Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
File: NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft (raw, json)
Hash identifier: 7/KXQj2zzCyj329pT8rKTTN9xFvRzIImTrAlMh4OrEw=
Subject key identifier: 39:6A:E8:BF:5C:E3:91:81:A0:75:37:79:98:DA:AF:48:66:F2:DC:2A
Authority key identifier: 36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
Certificate issuer: /CN=36135f13abf02fa3fca505d568816afc59334916
Certificate serial: 019E1ED9D90429BFBA186D532712921E6000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
Manifest number: 0156
Signing time: Wed 13 May 2026 01:00:53 +0000
Manifest this update: Wed 13 May 2026 01:00:53 +0000
Manifest next update: Thu 14 May 2026 01:00:53 +0000
Files and hashes: 1: NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl (hash: XYfauM8MURCUBbhCX6TExqeVm4qv7ruFDWa6PsMAx60=)
2: W-HA5m7hemLDXdHbhWk4pSkmXKQ.roa (hash: DFd6jBuLZXEJn0Y04obFpmXz6rYUp0KbjFhguWyn34c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:d9:04:29:bf:ba:18:6d:53:27:12:92:1e:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36135f13abf02fa3fca505d568816afc59334916
Validity
Not Before: May 13 01:00:53 2026 GMT
Not After : May 14 01:00:53 2026 GMT
Subject: CN=396ae8bf5ce39181a075377998daaf4866f2dc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:7e:b1:9b:58:6a:7b:95:85:36:e8:2b:7d:
9e:4b:7a:9b:8c:4a:08:18:55:9c:d0:aa:7f:58:eb:
d6:43:c4:35:44:51:f7:d1:4b:ee:cb:54:fb:7b:8e:
34:53:3d:3e:9d:92:2e:bf:42:c2:c1:cc:da:d5:b4:
b7:b9:53:f2:86:49:2d:96:6b:93:41:09:a3:5d:8c:
00:20:37:6a:32:f6:c6:cc:48:51:1f:55:14:3c:4f:
c2:3d:64:a8:6c:4f:c9:9a:d3:ac:23:1b:64:44:b6:
f1:82:b4:c1:e8:a4:c9:7d:5a:f4:26:d7:4b:ec:04:
a6:2d:a0:6e:bf:e8:7f:f5:ac:12:51:05:a2:ce:9d:
ad:92:59:9d:2e:73:94:b0:48:3b:d6:f2:5b:4f:60:
c2:8a:e2:f1:7a:87:f7:f8:fa:4a:f6:60:8e:c3:11:
12:da:e6:15:13:46:82:46:4a:2e:92:7e:a6:30:31:
7f:f6:27:73:10:de:bf:56:ed:7b:96:44:7e:4c:a7:
4e:ce:7c:2a:a8:23:cf:7b:24:79:b8:09:12:46:50:
a0:2e:a9:73:34:72:d9:72:57:d2:64:d3:ff:c4:b2:
95:22:be:37:35:88:46:8d:e0:0c:2e:c4:09:ca:4f:
03:73:7c:c9:c4:b3:b7:3b:ef:7a:dd:12:86:e2:c3:
e0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6A:E8:BF:5C:E3:91:81:A0:75:37:79:98:DA:AF:48:66:F2:DC:2A
X509v3 Authority Key Identifier:
keyid:36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:20:d5:7a:2a:5e:50:c3:3e:96:89:0f:69:49:3f:91:61:a0:
