Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
File: NbA-yF0IYHprHd8f553GUcz-Pzc.mft (raw, json)
Hash identifier: bz5Upc6LA4LRUC9xbIaFmZflac2YvMUIn3JSjDzptfQ=
Subject key identifier: 67:C8:92:EB:A7:BB:DB:F2:B8:B6:8C:94:8A:D9:76:D8:3D:83:96:D9
Authority key identifier: 35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
Certificate issuer: /CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Certificate serial: 019D27727AE6A8F1A3176C9478AEB5E611BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:01:47 +0000
Manifest this update: Thu 26 Mar 2026 00:01:47 +0000
Manifest next update: Fri 27 Mar 2026 00:01:47 +0000
Files and hashes: 1: 0e20Vnm0C5gqevgZraEdYYQvC2k.roa (hash: 6onisxkqwNjHYYcPnOhg1nsEQp++MNFfPSzmz8SXV28=)
2: NbA-yF0IYHprHd8f553GUcz-Pzc.crl (hash: wt4C6JJgWlhqHm1niaGV7bunOu8mpkcTxNVlJ0v8ZKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:7a:e6:a8:f1:a3:17:6c:94:78:ae:b5:e6:11:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Validity
Not Before: Mar 26 00:01:47 2026 GMT
Not After : Mar 27 00:01:47 2026 GMT
Subject: CN=67c892eba7bbdbf2b8b68c948ad976d83d8396d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:19:9c:44:8d:2f:68:db:d0:8e:e8:0a:eb:c1:
2e:b1:91:34:9f:64:c6:d6:83:66:b3:f9:26:a0:ce:
75:52:02:d6:e3:c1:b3:43:5c:6f:cb:df:1a:c2:78:
08:ca:e3:ed:12:81:84:52:a4:a7:7b:1a:b2:39:0f:
61:2c:19:14:b4:67:d3:03:36:f6:3f:6c:43:27:d8:
7a:4e:d2:69:61:9e:2b:ef:00:91:62:d9:2e:b1:7b:
aa:c3:4e:de:1a:bf:01:d5:07:05:8c:0a:93:7e:87:
48:c2:b1:08:2b:54:6c:67:0f:16:c6:74:51:3b:e3:
66:cd:19:40:9a:5f:be:72:59:63:ea:12:e6:98:c3:
be:01:f0:43:7b:69:ba:a8:33:df:03:b6:52:03:f3:
8c:5a:2c:a9:bf:55:11:7f:23:1f:58:66:16:02:68:
3d:59:ba:6b:1c:42:a6:b9:a8:0e:41:2a:7d:cf:ba:
24:14:83:24:78:68:6b:ef:11:81:60:1c:1b:f1:e7:
7f:3d:3e:64:1e:44:c2:48:6f:49:cc:f9:af:3b:8a:
a4:9c:c5:3a:2f:ee:14:dc:05:41:16:e7:e9:54:dd:
3e:71:cf:1a:6e:a6:b5:14:fe:d9:76:6c:8a:f9:05:
6a:c0:c3:0c:14:80:85:b8:85:28:f8:ec:b9:1c:0d:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C8:92:EB:A7:BB:DB:F2:B8:B6:8C:94:8A:D9:76:D8:3D:83:96:D9
X509v3 Authority Key Identifier:
keyid:35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7c:fe:e0:9b:0d:74:90:0f:a5:14:5a:81:ba:b7:95:cc:a4:
84:75:70:3b:28:d1:40:d6:99:28:f7:72:55:b6:e7:ba:2e:f9:
be:8d:cd:93:78:49:96:0a:93:28:cb:ab:5a:f0:b9:28:79:69:
