Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
File: Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft (raw, json)
Hash identifier: 85yD6XGIhZlGaOcVI3mhx7y0JM69aQ2iDPmK+1DqpIc=
Subject key identifier: 03:60:03:F8:C1:68:24:76:AC:AD:05:78:93:E6:A0:FA:93:3A:6C:22
Authority key identifier: 36:3E:43:7F:6B:68:34:B0:84:74:7E:AF:76:D8:D2:60:A7:9B:FC:8B
Certificate issuer: /CN=363e437f6b6834b084747eaf76d8d260a79bfc8b
Certificate serial: 019FA8622DF658E46776CDC5BA1558FACFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj5Df2toNLCEdH6vdtjSYKeb_Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
Manifest number: 9D
Signing time: Tue 28 Jul 2026 11:00:34 +0000
Manifest this update: Tue 28 Jul 2026 11:00:34 +0000
Manifest next update: Wed 29 Jul 2026 11:00:34 +0000
Files and hashes: 1: Nj5Df2toNLCEdH6vdtjSYKeb_Is.crl (hash: 6t/2M+ipdyUN0/ogklr9y6Rw8iKhEaFI9kFMUOMOO0I=)
2: QTwY7hZ5jhbuRgKMO0Ou2fKamBU.asa (hash: AlP7J188PqhkPU3RkVEeK3sJgESC4Fbnn4Z98OFzkN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj5Df2toNLCEdH6vdtjSYKeb_Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:2d:f6:58:e4:67:76:cd:c5:ba:15:58:fa:cf:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363e437f6b6834b084747eaf76d8d260a79bfc8b
Validity
Not Before: Jul 28 11:00:34 2026 GMT
Not After : Jul 29 11:00:34 2026 GMT
Subject: CN=036003f8c1682476acad057893e6a0fa933a6c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:d9:3e:11:d7:44:cf:bc:ba:62:ab:3e:33:
e3:52:94:e3:d6:57:15:bd:86:fb:80:bc:59:f4:8b:
5e:46:3f:eb:12:47:9a:5a:8b:55:e1:66:19:91:b4:
4f:06:53:20:eb:a1:d7:96:70:76:ef:c6:8a:c2:d8:
16:45:ef:cb:ec:bc:8a:b5:02:64:d8:d9:39:f5:fa:
01:36:d6:76:6d:05:f0:6c:b3:e5:df:ab:8f:5f:5c:
a0:dc:8b:b3:cd:e9:ed:bd:4f:61:c3:49:73:ef:3e:
73:d5:6a:6a:b6:35:4d:cc:a1:fc:45:da:8f:bb:13:
6b:1b:d7:3e:f3:82:81:a2:fd:87:2e:d0:50:f5:b2:
a4:81:33:cd:e4:83:57:4e:64:f2:37:ab:44:ce:5a:
18:11:c2:63:29:67:72:bb:f0:eb:d8:02:f6:94:b4:
5e:9d:7a:a2:0b:16:37:c1:ad:4b:0f:10:29:3e:1a:
db:a2:af:f7:93:f5:52:8c:54:45:19:c0:a1:69:b2:
d7:2e:c2:b3:68:f2:89:2b:de:fe:0e:26:6f:92:de:
dd:0b:9b:8e:07:99:f5:0e:ad:94:8b:a0:6b:fc:84:
f9:86:9d:82:e4:9b:d0:c5:7a:07:de:35:7e:ec:cc:
0b:69:5b:ce:01:25:a3:4a:78:55:63:04:c2:d8:1d:
d4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:60:03:F8:C1:68:24:76:AC:AD:05:78:93:E6:A0:FA:93:3A:6C:22
X509v3 Authority Key Identifier:
keyid:36:3E:43:7F:6B:68:34:B0:84:74:7E:AF:76:D8:D2:60:A7:9B:FC:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj5Df2toNLCEdH6vdtjSYKeb_Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e1:b6:d2:db:a1:9d:2c:7e:79:3a:c2:b7:9f:1d:78:66:93:
