Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
File: NHi9VqAesq4wdvaW0B1P_NFAGp8.mft (raw, json)
Hash identifier: pnFQy0M5tN62UU5pT+I1UjA2uHU8WRZsnf/0jgPUS4s=
Subject key identifier: 59:41:1B:4F:EA:BA:45:09:CE:4C:54:D5:E7:48:20:8E:57:DE:6C:00
Authority key identifier: 34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
Certificate issuer: /CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Certificate serial: 019D3488AE18828F8AEE3AD89953BB98A9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
Manifest number: 188C
Signing time: Sat 28 Mar 2026 13:01:05 +0000
Manifest this update: Sat 28 Mar 2026 13:01:05 +0000
Manifest next update: Sun 29 Mar 2026 13:01:05 +0000
Files and hashes: 1: NHi9VqAesq4wdvaW0B1P_NFAGp8.crl (hash: LXHHmzi/lU3lzoOpkKU+dIMI1f1lPAISjv9sGDtPP7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:88:ae:18:82:8f:8a:ee:3a:d8:99:53:bb:98:a9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478bd56a01eb2ae3076f696d01d4ffcd1401a9f
Validity
Not Before: Mar 28 13:01:05 2026 GMT
Not After : Mar 29 13:01:05 2026 GMT
Subject: CN=59411b4feaba4509ce4c54d5e748208e57de6c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:67:93:f0:d2:97:c3:f3:7b:db:ea:bb:0b:d6:
6f:7b:18:a6:5b:b3:7e:a9:29:0c:49:92:20:63:5d:
3f:75:bf:2a:16:c0:b2:06:d3:75:24:b1:eb:64:1d:
57:cd:d4:4b:10:99:44:99:f7:a6:ec:ea:6d:b6:ee:
3e:3b:6a:3d:dd:2b:ea:88:20:49:d9:cc:cc:50:b4:
5b:1d:06:01:86:c9:9d:d5:52:1d:18:43:6c:4b:df:
71:84:47:c8:bf:88:a5:f7:7c:a2:21:71:eb:b7:c0:
33:17:02:64:83:c3:35:63:37:df:21:fb:bd:40:24:
ef:e2:6b:53:0d:78:7c:6a:59:29:c5:75:30:c3:42:
6f:76:7e:53:e0:62:62:ac:28:65:bf:d0:6c:13:8a:
d3:a2:c7:69:fc:4d:65:94:0b:bf:52:26:be:13:ae:
0a:7f:a2:aa:d6:62:0c:4b:c9:68:bc:a5:34:dc:d9:
d3:9d:6e:76:c4:01:4b:d2:69:53:4d:ef:66:21:a9:
09:8f:48:73:4c:df:16:fd:e9:31:e1:65:b1:ed:34:
bc:f6:bb:10:ac:f4:0b:e7:e5:dd:a2:61:21:09:ad:
e0:13:85:6c:25:51:8d:3f:d8:0d:77:27:21:6d:40:
12:68:62:de:90:25:1c:9e:bd:37:68:a7:1d:c8:05:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:41:1B:4F:EA:BA:45:09:CE:4C:54:D5:E7:48:20:8E:57:DE:6C:00
X509v3 Authority Key Identifier:
keyid:34:78:BD:56:A0:1E:B2:AE:30:76:F6:96:D0:1D:4F:FC:D1:40:1A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHi9VqAesq4wdvaW0B1P_NFAGp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0fc7d8-2a5f-4b38-a230-8396f8c6255a/1/NHi9VqAesq4wdvaW0B1P_NFAGp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:df:4d:5b:25:eb:8d:41:71:51:b2:06:11:f0:48:d0:64:4f:
