Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
File: NsxJTEqTS7s89Gulgk1mZsiUei8.mft (raw, json)
Hash identifier: NUT9rRpjqUnbK7Uy8Gv4yI+zRRVp42nZPSqQ6v6x/1M=
Subject key identifier: 6A:0A:AA:2A:2B:D5:37:8E:F9:F8:18:54:76:54:8A:19:3C:AA:19:89
Authority key identifier: 36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F
Certificate issuer: /CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
Certificate serial: 019D284E2F63B9C6569238C8153F02863867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
Manifest number: 0845
Signing time: Thu 26 Mar 2026 04:01:45 +0000
Manifest this update: Thu 26 Mar 2026 04:01:45 +0000
Manifest next update: Fri 27 Mar 2026 04:01:45 +0000
Files and hashes: 1: 7Nw66k4HGDgniHjPpIYuFlo7wts.roa (hash: xkBwde/whvV3zzujO/2yU/8uxz1ZIVTTivP0Kf+ua7o=)
2: NsxJTEqTS7s89Gulgk1mZsiUei8.crl (hash: xDFpE5edac80zFAI9ZvsBaU3XS+1hfVY3i4R38u+eJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:2f:63:b9:c6:56:92:38:c8:15:3f:02:86:38:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
Validity
Not Before: Mar 26 04:01:45 2026 GMT
Not After : Mar 27 04:01:45 2026 GMT
Subject: CN=6a0aaa2a2bd5378ef9f8185476548a193caa1989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:f0:c1:8a:c7:fd:9c:5c:5d:87:f5:a2:78:
78:ce:5c:9e:a3:2f:6d:b3:f7:d8:11:f1:4c:09:55:
28:03:5f:06:84:7c:b8:d3:67:0e:15:ee:8b:6d:30:
9e:c1:36:93:4d:ea:49:98:a1:9b:8c:80:4e:cf:49:
9d:fb:70:a0:74:1b:03:7f:e1:06:2f:63:87:0a:a4:
44:9f:04:f1:0f:c1:36:99:8d:c8:11:e3:4e:ce:42:
9b:72:9a:e6:63:17:c9:01:ff:af:ab:77:ca:c5:38:
72:73:e4:37:fb:bf:1d:4c:d8:a0:ad:32:6d:53:20:
f8:e4:aa:d0:44:d0:0a:14:f7:2e:b3:c8:08:3f:3d:
c6:01:4d:84:30:ae:5e:ad:19:cf:0c:5f:19:bd:ed:
57:a2:4d:87:f5:d2:41:bd:c0:04:b4:88:fd:38:e2:
b2:34:4f:4d:5f:86:2b:db:ae:78:9b:d2:45:3b:9b:
db:66:fa:48:56:1a:8c:16:7a:7f:d5:09:56:32:2a:
a7:f2:3f:04:99:85:5d:f6:88:20:63:ad:af:5c:ff:
6f:b7:78:b4:fe:e5:9c:7b:63:12:45:ed:06:a7:a3:
3b:a9:b2:b3:b8:e8:8b:fa:49:a0:38:54:5b:62:36:
87:04:45:a1:ef:12:a5:62:3f:19:10:e4:8c:12:e9:
a8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0A:AA:2A:2B:D5:37:8E:F9:F8:18:54:76:54:8A:19:3C:AA:19:89
X509v3 Authority Key Identifier:
keyid:36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8a:91:73:d8:0e:90:20:4a:36:6e:7b:ba:a6:2a:39:16:52:
5c:0b:8b:2b:4d:fa:52:e9:10:ae:1d:8c:c7:01:25:1e:89:b6:
c7:29:df:52:5b:84:5d:39:da:2b:22:4b:1a:e6:5d:88:22:46:
aa:79:42:c1:5e:53:1f:c1:62:74:a1:7c:ee:56:bd:13:ec:18:
fb:f5:e3:b3:9d:6b:41:36:ba:13:e5:9e:c3:e2:ab:b0:67:db:
63:24:bc:90:e2:84:13:9f:52:e4:8e:eb:95:55:ba:d8:b6:6f:
7c:f4:77:e3:a4:16:c8:c3:b5:89:cc:26:e1:b4:40:21:d7:bb:
46:94:89:7a:6b:69:ab:d5:db:b7:73:2e:54:70:ee:23:57:48:
de:6c:72:ea:ba:d3:64:e3:05:36:ae:c0:e1:4c:48:6c:d1:52:
60:04:13:76:4a:39:d1:fb:46:03:5b:de:a4:1f:6c:da:f2:19:
e1:61:a7:03:a1:4e:de:8f:6a:90:13:42:13:45:36:fa:db:15:
1d:7e:a0:a1:a0:87:88:20:d4:c8:41:7d:03:65:d7:f8:7f:b0:
e1:0a:97:06:9c:39:e9:10:67:94:e1:11:e6:9b:a4:3d:04:6b:
93:8a:ea:2f:f1:90:56:bc:95:1e:f0:ef:78:8f:6f:57:e2:09:
4b:53:51:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTi9jucZWkjjIFT8ChjhnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Y2M0OTRjNGE5MzRiYmIzY2Y0NmJhNTgyNGQ2NjY2Yzg5
NDdhMmYwHhcNMjYwMzI2MDQwMTQ1WhcNMjYwMzI3MDQwMTQ1WjAzMTEwLwYDVQQD
Eyg2YTBhYWEyYTJiZDUzNzhlZjlmODE4NTQ3NjU0OGExOTNjYWExOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmenwwYrH/ZxcXYf1onh4zlyeoy9t
s/fYEfFMCVUoA18GhHy402cOFe6LbTCewTaTTepJmKGbjIBOz0md+3CgdBsDf+EG
L2OHCqREnwTxD8E2mY3IEeNOzkKbcprmYxfJAf+vq3fKxThyc+Q3+78dTNigrTJt
UyD45KrQRNAKFPcus8gIPz3GAU2EMK5erRnPDF8Zve1Xok2H9dJBvcAEtIj9OOKy
NE9NX4Yr2654m9JFO5vbZvpIVhqMFnp/1QlWMiqn8j8EmYVd9oggY62vXP9vt3i0
/uWce2MSRe0Gp6M7qbKzuOiL+kmgOFRbYjaHBEWh7xKlYj8ZEOSMEumoWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoKqior1TeO+fgYVHZUihk8qhmJMB8GA1UdIwQY
MBaAFDbMSUxKk0u7PPRrpYJNZmbIlHovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YTkwMDQtZTRkOS00ZjU0LTk5Mjgt
YjljODE2OTY1YTA0LzEvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83YTkwMDQtZTRkOS00ZjU0LTk5MjgtYjljODE2OTY1YTA0
LzEvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4qRc9gO
kCBKNm57uqYqORZSXAuLK036UukQrh2MxwElHom2xynfUluEXTnaKyJLGuZdiCJG
qnlCwV5TH8FidKF87la9E+wY+/Xjs51rQTa6E+Wew+KrsGfbYyS8kOKEE59S5I7r
lVW62LZvfPR346QWyMO1icwm4bRAIde7RpSJemtpq9Xbt3MuVHDuI1dI3mxy6rrT
ZOMFNq7A4UxIbNFSYAQTdko50ftGA1vepB9s2vIZ4WGnA6FO3o9qkBNCE0U2+tsV
HX6goaCHiCDUyEF9A2XX+H+w4QqXBpw56RBnlOER5pukPQRrk4rqL/GQVryVHvDv
eI9vV+IJS1NRag==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:15 2026 by rpki-client