Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
File: NutRbqkC2WStsqptytmh3A9bfv4.mft (raw, json)
Hash identifier: kk53dF0TavzZAzl18neiZ3cv1M0xTx3QabToiqsXuRk=
Subject key identifier: 5D:98:00:69:BA:CA:FF:C9:2D:68:1E:65:31:74:5F:C4:13:4F:B6:4D
Authority key identifier: 36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
Certificate issuer: /CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Certificate serial: 019DA4C1A89BB0CA7E29D26D9E30DFFF9797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
Manifest number: 1859
Signing time: Sun 19 Apr 2026 08:00:48 +0000
Manifest this update: Sun 19 Apr 2026 08:00:48 +0000
Manifest next update: Mon 20 Apr 2026 08:00:48 +0000
Files and hashes: 1: NutRbqkC2WStsqptytmh3A9bfv4.crl (hash: UHRHQPOGhcSALD9GsYLOfdDwJqqbyzvKRiLig15vXFQ=)
2: YlXedLCyqhXrfS6xWyQ0uTsUI3U.roa (hash: F80TY0fOITpa/Bk+EYhgg41ne6mDHfXgDtH94lguM+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:a8:9b:b0:ca:7e:29:d2:6d:9e:30:df:ff:97:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Validity
Not Before: Apr 19 08:00:48 2026 GMT
Not After : Apr 20 08:00:48 2026 GMT
Subject: CN=5d980069bacaffc92d681e6531745fc4134fb64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:ec:b2:ad:03:1a:4e:1a:47:20:c0:fd:bd:
7e:3a:82:d5:ac:7e:86:61:17:66:6e:74:a4:90:18:
34:78:17:8f:0a:e7:05:c5:07:d3:b7:c0:ad:c4:fa:
1e:f4:85:1a:f3:be:c4:57:2e:55:e5:07:97:90:59:
d0:77:be:24:87:2a:32:1e:1e:9c:1a:b8:f2:81:c2:
67:32:26:fb:61:fd:f1:92:e3:3a:6c:48:fc:4e:17:
f1:6b:d0:40:32:df:a7:a6:2f:d1:e2:14:32:59:44:
0a:70:3d:57:91:7b:c0:09:7e:c4:94:88:5c:d2:af:
2b:17:e9:ff:d0:be:4a:91:bc:41:79:00:95:51:9c:
f7:b3:7c:1e:bc:e3:e2:ad:19:97:b7:ff:e4:6b:d0:
73:c4:20:cf:72:f7:2f:40:3c:af:8c:a2:28:32:3b:
74:41:06:99:34:75:46:62:c7:29:b6:d3:5b:01:8d:
e7:9e:61:35:ba:74:bc:e9:e8:a1:2a:e1:ab:e8:38:
57:6f:d3:02:56:5b:fc:a5:60:a7:90:02:73:c6:72:
d4:c4:6a:07:30:f6:31:9b:3c:82:9f:b6:3e:30:ef:
8c:88:95:a2:a0:f8:88:cd:96:82:a6:85:ae:4b:6e:
c5:7c:05:f6:0b:1c:07:24:1d:9c:84:97:4c:46:e4:
f5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:98:00:69:BA:CA:FF:C9:2D:68:1E:65:31:74:5F:C4:13:4F:B6:4D
X509v3 Authority Key Identifier:
keyid:36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:da:b1:9b:ee:49:8e:f2:ac:5b:f1:05:45:79:70:c4:c7:de:
58:eb:23:f6:06:81:db:aa:91:98:6f:1a:63:4d:96:64:06:3a:
