Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json)
Hash identifier: k1GYp/TNn9uETtYyqT4EGDJvD4yobG1r0gBr+eqxvaw=
Subject key identifier: E8:E1:6C:99:D1:C9:75:95:B4:AE:92:07:6B:FB:8F:01:43:7A:1F:55
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial: 019D26287B61C27D85822E8E35ECF958C7FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
Manifest number: 03E6
Signing time: Wed 25 Mar 2026 18:01:20 +0000
Manifest this update: Wed 25 Mar 2026 18:01:20 +0000
Manifest next update: Thu 26 Mar 2026 18:01:20 +0000
Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: v+6jGzwR/+G8zj0pJ5ERXuX6sDDTM2wQmFjW8dY+UM8=)
2: wfRbCWoZLVmY8bAvM8RMoZB0PGc.roa (hash: bnGgZ1CdYYmazMBl45x5uGVuKXkwyk8jwkb9FImtueA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:7b:61:c2:7d:85:82:2e:8e:35:ec:f9:58:c7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Validity
Not Before: Mar 25 18:01:20 2026 GMT
Not After : Mar 26 18:01:20 2026 GMT
Subject: CN=e8e16c99d1c97595b4ae92076bfb8f01437a1f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:8e:03:bc:6e:29:8a:64:f0:4e:3b:f5:f4:
b3:8f:3b:08:d4:d0:33:e5:29:72:85:9e:9c:35:67:
b9:08:2d:c5:76:c5:b2:d6:09:fc:00:36:2b:91:3d:
8a:b3:2f:f4:bb:6a:ef:0f:3f:cb:3f:8b:28:25:49:
0c:01:aa:40:dd:e6:68:6b:bf:67:6b:9b:0e:33:b2:
fa:d9:65:14:3a:0b:34:69:d6:5b:a4:28:46:2f:c4:
98:4a:81:12:f6:6d:49:d8:9d:2f:c3:51:cc:be:40:
1c:0a:b5:46:03:c4:6e:2c:c5:98:1c:f9:13:b4:41:
38:2b:9e:80:5c:c4:68:5f:f5:c1:30:6a:f6:43:0c:
65:fe:9b:9f:d2:6c:e0:ba:7f:46:16:c1:94:6e:36:
5a:c2:20:75:32:6d:0d:66:4d:24:af:53:73:6f:b4:
ee:ca:36:b8:69:19:db:7e:3f:ba:d2:85:1a:21:27:
d3:1c:54:1b:5f:fa:e3:b0:71:63:b5:e1:88:2c:70:
a5:7a:6a:e2:69:f9:01:5f:f9:92:5f:a5:f8:a0:f0:
6b:29:62:45:ab:1b:42:09:8c:16:70:da:81:35:5c:
ba:24:6e:24:84:3a:6a:be:f0:9e:5d:3d:cd:96:24:
b1:d0:e8:80:27:7f:af:80:64:92:3e:2e:3b:9b:d8:
24:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E1:6C:99:D1:C9:75:95:B4:AE:92:07:6B:FB:8F:01:43:7A:1F:55
X509v3 Authority Key Identifier:
keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:82:8b:16:c1:88:90:5a:a4:5a:a2:97:8c:ce:b2:3f:f6:5a:
2f:d8:76:a2:e4:42:88:6f:60:28:6b:45:bf:84:ec:dd:6d:e1:
c8:e5:c1:99:b0:ac:e8:0a:26:c6:0d:7e:20:ff:f3:77:6d:22:
87:d3:fe:d5:06:18:5d:b9:f3:62:ed:9c:20:17:fa:26:97:24:
f3:df:e8:db:bb:0f:80:ee:da:a3:58:64:20:d2:a2:3c:0c:68:
7d:da:db:63:f5:f7:8e:cf:43:82:26:8b:87:dc:00:c8:c5:5f:
26:90:da:5a:5f:98:79:70:d4:76:26:45:c2:15:a4:8b:e6:79:
12:0c:39:dc:21:b7:c4:98:b6:c2:bd:c8:54:62:7f:f0:08:a2:
f3:a6:f0:b7:b7:74:ab:b4:53:d5:95:9c:6f:0a:73:f2:b7:16:
e6:5f:26:d3:f4:24:00:bf:7c:41:7c:69:6a:3b:d7:22:22:3e:
f3:35:9d:53:63:c4:39:f6:08:e5:0b:62:9e:10:3d:73:68:ed:
c1:67:1b:72:46:21:18:b6:fc:66:64:3b:01:f6:6a:d5:0d:00:
21:18:5a:6f:9a:3c:2f:9d:69:c7:46:b9:d5:98:55:2d:c6:e6:
b4:70:d6:5e:14:93:16:36:15:3f:70:00:99:0d:da:7d:a8:9d:
14:49:7f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:08 2026 by rpki-client