Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
File: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft (raw, json)
Hash identifier: D8VQ60QU+JLhZUk4xiqzMlVEczE7+1LN3CKaKD7mO+Y=
Subject key identifier: BA:4C:23:D7:22:0C:81:96:FB:B7:EE:A5:9A:CD:CC:60:AD:A4:76:8D
Authority key identifier: 35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
Certificate issuer: /CN=359ddc737684ce041754a95b56b5a076d8851048
Certificate serial: 019D254C2430BAEA9292847532974BDE9418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
Manifest number: 185A
Signing time: Wed 25 Mar 2026 14:00:40 +0000
Manifest this update: Wed 25 Mar 2026 14:00:40 +0000
Manifest next update: Thu 26 Mar 2026 14:00:40 +0000
Files and hashes: 1: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl (hash: Lw0o69ZJu6Hynv2EYXIwKRAcWFAECUUSGENsxqRunEs=)
2: XlSDqc4huU4T5pBV_rhm_39vHOA.asa (hash: y6lBqHLFbjHu8Lg/fkhH89s17tcMPV1sgWAsdIlsdfg=)
3: jMbXfYwQDm8CjXt4xxwnq70JuMY.roa (hash: FXNV3Qmyjy1ONKJk6QzKO0EfhVvk4xc2mM2Ngz7Mp/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:24:30:ba:ea:92:92:84:75:32:97:4b:de:94:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359ddc737684ce041754a95b56b5a076d8851048
Validity
Not Before: Mar 25 14:00:40 2026 GMT
Not After : Mar 26 14:00:40 2026 GMT
Subject: CN=ba4c23d7220c8196fbb7eea59acdcc60ada4768d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fc:82:27:2e:90:0b:a8:75:ac:bb:4a:e7:d0:
07:c8:e4:68:47:77:0e:fe:f5:4a:1c:5c:97:cc:55:
30:ab:85:d0:c2:24:44:ac:89:83:eb:f9:7b:fd:05:
68:88:89:2c:c8:07:cb:39:4f:91:98:bb:bd:9f:ae:
22:95:27:f6:63:7d:df:58:13:33:ca:8b:c2:38:1b:
47:c5:6c:b9:46:f6:5a:c7:1a:d5:b5:9a:4f:15:e7:
56:6a:60:1d:b0:22:d7:f1:c4:b3:d2:b5:8a:5e:f6:
f5:e0:3d:54:07:e8:73:6e:21:5b:9c:5e:21:19:44:
01:f1:75:21:a2:e1:c0:08:fb:66:f0:56:b9:23:e4:
12:4a:46:a1:6e:87:59:3a:aa:2d:92:bd:69:9a:db:
89:d7:7b:66:3f:60:f4:a1:d9:d6:05:0f:ad:d4:bb:
3c:48:42:28:c7:ac:14:5c:69:91:44:f2:ca:2f:50:
be:49:ca:a3:37:2a:d1:d4:e4:e4:50:a1:8d:9f:e9:
30:c5:64:39:ab:18:cd:d7:5f:94:61:f3:f6:6f:33:
a7:d2:3c:5e:96:c4:a0:e4:d6:5e:5e:99:28:ef:5e:
05:0c:72:5b:ec:63:e3:92:b0:77:e1:52:c4:3c:cd:
7b:04:8a:43:cd:b7:b2:f6:bd:6a:04:6f:e0:fa:ff:
df:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4C:23:D7:22:0C:81:96:FB:B7:EE:A5:9A:CD:CC:60:AD:A4:76:8D
X509v3 Authority Key Identifier:
keyid:35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:36:6b:0d:13:ea:3d:22:14:58:cd:1a:a5:82:f1:b6:de:ef:
b7:c1:99:85:64:74:4c:23:cb:5a:1a:3e:0a:d9:22:14:7c:92:
e9:6e:d8:4e:41:ed:2a:41:b3:71:da:61:ab:08:da:49:27:1f:
fe:ac:d3:6d:75:77:2b:21:62:eb:dd:07:89:44:4c:65:e8:2c:
1f:bc:78:a7:00:e4:00:5e:81:9e:73:1b:66:a8:4f:4a:c2:e8:
e6:be:62:93:97:27:d2:a2:d6:f2:53:a3:56:20:e0:ce:fb:7e:
06:d9:6a:79:c1:b8:2b:d1:9d:7d:3b:62:de:3f:66:65:dc:70:
56:83:50:c1:3b:12:17:e0:d6:6a:7f:3e:56:cc:fb:f3:33:52:
39:f8:2d:e3:46:21:fa:c4:d4:c6:18:7c:cf:bc:33:95:35:f6:
6a:ca:b8:de:ff:74:0e:91:39:c6:38:f0:de:80:d4:40:8f:83:
49:b2:f4:ed:a4:3a:cf:19:05:be:96:3f:35:ec:c2:02:5b:2a:
f0:bc:36:64:f4:1e:8c:ea:44:f5:e0:4e:e4:10:d9:3d:6a:f0:
53:1e:cb:c4:d1:d3:3a:3c:c2:0a:2a:66:c4:2c:d3:72:f0:e6:
b6:ab:ef:cb:70:da:f0:68:d0:f8:b4:48:17:a6:0d:af:2f:48:
70:2b:e0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:24:42 2026 by rpki-client