53:9b:df:dd:b6:46:23:b4:84:74:eb:7d:60:e4:a0:21:43:24:
2c:6e:06:b7:cc:ce:96:e4:70:62:c6:d7:66:34:ff:fb:67:9f:
1d:83:88:58:95:61:f1:4c:1c:42:16:ee:97:c1:1e:bc:c1:03:
63:49:94:b1:0f:88:a5:22:a9:34:19:c6:7b:20:60:7c:45:03:
83:6e:d8:88:d3:b1:56:fa:c8:4b:d1:10:79:32:be:2c:f0:49:
e9:ee:ee:4f:51:9b:09:4c:a1:21:71:af:9a:f5:c6:7a:80:25:
77:f0:8b:e4:e1:c9:e1:ee:b0:27:8c:71:d1:f3:a3:77:49:e7:
96:1a:c9:8d:54:6a:50:20:f3:4f:26:c3:e6:6d:36:27:7d:d7:
10:b4:9f:a1:f1:f7:36:e2:ad:ef:89:17:19:a6:f0:c4:27:bf:
57:fc:66:7a:93:74:f8:c1:ad:36:bc:bf:5c:d6:d8:d9:b9:4f:
03:9e:9c:27:a8:9a:54:16:17:a8:0b:cc:ea:e6:55:3f:36:3b:
ee:ce:e0:e4:07:a7:20:ae:cf:d8:2e:d1:f7:87:c8:ea:c7:f2:
f8:49:7f:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kwaibsMp+KdJtnjDf/5eXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZWI1MTZlYTkwMmQ5NjRhZGIyYWE2ZGNhZDlhMWRjMGY1
YjdlZmUwHhcNMjYwNDE5MDgwMDQ4WhcNMjYwNDIwMDgwMDQ4WjAzMTEwLwYDVQQD
Eyg1ZDk4MDA2OWJhY2FmZmM5MmQ2ODFlNjUzMTc0NWZjNDEzNGZiNjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUHssq0DGk4aRyDA/b1+OoLVrH6G
YRdmbnSkkBg0eBePCucFxQfTt8CtxPoe9IUa877EVy5V5QeXkFnQd74khyoyHh6c
GrjygcJnMib7Yf3xkuM6bEj8Thfxa9BAMt+npi/R4hQyWUQKcD1XkXvACX7ElIhc
0q8rF+n/0L5KkbxBeQCVUZz3s3wevOPirRmXt//ka9BzxCDPcvcvQDyvjKIoMjt0
QQaZNHVGYscpttNbAY3nnmE1unS86eihKuGr6DhXb9MCVlv8pWCnkAJzxnLUxGoH
MPYxmzyCn7Y+MO+MiJWioPiIzZaCpoWuS27FfAX2CxwHJB2chJdMRuT1AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2YAGm6yv/JLWgeZTF0X8QTT7ZNMB8GA1UdIwQY
MBaAFDbrUW6pAtlkrbKqbcrZodwPW37+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnV0UmJxa0MyV1N0c3FwdHl0bWgzQTliZnY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yNmM2NzUtZGVmNy00MjMyLTgxMWIt
OGY3NmMzMjkxZmJjLzEvTnV0UmJxa0MyV1N0c3FwdHl0bWgzQTliZnY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8yNmM2NzUtZGVmNy00MjMyLTgxMWItOGY3NmMzMjkxZmJj
LzEvTnV0UmJxa0MyV1N0c3FwdHl0bWgzQTliZnY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdqxm+5J
jvKsW/EFRXlwxMfeWOsj9gaB26qRmG8aY02WZAY6U5vf3bZGI7SEdOt9YOSgIUMk
LG4Gt8zOluRwYsbXZjT/+2efHYOIWJVh8UwcQhbul8EevMEDY0mUsQ+IpSKpNBnG
eyBgfEUDg27YiNOxVvrIS9EQeTK+LPBJ6e7uT1GbCUyhIXGvmvXGeoAld/CL5OHJ
4e6wJ4xx0fOjd0nnlhrJjVRqUCDzTybD5m02J33XELSfofH3NuKt74kXGabwxCe/
V/xmepN0+MGtNry/XNbY2blPA56cJ6iaVBYXqAvM6uZVPzY77s7g5AenIK7P2C7R
94fI6sfy+El/UA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:39:02 2026 by rpki-client