Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
File: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft (raw, json)
Hash identifier: 0IRS2GOJEnRcI28RzLSgY8JkYA2ujGFePurgoO9A0io=
Subject key identifier: BD:0D:A1:22:30:00:AE:30:F6:8A:48:91:F6:F1:96:81:85:5A:E0:0F
Authority key identifier: 35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
Certificate issuer: /CN=359ddc737684ce041754a95b56b5a076d8851048
Certificate serial: 019E1E6C56CF22D309FEFB712606209F6518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
Manifest number: 18DB
Signing time: Tue 12 May 2026 23:01:16 +0000
Manifest this update: Tue 12 May 2026 23:01:16 +0000
Manifest next update: Wed 13 May 2026 23:01:16 +0000
Files and hashes: 1: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl (hash: 5z04pclR8pQlDpExDWMOuO+6RE0aXjgnhJGmtUWx0Y0=)
2: XlSDqc4huU4T5pBV_rhm_39vHOA.asa (hash: y6lBqHLFbjHu8Lg/fkhH89s17tcMPV1sgWAsdIlsdfg=)
3: jMbXfYwQDm8CjXt4xxwnq70JuMY.roa (hash: FXNV3Qmyjy1ONKJk6QzKO0EfhVvk4xc2mM2Ngz7Mp/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:56:cf:22:d3:09:fe:fb:71:26:06:20:9f:65:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359ddc737684ce041754a95b56b5a076d8851048
Validity
Not Before: May 12 23:01:16 2026 GMT
Not After : May 13 23:01:16 2026 GMT
Subject: CN=bd0da1223000ae30f68a4891f6f19681855ae00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e0:72:50:5b:b6:65:88:03:a5:c3:55:30:c0:
e5:fb:67:43:10:6c:81:ca:0f:e6:f6:db:12:99:1b:
85:ad:76:26:47:b3:5d:3e:05:9d:df:c4:6a:6a:13:
d7:62:7e:99:3a:b7:e0:d6:4a:30:b7:a5:b3:78:c5:
26:8c:e4:2d:36:5a:2f:a8:f6:c0:c4:e4:86:32:c4:
d4:18:38:e0:a3:25:ba:e4:74:61:cf:5c:08:2a:c8:
a1:a5:14:9f:a4:14:a9:5d:4e:f1:be:87:68:96:c3:
d3:3b:ab:40:3b:69:9e:e4:7f:d2:5a:56:0e:fe:a8:
c1:21:28:e4:e0:f2:44:c7:bc:6e:3f:66:d9:7b:32:
ab:ef:a5:45:b9:0b:3a:5e:f5:e4:e6:c0:a9:d7:1b:
2d:30:34:52:00:a9:27:a0:2b:d6:2c:b8:b2:df:0b:
24:ce:79:84:8d:0d:16:80:e3:3c:48:0b:c6:2f:a2:
91:d8:68:65:94:7f:48:61:20:d3:34:68:92:7a:0e:
41:c2:db:da:3a:cf:d7:cf:d2:db:2e:aa:d6:20:ef:
18:1a:30:6f:8b:3c:c4:4b:55:a2:2d:f2:70:80:14:
83:be:4f:b1:8c:4b:f2:f9:41:ec:9f:01:92:2f:31:
7c:ff:81:0b:3e:da:91:f0:f8:56:d8:d9:69:78:23:
40:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0D:A1:22:30:00:AE:30:F6:8A:48:91:F6:F1:96:81:85:5A:E0:0F
X509v3 Authority Key Identifier:
keyid:35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cc:30:40:f1:c2:d0:4b:40:bc:49:74:11:aa:be:b4:65:cf:
