanvTkxojFFLSIhxdKBc7pAkz+ovEDvaWHEfE=)
6: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl (hash: 8Mqgt45uIQ9eJx3uwbuscZpz7xoxZFecMMggXrkwwcc=)
7: cxpnqAln6hhdNSSyG6qFvgqIbyw.roa (hash: iyYEFth/WwaalutGJ5J/GHoRvV6KCxdd9XrPvperx+Y=)
8: hPf6EiWabnoMJ6tCE3TYbnHR9QQ.roa (hash: Wa5Ke4FZahcAqtbVLwkcn3uM1gDF8FKkh2X50wELyTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:90:20:6c:f4:53:29:25:f6:b8:d1:22:11:b7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Mar 26 01:00:51 2026 GMT
Not After : Mar 27 01:00:51 2026 GMT
Subject: CN=73ad19e48f0aaa9a91e11f909ade5d481713e596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:79:d1:cb:3c:60:f0:9d:d4:ac:9a:4f:f9:41:
f5:85:30:79:f7:fd:84:db:9b:cf:93:da:77:1e:67:
d1:06:4e:e9:6d:4c:59:e7:ca:d7:8a:89:ae:ce:2a:
9e:a9:53:ce:bf:01:8e:a9:b8:ac:08:04:dc:dd:1a:
37:0e:e6:1f:91:d5:da:5d:d8:54:d0:72:37:46:c3:
11:bc:59:da:22:2c:59:15:75:17:34:2d:ea:6f:b5:
f6:f3:f5:93:9c:08:b0:6c:06:27:6c:54:17:da:e4:
5c:26:1f:22:d7:1b:ec:32:a1:fb:bc:17:10:49:d5:
b2:68:55:67:31:d6:a1:8b:55:12:70:ec:ad:ae:4b:
70:3e:d8:96:8e:15:5e:ce:96:6f:95:6a:4b:50:54:
f4:f3:cf:f7:a0:79:2a:ea:ea:b4:2c:30:fa:83:aa:
97:fb:23:2f:39:2e:52:f3:d0:a0:d8:2c:d6:40:0d:
94:4e:dc:67:42:59:90:bd:00:c4:e6:f4:44:4d:16:
54:fc:30:71:f8:29:2e:13:02:af:32:af:34:3c:6c:
b8:a8:1c:3a:32:5e:d2:aa:58:a9:00:aa:61:6c:20:
cb:20:2f:f4:2c:12:df:e3:e8:7c:ce:18:6c:b5:81:
80:66:19:73:a4:8e:c4:15:69:b3:db:1b:b5:f2:1a:
5a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AD:19:E4:8F:0A:AA:9A:91:E1:1F:90:9A:DE:5D:48:17:13:E5:96
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3c:f1:2c:d0:35:68:f8:bb:07:5f:7d:d4:20:f9:68:8a:7a:
f1:52:26:24:8d:8e:d7:a2:c9:6d:6a:2e:35:e6:a5:58:c0:ae:
cc:47:d2:b7:72:1a:ac:07:e4:c4:f4:8e:5f:ef:ce:4a:36:9a:
c5:98:71:1b:8e:44:b3:44:69:64:41:4e:7e:9a:81:27:94:e6:
d6:c7:1d:4c:ac:5c:79:6e:b5:ce:c3:3d:c6:f9:01:29:5e:a7:
db:8d:e1:4a:97:72:1b:fc:af:b6:f7:ac:01:9e:a9:12:f7:a4:
0a:b4:0e:7f:4c:90:60:b7:42:41:68:02:ef:cb:dc:e8:0c:64:
6e:e2:16:5a:f9:0b:c3:0a:15:50:3e:55:0f:22:0d:34:90:ee:
83:3a:52:81:97:2c:f9:f8:10:ef:49:bc:8b:5c:71:e6:40:99:
f1:7a:db:c4:b2:d1:fc:ed:40:21:c9:ca:d1:14:b6:e4:d3:47:
29:78:95:40:04:51:1b:5a:52:45:aa:b8:fc:ff:f8:4a:3e:22:
7a:ee:5d:80:90:ce:81:c7:50:05:85:8f:3f:f5:4d:d2:47:37:
51:f9:89:fa:e8:54:24:b3:8d:50:c5:ae:60:3b:46:0c:23:cf:
79:1a:e0:45:e1:06:43:6d:fd:f2:2b:2e:49:4c:e4:a6:6c:07:
6f:93:1b:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqJAgbPRTKSX2uNEiEbddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl
NTUxNDIwHhcNMjYwMzI2MDEwMDUxWhcNMjYwMzI3MDEwMDUxWjAzMTEwLwYDVQQD
Eyg3M2FkMTllNDhmMGFhYTlhOTFlMTFmOTA5YWRlNWQ0ODE3MTNlNTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHnRyzxg8J3UrJpP+UH1hTB59/2E
25vPk9p3HmfRBk7pbUxZ58rXiomuziqeqVPOvwGOqbisCATc3Ro3DuYfkdXaXdhU
0HI3RsMRvFnaIixZFXUXNC3qb7X28/WTnAiwbAYnbFQX2uRcJh8i1xvsMqH7vBcQ
SdWyaFVnMdahi1UScOytrktwPtiWjhVezpZvlWpLUFT088/3oHkq6uq0LDD6g6qX
+yMvOS5S89Cg2CzWQA2UTtxnQlmQvQDE5vRETRZU/DBx+CkuEwKvMq80PGy4qBw6
Ml7SqlipAKphbCDLIC/0LBLf4+h8zhhstYGAZhlzpI7EFWmz2xu18hpaWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOtGeSPCqqakeEfkJreXUgXE+WWMB8GA1UdIwQY
MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct
YzgyM2NjOGYzODM3LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3
LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjzxLNA1
aPi7B1991CD5aIp68VImJI2O16LJbWouNealWMCuzEfSt3IarAfkxPSOX+/OSjaa
xZhxG45Es0RpZEFOfpqBJ5Tm1scdTKxceW61zsM9xvkBKV6n243hSpdyG/yvtves
AZ6pEvekCrQOf0yQYLdCQWgC78vc6AxkbuIWWvkLwwoVUD5VDyINNJDugzpSgZcs
+fgQ70m8i1xx5kCZ8XrbxLLR/O1AIcnK0RS25NNHKXiVQARRG1pSRaq4/P/4Sj4i
eu5dgJDOgcdQBYWPP/VN0kc3UfmJ+uhUJLONUMWuYDtGDCPPeRrgReEGQ2398isu
SUzkpmwHb5MbCw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:29:48 2026 by rpki-client