Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json)
Hash identifier: M9qMzzH0Mq8JSWXbH/6jvD+jSPKdkLRvyn8HwHRem1E=
Subject key identifier: 47:32:3E:48:F8:87:5E:D1:CB:E5:F8:09:1F:2E:39:31:E6:4F:91:C2
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial: 019E1D59538FC869011F872CAA76D7368E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
Manifest number: 0466
Signing time: Tue 12 May 2026 18:00:53 +0000
Manifest this update: Tue 12 May 2026 18:00:53 +0000
Manifest next update: Wed 13 May 2026 18:00:53 +0000
Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: +8Cez84Rv+RGal/zfizJy98v8z4EMdQ3xRJseoHcXlo=)
2: wfRbCWoZLVmY8bAvM8RMoZB0PGc.roa (hash: bnGgZ1CdYYmazMBl45x5uGVuKXkwyk8jwkb9FImtueA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:53:8f:c8:69:01:1f:87:2c:aa:76:d7:36:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Validity
Not Before: May 12 18:00:53 2026 GMT
Not After : May 13 18:00:53 2026 GMT
Subject: CN=47323e48f8875ed1cbe5f8091f2e3931e64f91c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:7c:65:4d:6f:89:a4:c8:04:35:67:12:ab:91:
9d:a6:f9:fe:da:11:27:26:14:e4:66:48:c1:46:0b:
73:34:6b:49:56:ce:27:b0:b5:77:09:6d:23:b3:be:
f9:d7:75:35:0e:1c:95:2d:53:3d:c1:17:cc:44:ae:
c0:3d:c0:17:8d:6d:0e:d5:ca:f9:a2:fd:56:8b:e1:
f9:15:bc:5c:97:41:2d:b2:14:c0:f1:fe:ff:6c:c2:
1a:31:37:28:f1:27:1f:12:34:11:94:c8:9a:03:60:
c0:c3:a8:19:34:5f:21:56:1e:3b:97:c1:f3:13:72:
2c:6c:46:97:d1:c3:4b:2d:0e:f2:03:05:8a:33:d0:
b5:c9:21:e4:62:77:94:bc:2c:93:4e:43:79:35:3d:
c3:56:b2:7b:ab:57:90:12:b7:8a:79:fe:d7:4f:70:
9a:5d:9d:92:84:76:be:ce:11:49:31:07:38:31:8d:
b1:33:0a:65:ac:10:88:b5:c1:2b:c7:7b:c7:be:8c:
0e:a1:a0:0d:2f:a3:1c:93:68:e6:82:e8:7b:75:a6:
42:dc:c6:2b:7f:d6:5d:8c:30:fd:c5:ed:87:39:63:
90:91:f5:8b:cf:9f:52:8b:1a:cc:ac:aa:56:2d:bb:
bb:5b:0e:9e:e2:c5:7a:c6:a7:87:58:22:fc:ac:69:
70:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:32:3E:48:F8:87:5E:D1:CB:E5:F8:09:1F:2E:39:31:E6:4F:91:C2
X509v3 Authority Key Identifier:
keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:00:8b:a3:f0:cd:03:54:94:75:09:1d:05:83:05:e2:01:55:
be:a0:db:93:fb:ee:2d:0f:63:6d:75:f4:21:dd:27:55:4e:dd:
91:27:b1:5b:38:af:f6:60:cb:a5:b3:61:9e:56:fe:1e:50:bd:
db:4f:6b:a7:8a:b3:ec:03:f4:4e:5c:e5:bb:84:04:27:3f:c7:
93:2a:b5:14:82:81:43:ec:45:df:d9:8c:1d:43:c0:b0:b2:d4:
8f:17:09:91:f9:54:d9:26:2a:07:22:69:ed:4a:dd:88:09:a0:
d1:31:a5:4d:97:76:5b:84:36:4b:22:70:23:2b:ca:78:9a:b1:
0b:22:fe:45:04:2e:80:7f:70:18:bf:9f:28:f9:85:4d:70:21:
a3:1b:44:7b:c4:38:a1:d6:9c:73:68:29:97:43:40:49:9f:d6:
a4:40:81:2c:db:c7:7e:fd:6e:c7:47:14:0d:92:19:b9:9a:81:
14:04:f7:b1:06:c5:06:e0:b3:dd:91:98:74:fc:f0:68:b7:c5:
6f:46:5e:6d:65:df:b6:7f:18:52:c3:8a:75:2b:4f:28:d5:f0:
a2:d0:4a:fc:81:70:fd:f7:ca:e8:99:06:15:03:c1:96:be:f2:
f8:4e:e6:45:b5:cd:de:a5:58:13:2d:76:f6:4b:e0:24:df:e8:
b3:88:26:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:19 2026 by rpki-client