6c:1c:53:9a:f1:f0:14:a0:07:c1:90:0e:cc:f3:a8:1d:6a:55:
33:42:d4:bd:a7:3d:d1:c9:1b:40:95:49:98:71:ce:19:4d:07:
39:90:5f:25:28:aa:ae:bb:74:1a:ca:9f:b1:49:d7:e0:fa:66:
49:c8:14:86:b0:82:1f:03:36:c3:f2:d1:bd:d8:54:02:84:a2:
1d:98:50:9e:06:54:0a:31:d4:ac:cf:c6:78:b4:f2:eb:e1:d5:
fb:81:77:b1:16:12:8d:dc:2a:f7:c1:85:0d:77:67:62:11:2d:
14:8f:0b:04:b9:c9:be:f8:ed:86:eb:07:53:41:b3:15:f5:eb:
5f:5b:f0:d6:09:c4:6d:76:db:4a:49:0d:9f:8f:fa:59:7d:e2:
6f:aa:d0:a9:14:9d:53:a2:7a:01:5e:0a:5b:68:a3:1c:49:ba:
7f:44:54:93:f6:30:8a:87:13:01:a7:7c:98:a3:14:fe:6c:34:
5f:b5:32:07:69:8d:d1:a5:58:94:a9:05:e6:0d:6d:7e:8a:80:
ef:5c:fd:c1:e7:99:bd:27:d9:9c:60:87:34:b6:bd:c8:a8:76:
c1:a7:1f:f1:02:89:c1:6f:a8:60:9a:ea:01:90:fe:29:b9:f5:
3e:28:ee:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2dkEKb+6GG1TJxKSHmAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTM1ZjEzYWJmMDJmYTNmY2E1MDVkNTY4ODE2YWZjNTkz
MzQ5MTYwHhcNMjYwNTEzMDEwMDUzWhcNMjYwNTE0MDEwMDUzWjAzMTEwLwYDVQQD
EygzOTZhZThiZjVjZTM5MTgxYTA3NTM3Nzk5OGRhYWY0ODY2ZjJkYzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodJ+sZtYanuVhTboK32eS3qbjEoI
GFWc0Kp/WOvWQ8Q1RFH30Uvuy1T7e440Uz0+nZIuv0LCwcza1bS3uVPyhkktlmuT
QQmjXYwAIDdqMvbGzEhRH1UUPE/CPWSobE/JmtOsIxtkRLbxgrTB6KTJfVr0JtdL
7ASmLaBuv+h/9awSUQWizp2tklmdLnOUsEg71vJbT2DCiuLxeof3+PpK9mCOwxES
2uYVE0aCRkoukn6mMDF/9idzEN6/Vu17lkR+TKdOznwqqCPPeyR5uAkSRlCgLqlz
NHLZclfSZNP/xLKVIr43NYhGjeAMLsQJyk8Dc3zJxLO3O+963RKG4sPg0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlq6L9c45GBoHU3eZjar0hm8twqMB8GA1UdIwQY
MBaAFDYTXxOr8C+j/KUF1WiBavxZM0kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhOZkU2dndMNlA4cFFYVmFJRnFfRmt6U1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yODgzMzAtMGZlMy00MmFhLWIyNjQt
OWRmZDc5NWE1YWRhLzEvTmhOZkU2dndMNlA4cFFYVmFJRnFfRmt6U1JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yODgzMzAtMGZlMy00MmFhLWIyNjQtOWRmZDc5NWE1YWRh
LzEvTmhOZkU2dndMNlA4cFFYVmFJRnFfRmt6U1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiDVeipe
UMM+lokPaUk/kWGgbBxTmvHwFKAHwZAOzPOoHWpVM0LUvac90ckbQJVJmHHOGU0H
OZBfJSiqrrt0GsqfsUnX4PpmScgUhrCCHwM2w/LRvdhUAoSiHZhQngZUCjHUrM/G
eLTy6+HV+4F3sRYSjdwq98GFDXdnYhEtFI8LBLnJvvjthusHU0GzFfXrX1vw1gnE
bXbbSkkNn4/6WX3ib6rQqRSdU6J6AV4KW2ijHEm6f0RUk/YwiocTAad8mKMU/mw0
X7UyB2mN0aVYlKkF5g1tfoqA71z9weeZvSfZnGCHNLa9yKh2wacf8QKJwW+oYJrq
AZD+Kbn1PijuYQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:08:21 2026 by rpki-client