Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
File: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft (raw, json)
Hash identifier: JGjWqUD8iPIBNHszQTq/LUBHpkM+BN8jd4NXkbhjOI0=
Subject key identifier: C4:A0:B6:B5:42:A1:B9:55:D7:7F:DA:3E:4A:6D:93:1D:26:6F:A2:1C
Authority key identifier: 36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
Certificate issuer: /CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Certificate serial: 019D9DAD3C0E10C4259B22F76189477D054F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
Manifest number: 12CF
Signing time: Fri 17 Apr 2026 23:01:09 +0000
Manifest this update: Fri 17 Apr 2026 23:01:09 +0000
Manifest next update: Sat 18 Apr 2026 23:01:09 +0000
Files and hashes: 1: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl (hash: 7XB8wyFHIvhB0t9Rg3GHY9zdHVp1j4q/C/qpbIHR+Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:3c:0e:10:c4:25:9b:22:f7:61:89:47:7d:05:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Validity
Not Before: Apr 17 23:01:09 2026 GMT
Not After : Apr 18 23:01:09 2026 GMT
Subject: CN=c4a0b6b542a1b955d77fda3e4a6d931d266fa21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7a:18:7d:5f:86:90:b0:df:4e:c8:c1:e3:10:
7f:e1:bb:5f:ff:8b:de:5b:a0:fc:03:f9:2d:20:f6:
88:8f:ea:a7:9e:57:ef:e9:ce:ad:e1:4c:0b:62:e1:
f8:cc:32:b5:b0:6d:5e:02:a2:02:3f:70:ff:2e:eb:
e3:5e:f7:e7:92:c1:ed:6f:86:76:c2:00:c0:36:33:
fb:f1:28:35:0c:04:f5:8a:8b:53:44:c9:1e:db:55:
1f:30:e4:cd:84:89:69:a3:e3:5e:ce:52:cb:c0:50:
44:7a:fd:a1:1d:f5:fd:d1:80:76:04:db:a6:4d:50:
cc:f8:4e:a5:ee:08:6b:b0:c9:d8:e6:d4:ee:f4:d0:
0f:c4:e3:12:38:09:5d:e6:61:2f:36:a1:c8:a8:a6:
d8:22:81:43:45:cc:c7:18:b3:b9:8a:a6:ec:66:9a:
3e:35:1f:29:db:e9:d7:f2:6b:7e:50:83:80:8d:ef:
69:bc:b4:f1:df:a8:e4:19:99:2a:d4:c6:00:e1:dd:
7d:b8:85:64:88:71:77:0e:f7:3e:89:3b:f4:1d:d4:
95:c7:6b:07:52:fc:57:82:0a:51:42:51:e3:6d:e6:
1c:29:e2:e1:02:a9:13:5a:95:7c:e4:3a:d7:ce:42:
80:09:ea:d3:cc:55:e4:58:b1:b4:7c:1f:54:3c:17:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A0:B6:B5:42:A1:B9:55:D7:7F:DA:3E:4A:6D:93:1D:26:6F:A2:1C
X509v3 Authority Key Identifier:
keyid:36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7b:89:92:f5:3a:7b:34:07:49:c7:06:e9:2d:8e:37:11:c2:
bb:4a:7f:66:32:74:c3:37:da:da:bd:62:db:b2:1d:4c:f6:86:
a5:f1:e1:f6:66:c6:af:6c:ff:c2:c2:cf:e8:f4:43:8b:c1:8d:
ce:38:5c:97:7e:ea:a5:56:46:4f:e1:ec:91:b8:7f:19:14:4c:
7d:f0:5d:4d:06:15:e6:22:40:4a:11:7d:76:93:5c:09:5e:b4:
a1:4b:0e:4d:16:7f:83:1a:26:ad:18:c3:fb:f7:e7:1b:86:1c:
01:54:97:40:a0:25:0d:93:c6:7f:62:2e:69:85:88:13:d4:c2:
6e:a3:4b:bb:0e:ed:86:df:79:97:ff:ec:dc:4b:73:f7:3d:ea:
03:6b:a4:ef:a8:71:a3:82:a3:c3:a4:57:e4:76:ff:6a:f6:ee:
2e:dd:2f:5d:7b:9c:ad:a7:32:5e:2a:82:ef:b2:b1:15:61:8d:
7d:8f:2e:64:39:23:0e:73:2a:68:9e:72:1b:94:ab:f8:b4:5a:
c9:30:45:36:20:40:08:13:37:49:ad:1c:1d:31:8d:4d:c4:ea:
03:2c:fe:2f:e6:9c:45:cd:b9:36:ba:36:f8:ba:ff:a3:93:8d:
42:b7:ee:fc:d7:bc:03:5b:f6:c1:07:bf:21:0d:3a:aa:56:bc:
5f:f1:5a:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2drTwOEMQlmyL3YYlHfQVPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZDhjMWE3M2IxNTk1MTA5ZDI2MDY3YjQyOTFmNzFkYzFk
Yjk5NTcwHhcNMjYwNDE3MjMwMTA5WhcNMjYwNDE4MjMwMTA5WjAzMTEwLwYDVQQD
EyhjNGEwYjZiNTQyYTFiOTU1ZDc3ZmRhM2U0YTZkOTMxZDI2NmZhMjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HoYfV+GkLDfTsjB4xB/4btf/4ve
W6D8A/ktIPaIj+qnnlfv6c6t4UwLYuH4zDK1sG1eAqICP3D/LuvjXvfnksHtb4Z2
wgDANjP78Sg1DAT1iotTRMke21UfMOTNhIlpo+NezlLLwFBEev2hHfX90YB2BNum
TVDM+E6l7ghrsMnY5tTu9NAPxOMSOAld5mEvNqHIqKbYIoFDRczHGLO5iqbsZpo+
NR8p2+nX8mt+UIOAje9pvLTx36jkGZkq1MYA4d19uIVkiHF3Dvc+iTv0HdSVx2sH
UvxXggpRQlHjbeYcKeLhAqkTWpV85DrXzkKACerTzFXkWLG0fB9UPBf4gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSgtrVCoblV13/aPkptkx0mb6IcMB8GA1UdIwQY
MBaAFDbYwac7FZUQnSYGe0KR9x3B25lXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnRqQnB6c1ZsUkNkSmdaN1FwSDNIY0hibVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lZWNjYTUtYzMzOS00OTE4LWEwYTgt
ZjYxZWM4NWQwZjU3LzEvTnRqQnB6c1ZsUkNkSmdaN1FwSDNIY0hibVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lZWNjYTUtYzMzOS00OTE4LWEwYTgtZjYxZWM4NWQwZjU3
LzEvTnRqQnB6c1ZsUkNkSmdaN1FwSDNIY0hibVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXuJkvU6
ezQHSccG6S2ONxHCu0p/ZjJ0wzfa2r1i27IdTPaGpfHh9mbGr2z/wsLP6PRDi8GN
zjhcl37qpVZGT+Hskbh/GRRMffBdTQYV5iJAShF9dpNcCV60oUsOTRZ/gxomrRjD
+/fnG4YcAVSXQKAlDZPGf2IuaYWIE9TCbqNLuw7tht95l//s3Etz9z3qA2uk76hx
o4Kjw6RX5Hb/avbuLt0vXXucracyXiqC77KxFWGNfY8uZDkjDnMqaJ5yG5Sr+LRa
yTBFNiBACBM3Sa0cHTGNTcTqAyz+L+acRc25Nro2+Lr/o5ONQrfu/Ne8A1v2wQe/
IQ06qla8X/FasQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:16:57 2026 by rpki-client