b5:d9:55:10:61:f6:ef:12:22:c3:3e:be:0c:39:08:5d:96:7b:
54:45:0f:69:9c:8a:e9:12:b9:aa:6b:24:74:e6:6a:86:f8:e2:
c1:54:b3:e3:e7:96:c4:8f:66:fb:96:d4:fb:fa:6c:4c:3f:04:
07:41:98:77:65:f0:52:94:53:de:b2:69:9a:84:1d:23:53:73:
37:48:b8:81:08:88:af:5b:92:be:e6:06:09:58:c0:26:95:af:
e6:1d:42:27:7c:00:85:11:9a:fa:6d:67:f0:fc:a2:e4:e1:10:
8e:f4:07:42:a0:fb:cc:16:3b:50:fd:3c:bb:51:13:ae:2b:3b:
ec:5f:e1:36:48:d0:d3:41:f3:f0:bc:f0:54:06:31:c2:04:38:
af:8b:de:7b:2b:14:3a:86:7a:1f:3d:bd:11:28:3c:52:cc:7f:
be:1b:e0:9e:58:0f:8b:de:98:c4:af:ef:af:c5:b7:c9:36:18:
e6:1c:ad:7e:4b:f5:f2:32:2b:c6:7f:3f:9e:fc:b7:2a:d3:2c:
a6:22:b6:aa:38:6b:e4:64:df:64:95:30:fd:d2:b4:83:7d:42:
fa:e5:81:d0:cb:cd:78:eb:0e:89:fb:f8:ce:4b:0e:c2:e8:9f:
e8:22:3a:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oYi32WORnds3FuhVY+s+5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2M2U0MzdmNmI2ODM0YjA4NDc0N2VhZjc2ZDhkMjYwYTc5
YmZjOGIwHhcNMjYwNzI4MTEwMDM0WhcNMjYwNzI5MTEwMDM0WjAzMTEwLwYDVQQD
EygwMzYwMDNmOGMxNjgyNDc2YWNhZDA1Nzg5M2U2YTBmYTkzM2E2YzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz3ZPhHXRM+8umKrPjPjUpTj1lcV
vYb7gLxZ9IteRj/rEkeaWotV4WYZkbRPBlMg66HXlnB278aKwtgWRe/L7LyKtQJk
2Nk59foBNtZ2bQXwbLPl36uPX1yg3IuzzentvU9hw0lz7z5z1WpqtjVNzKH8RdqP
uxNrG9c+84KBov2HLtBQ9bKkgTPN5INXTmTyN6tEzloYEcJjKWdyu/Dr2AL2lLRe
nXqiCxY3wa1LDxApPhrboq/3k/VSjFRFGcChabLXLsKzaPKJK97+DiZvkt7dC5uO
B5n1Dq2Ui6Br/IT5hp2C5JvQxXoH3jV+7MwLaVvOASWjSnhVYwTC2B3U0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANgA/jBaCR2rK0FeJPmoPqTOmwiMB8GA1UdIwQY
MBaAFDY+Q39raDSwhHR+r3bY0mCnm/yLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmo1RGYydG9OTENFZEg2dmR0alNZS2ViX0lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yN2QxMWItMWIyOC00Y2Y5LTgxN2Qt
ZDFjYmZhODE0MmZlLzEvTmo1RGYydG9OTENFZEg2dmR0alNZS2ViX0lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8yN2QxMWItMWIyOC00Y2Y5LTgxN2QtZDFjYmZhODE0MmZl
LzEvTmo1RGYydG9OTENFZEg2dmR0alNZS2ViX0lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuG20tuh
nSx+eTrCt58deGaTtdlVEGH27xIiwz6+DDkIXZZ7VEUPaZyK6RK5qmskdOZqhvji
wVSz4+eWxI9m+5bU+/psTD8EB0GYd2XwUpRT3rJpmoQdI1NzN0i4gQiIr1uSvuYG
CVjAJpWv5h1CJ3wAhRGa+m1n8Pyi5OEQjvQHQqD7zBY7UP08u1ETris77F/hNkjQ
00Hz8LzwVAYxwgQ4r4veeysUOoZ6Hz29ESg8Usx/vhvgnlgPi96YxK/vr8W3yTYY
5hytfkv18jIrxn8/nvy3KtMspiK2qjhr5GTfZJUw/dK0g31C+uWB0MvNeOsOifv4
zksOwuif6CI68A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:57:59 2026 by rpki-client