Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
File: NZ5FeU8Bkp_awnLCYms-guvJxd8.mft (raw, json)
Hash identifier: ociRCzcDqVNz6DZ4El7JXkcMZZE2YOVBT3weZ420aAw=
Subject key identifier: F5:89:88:75:6D:23:A0:62:06:AC:D1:EA:4B:80:A2:DE:AC:AA:D6:4A
Authority key identifier: 35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
Certificate issuer: /CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Certificate serial: 019D2703DD64BFEE91699BC5DA5525595EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:00:57 +0000
Manifest this update: Wed 25 Mar 2026 22:00:57 +0000
Manifest next update: Thu 26 Mar 2026 22:00:57 +0000
Files and hashes: 1: NZ5FeU8Bkp_awnLCYms-guvJxd8.crl (hash: f9nRGx4F/7opPdSoEYy/1I0h+SCZijA2caFeEnj6LaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:dd:64:bf:ee:91:69:9b:c5:da:55:25:59:5e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Validity
Not Before: Mar 25 22:00:57 2026 GMT
Not After : Mar 26 22:00:57 2026 GMT
Subject: CN=f58988756d23a06206acd1ea4b80a2deacaad64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:f1:c6:ed:4f:73:92:3d:35:4b:a4:6f:17:
a2:17:87:d4:d0:4b:1e:d7:94:71:e8:7d:91:f3:3a:
d4:b7:35:aa:78:f9:74:0a:f3:58:ec:dd:79:d2:0f:
d8:db:d7:d0:aa:17:c6:43:8b:d9:bd:e8:47:e4:8b:
61:86:f4:dc:8c:cf:b7:5e:44:30:1f:64:83:69:42:
76:7c:2e:e0:79:b8:e3:33:cb:d5:95:fe:94:ea:1c:
a1:b1:73:99:46:96:12:28:14:d4:fe:dc:8d:c5:0f:
3d:66:d8:4f:f7:28:d2:59:0d:b6:0b:ff:fc:05:a4:
42:22:a6:98:43:55:39:03:63:e6:35:4b:18:a2:de:
54:9f:8f:a3:07:e1:ac:1e:e2:4a:cd:42:b6:91:ea:
ab:fe:dd:fe:40:57:d2:b1:1e:81:ef:b2:7c:76:80:
cd:8f:c6:91:c2:cf:9b:1e:87:ba:33:7b:c8:56:f3:
73:98:ca:3b:d3:06:9c:57:c2:a9:c1:b4:50:48:ec:
da:24:95:f7:94:55:4f:73:8c:b7:fc:5d:1d:37:00:
3a:4b:06:d5:f5:35:bf:60:4a:a4:2a:fa:9c:f7:9e:
7d:e0:5d:4f:1a:83:6a:82:61:04:77:83:b6:ec:d7:
55:d8:6d:7d:bb:fe:5b:3b:47:b0:f8:40:55:ea:ce:
c8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:89:88:75:6D:23:A0:62:06:AC:D1:EA:4B:80:A2:DE:AC:AA:D6:4A
X509v3 Authority Key Identifier:
keyid:35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:92:5d:69:eb:9e:00:1c:fe:ba:03:4f:37:d2:85:dd:2e:a7:
d9:b8:ff:26:00:0c:07:21:ff:b8:ec:8b:0d:68:df:b1:86:11:
d5:20:80:f5:32:ad:41:93:2e:85:3f:95:f3:be:8b:62:76:b3:
6e:7e:bd:de:2c:14:73:d8:79:ee:06:c7:5d:45:64:93:5e:2e:
00:84:fe:ff:76:63:b9:cb:5d:4a:cf:0f:c8:b1:37:4a:30:87:
40:94:9c:0b:4e:4b:69:98:e5:b4:58:6a:15:84:fd:cb:ea:83:
77:f7:ad:ad:46:10:26:4e:ac:de:2f:ae:44:be:5c:38:18:85:
de:15:ca:fe:18:c3:f5:f9:ad:d2:41:36:40:87:21:d3:34:6a:
c3:50:a4:eb:8b:ca:8c:c9:56:06:a8:ca:48:a6:de:42:2f:66:
17:3a:df:4b:58:c4:79:9d:55:41:6c:06:c0:af:37:49:b7:c0:
e0:fb:ee:79:b3:ed:fc:75:8f:d5:40:f9:2b:92:b4:b7:db:6b:
c0:76:a2:05:c4:c4:7d:11:ea:4b:be:f8:6c:bd:00:b7:3c:08:
e5:e5:24:b1:5a:42:eb:9a:a0:cb:c7:30:1b:fc:49:a2:7b:6d:
e1:27:ec:ef:f9:87:89:12:53:24:3b:1a:08:36:f1:11:27:d8:
0c:fd:b5:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA91kv+6RaZvF2lUlWV77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWU0NTc5NGYwMTkyOWZkYWMyNzJjMjYyNmIzZTgyZWJj
OWM1ZGYwHhcNMjYwMzI1MjIwMDU3WhcNMjYwMzI2MjIwMDU3WjAzMTEwLwYDVQQD
EyhmNTg5ODg3NTZkMjNhMDYyMDZhY2QxZWE0YjgwYTJkZWFjYWFkNjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Dxxu1Pc5I9NUukbxeiF4fU0Ese
15Rx6H2R8zrUtzWqePl0CvNY7N150g/Y29fQqhfGQ4vZvehH5IthhvTcjM+3XkQw
H2SDaUJ2fC7gebjjM8vVlf6U6hyhsXOZRpYSKBTU/tyNxQ89ZthP9yjSWQ22C//8
BaRCIqaYQ1U5A2PmNUsYot5Un4+jB+GsHuJKzUK2keqr/t3+QFfSsR6B77J8doDN
j8aRws+bHoe6M3vIVvNzmMo70wacV8KpwbRQSOzaJJX3lFVPc4y3/F0dNwA6SwbV
9TW/YEqkKvqc95594F1PGoNqgmEEd4O27NdV2G19u/5bO0ew+EBV6s7I0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWJiHVtI6BiBqzR6kuAot6sqtZKMB8GA1UdIwQY
MBaAFDWeRXlPAZKf2sJywmJrPoLrycXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xYzAwMGQtNzYwNC00NDRiLWI0ZTAt
Yjg0NGNlMWM2MjM4LzEvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8xYzAwMGQtNzYwNC00NDRiLWI0ZTAtYjg0NGNlMWM2MjM4
LzEvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5Jdaeue
ABz+ugNPN9KF3S6n2bj/JgAMByH/uOyLDWjfsYYR1SCA9TKtQZMuhT+V876LYnaz
bn693iwUc9h57gbHXUVkk14uAIT+/3ZjuctdSs8PyLE3SjCHQJScC05LaZjltFhq
FYT9y+qDd/etrUYQJk6s3i+uRL5cOBiF3hXK/hjD9fmt0kE2QIch0zRqw1Ck64vK
jMlWBqjKSKbeQi9mFzrfS1jEeZ1VQWwGwK83SbfA4PvuebPt/HWP1UD5K5K0t9tr
wHaiBcTEfRHqS774bL0AtzwI5eUksVpC65qgy8cwG/xJontt4Sfs7/mHiRJTJDsa
CDbxESfYDP21iQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:26 2026 by rpki-client