Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
File: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft (raw, json)
Hash identifier: /OQk7hb4J2+GgZo3B+IxwaMWeAViXAgTjtB+YoK7usY=
Subject key identifier: DB:EC:5E:50:81:86:DF:18:AC:74:75:AC:82:B3:99:6E:14:B0:2D:67
Authority key identifier: 36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
Certificate issuer: /CN=363bd1b29c89edb944e28710d193874c94323eaa
Certificate serial: 019CAD59273DFB4AA62CC84A1B359B6C9DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
Manifest number: 052A
Signing time: Mon 02 Mar 2026 07:00:26 +0000
Manifest this update: Mon 02 Mar 2026 07:00:26 +0000
Manifest next update: Tue 03 Mar 2026 07:00:26 +0000
Files and hashes: 1: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl (hash: 9oqq6zV6NkDyfxNZEHA1tBZoAh6DXDPUSIXSft44UIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:27:3d:fb:4a:a6:2c:c8:4a:1b:35:9b:6c:9d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363bd1b29c89edb944e28710d193874c94323eaa
Validity
Not Before: Mar 2 07:00:26 2026 GMT
Not After : Mar 3 07:00:26 2026 GMT
Subject: CN=dbec5e508186df18ac7475ac82b3996e14b02d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:48:6a:13:90:ef:6b:96:75:9f:7a:c4:a8:
8a:06:08:84:2b:a8:22:dc:a9:c3:e1:6f:0f:33:e7:
53:e0:0f:d2:26:42:13:cd:aa:67:a7:c4:3e:d4:57:
b1:ac:ef:d8:89:aa:4f:02:d8:bc:41:ed:16:ab:44:
7d:7b:bf:59:d9:23:24:6b:7e:27:e3:f2:5b:83:63:
f9:ea:9a:2d:de:87:b3:9c:b1:7e:7e:b5:da:67:48:
8f:dd:d4:b3:66:76:e6:d6:63:5a:ef:33:59:84:c6:
c5:f8:b7:33:0a:51:7d:db:56:87:28:4c:d1:5b:78:
d2:c6:f0:07:e6:91:db:ae:6b:fe:ab:93:a0:e3:49:
48:62:3d:2f:55:96:67:61:6d:75:75:25:62:c6:31:
5a:df:9c:9a:a2:6a:70:85:47:17:a9:2e:f4:30:13:
db:c8:8b:85:f4:8f:bc:ba:1c:d1:9f:b1:3f:85:97:
64:81:07:e2:79:35:de:c0:fe:28:6d:b9:a4:7a:ad:
03:85:e4:32:64:25:75:52:ae:0b:c3:e8:75:1a:13:
e4:d7:f2:0c:34:ee:fa:54:11:7c:0e:a4:a2:3b:e0:
a7:b6:4c:65:f5:7c:5a:84:ef:34:bf:72:dc:21:fa:
30:47:fd:0d:e7:87:0e:ce:39:42:32:55:45:a6:d9:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EC:5E:50:81:86:DF:18:AC:74:75:AC:82:B3:99:6E:14:B0:2D:67
X509v3 Authority Key Identifier:
keyid:36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:45:cd:ca:db:8c:c5:69:e6:49:4b:ae:75:bd:02:c6:62:e7:
0e:3e:24:24:2d:2d:00:e3:88:6c:f0:7d:f3:fc:58:99:fd:5a:
8f:52:da:ea:ca:c1:94:e0:ac:e4:fd:f0:8d:a7:82:f7:13:9c:
e5:32:a4:44:d3:0d:71:47:50:53:af:98:12:f6:53:33:67:42:
ba:5c:5d:6e:6e:36:04:9b:d5:24:f9:ab:b6:cb:26:1d:0b:1c:
fd:b7:e5:b7:c4:36:00:cd:f0:92:a3:6e:fc:b6:f8:1e:77:bb:
06:76:80:9b:5d:c5:ce:7c:c6:70:3d:4c:a6:a3:38:51:10:44:
7d:2e:5b:68:06:24:c7:a9:1c:2c:bc:a2:ca:49:62:18:7f:61:
98:57:00:ef:cc:ff:a5:5a:65:fd:dd:f9:33:40:c1:b3:e7:1d:
88:0d:3e:57:d6:dd:c4:0e:78:42:eb:d7:ca:2d:c1:2f:69:13:
d4:ec:01:2b:07:c3:61:0f:37:0e:5d:b6:c5:91:e8:b4:58:94:
b6:a0:b0:70:d6:be:4d:0b:c2:de:e7:92:c0:f9:4f:f9:c1:70:
2b:d5:77:06:30:b1:5d:60:dc:2c:98:fd:55:46:f8:19:30:80:
12:d4:12:19:d4:0e:ad:e5:d6:02:27:94:e9:60:9c:a0:c2:05:
03:d9:a1:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWSc9+0qmLMhKGzWbbJ2iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2M2JkMWIyOWM4OWVkYjk0NGUyODcxMGQxOTM4NzRjOTQz
MjNlYWEwHhcNMjYwMzAyMDcwMDI2WhcNMjYwMzAzMDcwMDI2WjAzMTEwLwYDVQQD
EyhkYmVjNWU1MDgxODZkZjE4YWM3NDc1YWM4MmIzOTk2ZTE0YjAyZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAZIahOQ72uWdZ96xKiKBgiEK6gi
3KnD4W8PM+dT4A/SJkITzapnp8Q+1FexrO/YiapPAti8Qe0Wq0R9e79Z2SMka34n
4/Jbg2P56pot3oeznLF+frXaZ0iP3dSzZnbm1mNa7zNZhMbF+LczClF921aHKEzR
W3jSxvAH5pHbrmv+q5Og40lIYj0vVZZnYW11dSVixjFa35yaompwhUcXqS70MBPb
yIuF9I+8uhzRn7E/hZdkgQfieTXewP4obbmkeq0DheQyZCV1Uq4Lw+h1GhPk1/IM
NO76VBF8DqSiO+Cntkxl9XxahO80v3LcIfowR/0N54cOzjlCMlVFptnWZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvsXlCBht8YrHR1rIKzmW4UsC1nMB8GA1UdIwQY
MBaAFDY70bKcie25ROKHENGTh0yUMj6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jOTYxYTQtYzZhNi00MmNhLWExOGYt
MTI0NjU4YjM2ZGZkLzEvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jOTYxYTQtYzZhNi00MmNhLWExOGYtMTI0NjU4YjM2ZGZk
LzEvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0XNytuM
xWnmSUuudb0CxmLnDj4kJC0tAOOIbPB98/xYmf1aj1La6srBlOCs5P3wjaeC9xOc
5TKkRNMNcUdQU6+YEvZTM2dCulxdbm42BJvVJPmrtssmHQsc/bflt8Q2AM3wkqNu
/Lb4Hne7BnaAm13FznzGcD1MpqM4URBEfS5baAYkx6kcLLyiykliGH9hmFcA78z/
pVpl/d35M0DBs+cdiA0+V9bdxA54QuvXyi3BL2kT1OwBKwfDYQ83Dl22xZHotFiU
tqCwcNa+TQvC3ueSwPlP+cFwK9V3BjCxXWDcLJj9VUb4GTCAEtQSGdQOreXWAieU
6WCcoMIFA9mhnw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:28 2026 by rpki-client