Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
File: NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft (raw, json)
Hash identifier: a4/Zlsj8wCVi2wWnS9IAZyA/8KEBpZkCrc43X4irM7Q=
Subject key identifier: FE:17:6E:01:12:2F:73:7B:46:40:28:E3:35:BA:DB:65:7A:9C:39:BC
Authority key identifier: 36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
Certificate issuer: /CN=36135f13abf02fa3fca505d568816afc59334916
Certificate serial: 019D299799312A331606F5C4B956FF2F7CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
Manifest number: D7
Signing time: Thu 26 Mar 2026 10:01:34 +0000
Manifest this update: Thu 26 Mar 2026 10:01:34 +0000
Manifest next update: Fri 27 Mar 2026 10:01:34 +0000
Files and hashes: 1: NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl (hash: wEWjZ17k9vznRVx8di7fDWExelySNZPE4wrUaS4DV34=)
2: W-HA5m7hemLDXdHbhWk4pSkmXKQ.roa (hash: DFd6jBuLZXEJn0Y04obFpmXz6rYUp0KbjFhguWyn34c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:99:31:2a:33:16:06:f5:c4:b9:56:ff:2f:7c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36135f13abf02fa3fca505d568816afc59334916
Validity
Not Before: Mar 26 10:01:34 2026 GMT
Not After : Mar 27 10:01:34 2026 GMT
Subject: CN=fe176e01122f737b464028e335badb657a9c39bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2a:dc:70:60:10:de:e1:dc:95:ef:72:a5:40:
c8:32:02:46:b3:d6:cc:97:25:56:4d:34:29:85:8e:
44:6a:9e:e9:e8:bd:3d:4a:01:ce:aa:75:75:eb:55:
69:09:88:42:6f:e1:a6:95:f4:45:95:92:97:92:c1:
55:1a:fc:46:fd:24:c4:8b:52:a3:e5:39:db:88:fb:
74:44:b5:40:cb:b6:8a:bc:36:92:8a:2d:fe:b8:0d:
35:13:fc:df:13:d6:b6:60:ee:7c:e7:54:bc:3b:f6:
ee:86:cb:13:e5:dc:82:58:cd:ff:fa:51:33:b6:fb:
a9:c0:e7:c6:21:be:15:ab:8d:3e:92:f2:8e:39:e0:
70:dc:36:f6:1c:d5:be:42:e5:1f:a7:55:c3:cb:e1:
e1:1b:49:c6:87:be:bc:f6:23:79:ce:bb:bc:5b:81:
26:a1:d2:2e:5c:d0:bb:5d:dc:1f:71:44:61:36:ec:
d6:57:9b:11:fc:73:d4:61:a6:f6:85:4a:81:fb:3d:
08:c2:cc:96:b4:2a:df:3d:62:74:37:af:c7:34:e8:
b3:d0:9d:32:e6:7b:3e:2d:33:52:f5:48:25:2d:d3:
53:a0:01:6c:f5:5b:ab:aa:c7:05:ab:86:d6:d0:79:
7b:02:74:f3:69:86:0a:b9:83:51:3c:03:15:c7:5f:
51:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:17:6E:01:12:2F:73:7B:46:40:28:E3:35:BA:DB:65:7A:9C:39:BC
X509v3 Authority Key Identifier:
keyid:36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:14:ce:20:2a:01:2e:31:62:da:d5:92:0d:16:77:21:0b:a8:
a1:f8:07:75:54:66:e9:b2:8b:7c:67:a5:3e:3d:e6:37:53:f0:
ed:2e:1d:54:24:9f:82:63:bc:47:d0:b3:a6:2d:7d:98:56:30:
7a:44:0d:5d:7a:49:40:f3:f9:3a:62:b3:53:af:c7:33:c6:d6:
f9:b9:39:e5:fb:c6:dc:de:6e:38:53:ab:92:03:02:14:92:12:
8d:fd:e1:dd:f0:58:df:e4:99:42:1c:16:30:40:bd:9a:67:7b:
88:1e:85:17:6e:41:d3:c7:90:4e:f8:81:b1:e4:de:64:4f:9e:
e5:f4:4c:91:0f:e1:ef:c9:39:2e:0d:c7:a6:98:b0:5d:9d:22:
0c:a6:12:82:e8:1d:61:68:e0:2a:ba:7e:9a:ff:20:d3:25:17:
08:fa:05:8f:5d:bc:0b:1d:f6:4a:f5:53:fc:3a:6c:53:ac:07:
0c:f9:72:4a:51:aa:88:6b:35:e5:08:02:2f:75:5a:06:e3:e2:
65:ff:6d:32:bb:e5:42:0e:04:6c:06:57:39:d0:af:a8:27:ec:
d9:b9:3c:0e:70:cf:b0:b8:10:28:27:49:4d:ed:62:c9:9b:1e:
ac:6d:81:b1:bd:a3:e7:09:8d:dd:24:10:e1:ff:a8:41:d8:1a:
76:97:07:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:32 2026 by rpki-client