61:1f:da:ab:c0:8c:ff:e0:4b:83:ce:19:1b:41:5a:b1:28:20:
f3:05:f0:0d:cf:34:7f:40:84:c3:c9:e2:82:de:83:f6:c5:6d:
32:5d:4e:51:80:3e:8b:d6:77:3f:5c:fe:8d:8d:c3:93:a6:b8:
3d:1d:e6:41:fa:94:2f:0d:48:4a:65:8d:57:fd:f0:d3:65:60:
00:76:bd:39:0b:4b:f4:ea:42:08:b7:54:f2:7a:66:d1:77:d7:
c8:fe:2e:e7:75:43:c3:9f:1b:71:0c:d2:4d:22:b9:f5:a2:6a:
05:0c:98:cc:0c:3f:44:c9:57:b8:0b:e6:7a:9e:a2:64:e5:9f:
ba:58:e8:bd:af:68:17:84:e4:90:9e:de:28:de:04:03:a6:77:
8f:e3:64:ce:ba:c4:0e:a5:46:11:03:5b:df:18:60:b8:9f:cc:
ca:2c:f8:ac:81:90:1d:8c:7c:90:fd:32:4e:88:19:2b:9e:90:
b9:cd:55:0c:59:e6:e0:fa:5d:4a:b4:ea:ec:3f:28:a6:8b:c6:
97:3d:d2:93:9b:75:d5:53:21:d6:28:67:5b:da:f0:fa:ce:be:
12:73:a4:11:e0:81:7e:f3:e9:97:c6:ae:dd:9d:de:29:e8:8e:
a5:82:e9:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebFbPItMJ/vtxJgYgn2UYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWRkYzczNzY4NGNlMDQxNzU0YTk1YjU2YjVhMDc2ZDg4
NTEwNDgwHhcNMjYwNTEyMjMwMTE2WhcNMjYwNTEzMjMwMTE2WjAzMTEwLwYDVQQD
EyhiZDBkYTEyMjMwMDBhZTMwZjY4YTQ4OTFmNmYxOTY4MTg1NWFlMDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+ByUFu2ZYgDpcNVMMDl+2dDEGyB
yg/m9tsSmRuFrXYmR7NdPgWd38RqahPXYn6ZOrfg1kowt6WzeMUmjOQtNlovqPbA
xOSGMsTUGDjgoyW65HRhz1wIKsihpRSfpBSpXU7xvodolsPTO6tAO2me5H/SWlYO
/qjBISjk4PJEx7xuP2bZezKr76VFuQs6XvXk5sCp1xstMDRSAKknoCvWLLiy3wsk
znmEjQ0WgOM8SAvGL6KR2GhllH9IYSDTNGiSeg5BwtvaOs/Xz9LbLqrWIO8YGjBv
izzES1WiLfJwgBSDvk+xjEvy+UHsnwGSLzF8/4ELPtqR8PhW2NlpeCNAPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0NoSIwAK4w9opIkfbxloGFWuAPMB8GA1UdIwQY
MBaAFDWd3HN2hM4EF1SpW1a1oHbYhRBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlozY2MzYUV6Z1FYVktsYlZyV2dkdGlGRUVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iMmUzZDMtMzJlZC00YmIyLWFjZjYt
MjA0MTQ4YzVhMDE3LzEvTlozY2MzYUV6Z1FYVktsYlZyV2dkdGlGRUVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iMmUzZDMtMzJlZC00YmIyLWFjZjYtMjA0MTQ4YzVhMDE3
LzEvTlozY2MzYUV6Z1FYVktsYlZyV2dkdGlGRUVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8wwQPHC
0EtAvEl0Eaq+tGXPYR/aq8CM/+BLg84ZG0FasSgg8wXwDc80f0CEw8nigt6D9sVt
Ml1OUYA+i9Z3P1z+jY3Dk6a4PR3mQfqULw1ISmWNV/3w02VgAHa9OQtL9OpCCLdU
8npm0XfXyP4u53VDw58bcQzSTSK59aJqBQyYzAw/RMlXuAvmep6iZOWfuljova9o
F4TkkJ7eKN4EA6Z3j+NkzrrEDqVGEQNb3xhguJ/Myiz4rIGQHYx8kP0yTogZK56Q
uc1VDFnm4PpdSrTq7D8opovGlz3Sk5t11VMh1ihnW9rw+s6+EnOkEeCBfvPpl8au
3Z3eKeiOpYLp6w==
-----END CERTIFICATE-----
Generated at Wed May 13 05:22:02 2026 by rpki-client