Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
File: Nv7S1etbPFJmq6phfJYHA8VdB4U.mft (raw, json)
Hash identifier: edbbvr3dBeO6dqdhQnZz9FenoVj/ZNIGwqtuMe2Q+EY=
Subject key identifier: 44:7A:C3:7A:88:D7:A3:AE:FC:D7:2C:86:07:13:CC:CC:62:44:C5:18
Authority key identifier: 36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
Certificate issuer: /CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Certificate serial: 019D277280AC3E7A788C0ACBEF7CEA09372E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:48 +0000
Manifest this update: Thu 26 Mar 2026 00:01:48 +0000
Manifest next update: Fri 27 Mar 2026 00:01:48 +0000
Files and hashes: 1: 4k6D88-Mglvm1b3SeMgt30G2VwI.roa (hash: XMgdcG2fobHQupndrORqC3NlYthXxCSVasK7qXxsXZo=)
2: Nv7S1etbPFJmq6phfJYHA8VdB4U.crl (hash: ylyBU8WpHFCCYkovycu9gbCOK/3Q5C4Rt6ADnnqJd0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:80:ac:3e:7a:78:8c:0a:cb:ef:7c:ea:09:37:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Validity
Not Before: Mar 26 00:01:48 2026 GMT
Not After : Mar 27 00:01:48 2026 GMT
Subject: CN=447ac37a88d7a3aefcd72c860713cccc6244c518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:20:eb:c1:bd:c8:89:45:21:65:e2:22:26:
3a:68:1c:7b:e2:37:3e:5f:5c:95:a7:30:92:56:a4:
e0:30:6f:34:08:27:07:81:64:73:e6:34:5d:8d:97:
db:93:f8:2a:f4:05:9f:6b:b9:47:37:8c:b9:0d:77:
3c:59:84:9f:be:d4:75:d9:27:1f:0d:46:39:95:7c:
6d:32:20:9e:9f:6b:a9:0f:e8:5d:6e:00:b7:a6:82:
61:30:04:81:e0:f7:a1:f3:53:e3:5d:b1:2d:57:88:
8a:33:8d:68:ce:37:69:d4:3a:7f:b7:0d:60:02:59:
8e:41:e3:11:8d:ca:bb:54:93:33:b2:75:da:42:3f:
c8:d2:f6:40:b3:3f:37:20:01:cc:f5:73:e7:bc:96:
46:dc:37:18:a4:b7:ef:a6:cd:05:ee:e9:f7:3d:e9:
8e:b6:ff:98:0e:8f:54:f7:b5:72:ec:8a:3a:48:aa:
b0:e4:6c:8e:13:3b:e0:04:ba:84:01:33:b3:8a:52:
27:9f:53:07:df:df:bb:62:5d:8b:0e:ee:84:ce:e5:
bf:73:d8:bb:d9:cd:9a:d1:03:e1:c3:49:4f:cc:91:
b0:f5:b9:ba:a0:5f:c4:86:65:26:48:b6:cf:5b:45:
65:a3:b5:46:a7:aa:60:73:f2:a5:c2:af:4a:11:43:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7A:C3:7A:88:D7:A3:AE:FC:D7:2C:86:07:13:CC:CC:62:44:C5:18
X509v3 Authority Key Identifier:
keyid:36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1f:9c:7f:b4:86:d2:15:21:3c:2f:62:53:a0:c9:47:a8:3f:
bb:d2:8e:0b:09:44:36:cf:a5:bb:4f:9f:93:f9:e1:8d:f4:6b:
75:4c:cd:37:33:de:df:45:a9:29:c9:68:98:86:25:bb:2d:c8:
06:a5:37:55:bd:07:00:6a:15:9a:33:41:80:6c:9e:42:e1:14:
90:7b:6a:04:e9:ba:a6:b1:5f:c2:cb:e3:c4:88:ac:37:73:d1:
d5:f2:81:9d:78:8a:dc:03:02:e9:da:ce:1d:0d:37:e3:06:d0:
90:73:0e:fe:dc:04:8b:48:80:56:00:51:aa:fc:cd:6a:21:f5:
3f:9a:e1:d3:33:ac:7b:41:5b:31:f9:12:c5:dd:50:e9:6c:b0:
cb:31:c8:aa:78:e5:ce:01:36:5e:6e:a0:01:aa:28:59:6a:03:
27:c9:74:8f:41:33:cd:89:00:30:c1:a4:80:95:68:1d:6a:a2:
33:f3:cc:41:1f:33:a4:46:37:64:75:23:87:9e:90:04:93:8f:
f0:87:a9:31:81:47:f9:bf:44:90:16:62:fd:03:76:12:3f:65:
9f:39:bf:51:06:f3:ff:68:8d:7a:9e:cc:a0:b3:01:39:a7:08:
d5:9c:1e:a7:b7:2f:91:a3:9b:9d:b0:51:73:f8:87:d2:24:aa:
74:23:d6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:30 2026 by rpki-client