Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File: Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier: M8Hoj0sKynj3S7KIBNPk/EP20lck9ikxcqajcUAuL5M=
Subject key identifier: 57:6B:31:3B:F0:99:6E:86:FE:7E:65:AD:ED:C9:2F:B9:F4:53:AE:8D
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 019E1FB59236288155B949072C1C5A4C9020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number: 0F3A
Signing time: Wed 13 May 2026 05:00:53 +0000
Manifest this update: Wed 13 May 2026 05:00:53 +0000
Manifest next update: Thu 14 May 2026 05:00:53 +0000
Files and hashes: 1: 3Ego7qA5ogxcgXSX7Iy2Jk2QvKA.roa (hash: AcX2UY2fKx9ShP8jKiTUZk0gum0BmvVpyfodQGjOdcQ=)
2: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: /i2n6zc0aIadVemGPJyHfCORC+nnepcmkUTP5h55q8E=)
3: YayJGV1AhdhT_2jmvro3f1vZJio.roa (hash: ZSfRyhmj0GGAqXcOqtLbroZWUuhIqN/tBzww51XfKiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:92:36:28:81:55:b9:49:07:2c:1c:5a:4c:90:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: May 13 05:00:53 2026 GMT
Not After : May 14 05:00:53 2026 GMT
Subject: CN=576b313bf0996e86fe7e65adedc92fb9f453ae8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:10:ae:3d:86:bf:2c:bf:35:38:86:56:5a:
d3:98:0e:92:56:2f:ee:36:a7:3e:6d:7a:98:35:af:
2d:f8:c7:70:9f:16:24:35:e8:5a:22:e3:9a:f5:70:
4c:c4:be:4b:17:ba:3f:11:a2:7b:28:0c:07:60:73:
fd:02:0b:27:7c:dd:fd:0c:a6:66:74:a0:f5:fc:7a:
f3:57:9c:7a:7f:40:47:94:02:c4:51:29:5f:f8:ac:
55:f3:fc:70:80:94:03:a8:ed:5a:c2:de:63:de:4a:
c7:96:b0:54:4e:46:6a:2f:92:a7:9c:52:cc:31:99:
ed:ea:e8:0a:04:f5:ca:3b:9c:0b:fc:ee:24:9c:1e:
a4:02:f2:0a:1a:cc:07:bf:cd:90:ba:f4:e3:a3:11:
9e:e3:74:cf:da:1d:d7:5b:82:75:b1:7e:72:e0:a1:
d0:d2:5b:5e:40:9b:18:b7:da:9a:e1:7e:d0:1a:5b:
c6:be:76:b3:01:fb:0c:96:e2:50:ac:ac:b3:f4:4d:
a5:06:da:b0:1b:7e:d8:54:d8:f3:32:3e:dc:1d:5d:
c7:a7:bd:5f:37:41:62:ae:f9:0b:af:bc:16:dc:c9:
80:30:1a:33:e3:40:85:e9:4b:06:a9:33:3a:0b:78:
a5:7c:7f:5f:6e:59:fb:e5:97:80:db:5e:00:b6:b9:
85:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6B:31:3B:F0:99:6E:86:FE:7E:65:AD:ED:C9:2F:B9:F4:53:AE:8D
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:13:8b:c8:5e:31:62:e7:86:71:65:ae:43:3f:7d:e4:29:b0:
ff:ac:14:f0:db:31:ed:5b:28:cf:bb:98:e9:b7:39:fd:78:b6:
ba:f4:ba:20:22:47:ed:39:74:00:23:7b:37:01:4b:46:73:d1:
44:31:32:a7:77:6f:35:5e:0a:fb:60:58:14:c3:e7:e4:bf:a5:
30:2a:1f:44:94:a7:c6:fb:a6:ea:79:a8:fa:f7:18:29:f8:61:
c2:87:b9:a5:1a:78:5d:6a:2e:90:39:18:5a:5b:f3:a9:1d:8e:
93:c2:c9:80:64:1a:27:24:d0:4a:7b:3e:c8:b8:bb:1b:72:19:
ae:48:43:b8:44:13:9d:d8:e2:45:47:cf:74:c1:2b:63:f2:65:
a6:c2:42:a4:82:9e:61:6e:f4:a9:c8:d2:8e:ac:74:31:c1:08:
fb:14:74:7c:72:55:ca:27:1e:80:c6:25:a6:b4:62:7f:ee:4e:
fd:3d:4b:be:6d:49:03:61:e2:20:7c:df:ee:65:9d:55:49:4f:
ea:4f:c0:b3:77:2c:45:21:7f:c4:e4:ea:a4:21:c9:a1:01:4e:
c7:2d:6e:0f:15:0b:22:aa:d6:81:66:ab:0d:a3:cb:87:f2:61:
52:0a:1a:04:ea:f3:69:71:d7:48:68:c6:94:d1:dc:4e:94:86:
57:08:14:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:46:16 2026 by rpki-client