85:74:68:20:bb:9e:d6:aa:5e:41:02:0a:08:33:da:c0:29:ad:
e0:46:d9:b4:d0:ac:d9:77:fc:26:21:75:de:ae:97:46:51:af:
5b:ad:4e:eb:86:5a:76:81:c6:ac:9c:c3:64:6d:84:70:47:c3:
b4:a6:6a:6d:78:8c:cb:9e:83:6a:3a:f5:92:94:9d:e1:5e:6b:
27:fd:37:5c:f6:21:ab:b2:76:bd:65:66:a5:d4:4e:63:e2:e9:
06:3a:0d:40:55:4b:a6:c3:a1:5b:66:b9:e2:6f:3c:11:04:79:
f1:1d:93:31:97:0a:f0:c6:0d:7d:53:56:ae:39:f4:78:75:70:
cc:db:93:b1:15:02:82:b5:88:e9:4a:52:71:03:f8:57:ff:b0:
af:7a:f8:57:07:d7:e3:cd:14:b3:61:d7:0c:f8:80:58:f6:20:
4a:cb:1a:85:d5:c3:bb:61:ee:14:cb:cc:af:ca:1e:31:f7:89:
5a:65:82:ed:20:8b:ad:e9:15:2e:ee:9b:16:b9:99:69:6b:b0:
b2:ee:15:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncnrmqPGjF2yUeK615hG7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1YjAzZWM4NWQwODYwN2E2YjFkZGYxZmU3OWRjNjUxY2Nm
ZTNmMzcwHhcNMjYwMzI2MDAwMTQ3WhcNMjYwMzI3MDAwMTQ3WjAzMTEwLwYDVQQD
Eyg2N2M4OTJlYmE3YmJkYmYyYjhiNjhjOTQ4YWQ5NzZkODNkODM5NmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RmcRI0vaNvQjugK68EusZE0n2TG
1oNms/kmoM51UgLW48GzQ1xvy98awngIyuPtEoGEUqSnexqyOQ9hLBkUtGfTAzb2
P2xDJ9h6TtJpYZ4r7wCRYtkusXuqw07eGr8B1QcFjAqTfodIwrEIK1RsZw8WxnRR
O+NmzRlAml++cllj6hLmmMO+AfBDe2m6qDPfA7ZSA/OMWiypv1URfyMfWGYWAmg9
WbprHEKmuagOQSp9z7okFIMkeGhr7xGBYBwb8ed/PT5kHkTCSG9JzPmvO4qknMU6
L+4U3AVBFufpVN0+cc8abqa1FP7ZdmyK+QVqwMMMFICFuIUo+Oy5HA2o8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfIkuunu9vyuLaMlIrZdtg9g5bZMB8GA1UdIwQY
MBaAFDWwPshdCGB6ax3fH+edxlHM/j83MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmJBLXlGMElZSHBySGQ4ZjU1M0dVY3otUHpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jYzRmZTktZTQ4Yy00MmRhLTk3ZWEt
YWI1N2NhYmMxOGY3LzEvTmJBLXlGMElZSHBySGQ4ZjU1M0dVY3otUHpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9jYzRmZTktZTQ4Yy00MmRhLTk3ZWEtYWI1N2NhYmMxOGY3
LzEvTmJBLXlGMElZSHBySGQ4ZjU1M0dVY3otUHpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHz+4JsN
dJAPpRRagbq3lcykhHVwOyjRQNaZKPdyVbbnui75vo3Nk3hJlgqTKMurWvC5KHlp
hXRoILue1qpeQQIKCDPawCmt4EbZtNCs2Xf8JiF13q6XRlGvW61O64ZadoHGrJzD
ZG2EcEfDtKZqbXiMy56Dajr1kpSd4V5rJ/03XPYhq7J2vWVmpdROY+LpBjoNQFVL
psOhW2a54m88EQR58R2TMZcK8MYNfVNWrjn0eHVwzNuTsRUCgrWI6UpScQP4V/+w
r3r4VwfX480Us2HXDPiAWPYgSssahdXDu2HuFMvMr8oeMfeJWmWC7SCLrekVLu6b
FrmZaWuwsu4Vpw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:32 2026 by rpki-client