6d:a7:1d:81:bc:7e:5c:a2:35:f6:04:fc:e3:d5:e6:2a:00:15:
22:e7:67:57:f1:51:e9:9f:e9:0c:16:57:26:67:72:db:80:d2:
8a:e2:e2:59:47:06:2c:a8:a9:28:a4:43:59:05:5b:ee:c4:50:
0c:92:a7:25:fb:e6:90:6d:22:f6:74:d6:92:1d:6d:4b:aa:a0:
0a:b0:b3:02:ec:00:92:4d:97:6d:cb:61:f0:93:29:55:d5:a4:
63:c9:76:36:ae:9a:5c:ce:dc:ff:04:37:93:6d:a7:4c:9c:46:
b4:91:a5:20:a1:41:c1:18:6a:24:81:96:82:10:6a:7e:ae:16:
f4:26:d1:e5:88:21:65:04:9c:0c:87:2d:9c:f4:8b:05:db:68:
d8:1c:f6:23:57:8e:d1:67:77:e6:eb:b4:31:a1:1e:53:cf:09:
63:f8:d0:5c:5b:be:56:f9:aa:6d:ba:76:81:de:82:ae:ab:0a:
b2:6c:6c:32:ec:f3:11:ba:b2:cd:1f:7d:ec:e3:35:52:b5:6b:
24:d3:27:58:b9:55:95:01:7e:f4:ad:c5:ba:14:d0:8e:b9:65:
38:59:26:ce:19:74:54:67:af:0e:5d:09:ad:18:85:dc:26:af:
ec:52:e1:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ00iK4Ygo+K7jrYmVO7mKnkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzhiZDU2YTAxZWIyYWUzMDc2ZjY5NmQwMWQ0ZmZjZDE0
MDFhOWYwHhcNMjYwMzI4MTMwMTA1WhcNMjYwMzI5MTMwMTA1WjAzMTEwLwYDVQQD
Eyg1OTQxMWI0ZmVhYmE0NTA5Y2U0YzU0ZDVlNzQ4MjA4ZTU3ZGU2YzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWeT8NKXw/N72+q7C9ZveximW7N+
qSkMSZIgY10/db8qFsCyBtN1JLHrZB1XzdRLEJlEmfem7Opttu4+O2o93SvqiCBJ
2czMULRbHQYBhsmd1VIdGENsS99xhEfIv4il93yiIXHrt8AzFwJkg8M1YzffIfu9
QCTv4mtTDXh8alkpxXUww0Jvdn5T4GJirChlv9BsE4rTosdp/E1llAu/Uia+E64K
f6Kq1mIMS8lovKU03NnTnW52xAFL0mlTTe9mIakJj0hzTN8W/ekx4WWx7TS89rsQ
rPQL5+XdomEhCa3gE4VsJVGNP9gNdychbUASaGLekCUcnr03aKcdyAXKawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlBG0/qukUJzkxU1edIII5X3mwAMB8GA1UdIwQY
MBaAFDR4vVagHrKuMHb2ltAdT/zRQBqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wZmM3ZDgtMmE1Zi00YjM4LWEyMzAt
ODM5NmY4YzYyNTVhLzEvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wZmM3ZDgtMmE1Zi00YjM4LWEyMzAtODM5NmY4YzYyNTVh
LzEvTkhpOVZxQWVzcTR3ZHZhVzBCMVBfTkZBR3A4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYN9NWyXr
jUFxUbIGEfBI0GRPbacdgbx+XKI19gT849XmKgAVIudnV/FR6Z/pDBZXJmdy24DS
iuLiWUcGLKipKKRDWQVb7sRQDJKnJfvmkG0i9nTWkh1tS6qgCrCzAuwAkk2Xbcth
8JMpVdWkY8l2Nq6aXM7c/wQ3k22nTJxGtJGlIKFBwRhqJIGWghBqfq4W9CbR5Ygh
ZQScDIctnPSLBdto2Bz2I1eO0Wd35uu0MaEeU88JY/jQXFu+Vvmqbbp2gd6CrqsK
smxsMuzzEbqyzR997OM1UrVrJNMnWLlVlQF+9K3FuhTQjrllOFkmzhl0VGevDl0J
rRiF3Cav7FLhaw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:03 2026 by rpki-client