Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
File: NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json)
Hash identifier: 6Dss1RBlHEg207F2Y1IhNrfX0jGTtxC6wiZ4PmyShE0=
Subject key identifier: C5:7E:4E:7B:28:82:BB:F1:D6:CE:81:D0:EA:2D:8C:A0:0B:56:24:6D
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 019D265F1A904165589DBF277F4554C66353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
Manifest number: 148A
Signing time: Wed 25 Mar 2026 19:01:00 +0000
Manifest this update: Wed 25 Mar 2026 19:01:00 +0000
Manifest next update: Thu 26 Mar 2026 19:01:00 +0000
Files and hashes: 1: 3ji0Wlm5mmLR8IrB0SjVb6LKBu8.roa (hash: epu2k++TCBPSDoOcNwdGM1yWxCA7jm2nmD6aInDJWwU=)
2: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: EKE32H/87qXOoNqCoonCIoWp+DDLfffY0ttoCPJuA80=)
3: ki3i4uGb2pymrQuc6PTH8eApHJ0.asa (hash: cR3C02zA8I9gR3Y+/Z+ZCQNWMiMl6ofoAUTqfpPH8v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:1a:90:41:65:58:9d:bf:27:7f:45:54:c6:63:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Mar 25 19:01:00 2026 GMT
Not After : Mar 26 19:01:00 2026 GMT
Subject: CN=c57e4e7b2882bbf1d6ce81d0ea2d8ca00b56246d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:de:af:a1:9d:ab:e0:d2:61:58:88:b9:e5:b4:
a0:a8:1d:77:a8:19:3a:1d:78:16:a9:2c:8f:46:9c:
d0:90:c6:25:ee:db:60:5e:58:84:bc:2e:fd:5f:b9:
ec:2a:68:9b:59:35:4e:43:b9:1b:92:d8:be:6d:cb:
ca:9e:b2:0c:f3:ef:d2:6e:56:f6:9b:69:4d:83:6a:
a0:de:1f:a6:b6:ef:55:98:15:d6:08:38:09:9f:53:
97:f7:30:84:60:74:8f:30:d7:72:fc:b9:c0:42:e2:
12:62:4f:1b:8d:26:1a:42:ae:31:0f:08:2e:ce:3d:
30:c5:c6:f2:0e:9b:1c:1c:9b:e4:e3:1c:bc:b2:56:
4c:dc:03:3c:40:8b:0f:d8:b3:98:d0:b3:1f:7c:a6:
f0:65:ec:10:ce:25:df:ca:6c:79:f5:7f:94:62:1d:
ce:8e:b2:b1:d1:13:ff:7a:1b:28:a6:18:bf:d4:a9:
0a:a9:2d:88:30:39:96:ad:92:5e:87:56:a4:58:4a:
17:7b:90:e1:30:6e:ac:1f:e5:ab:cf:c2:98:e2:d2:
44:ec:10:5d:12:b2:1a:11:64:0a:f4:9d:b7:fb:dd:
2e:94:68:af:0b:3a:59:b6:7f:5e:cc:3b:10:88:3c:
41:6b:b3:7f:e4:4c:34:ef:72:cb:29:14:2d:53:00:
bb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7E:4E:7B:28:82:BB:F1:D6:CE:81:D0:EA:2D:8C:A0:0B:56:24:6D
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5f:c4:db:65:85:87:bb:07:e5:a2:1c:a0:b1:fc:74:fb:0f:
cf:e1:21:e0:cf:7c:9a:6f:7b:68:3c:61:6f:ba:cc:1d:d6:85:
22:26:e7:40:37:74:7f:d1:99:88:90:f3:18:12:77:c4:31:11:
5c:ad:11:82:a5:e6:0c:74:80:92:9a:bd:32:cb:d1:7e:56:62:
ab:10:cb:74:85:a7:72:b5:ec:61:ee:8e:ff:18:ce:99:63:26:
02:2c:91:4e:25:0d:58:e4:c8:85:55:53:04:c9:30:5e:42:59:
09:31:88:1e:2b:74:65:8d:7e:cd:d4:84:a1:1d:05:e1:3f:2e:
d0:77:71:80:dd:8a:f2:07:6d:6b:02:5c:da:96:92:ab:40:21:
b1:00:16:18:c6:df:e1:1d:50:95:ca:67:25:f7:57:46:1a:fa:
a3:45:33:aa:ea:49:87:36:0a:4b:93:49:8e:55:32:49:3c:ef:
a6:16:29:72:69:ba:6f:5a:68:ba:0c:ed:b8:77:bf:98:54:20:
3a:87:d1:e1:fe:6f:22:13:10:8c:7d:da:f1:9a:70:7a:ba:40:
aa:7f:af:31:0c:81:17:f1:aa:63:1f:b7:a6:52:2a:ec:22:04:
27:3f:b0:a7:11:74:3a:8f:40:df:20:72:49:46:6b:bc:44:88:
ce:ce:3d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:37:06 2026 by rpki-client