Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
File: NrVfs00p-WJUUTKgJbUmRP3_v28.mft (raw, json)
Hash identifier: Y1QGRW2/VO2xLGngLEcvvrOfuzXYlUIEzPZIioD4BqM=
Subject key identifier: 08:08:2D:CA:CF:73:F5:82:43:5A:21:9A:B4:6E:50:67:8B:42:A3:A5
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial: 019CAA5876C1D1AEE552F7FC17488E7AF97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
Manifest number: 1423
Signing time: Sun 01 Mar 2026 17:00:50 +0000
Manifest this update: Sun 01 Mar 2026 17:00:50 +0000
Manifest next update: Mon 02 Mar 2026 17:00:50 +0000
Files and hashes: 1: 8Blpmhg56UtYFzHPUGEc8r1tGxk.roa (hash: ZeBRyf2GdsztNKgCVDcLxg6L0hXsn4muZMO3aaOgEDY=)
2: NrVfs00p-WJUUTKgJbUmRP3_v28.crl (hash: EadUREqbGRnvcBe6tNRJfvMZal9suNaA39wMSoPapzI=)
3: kZxYAWzX74NAE37QVjZYwdiy08g.roa (hash: UpUGn6BX93JUf+igiqvnQCmLw41MVtW2FFB1GnAAkLs=)
4: nscX6HThd1wN8UnSg1ZdjqXq-gI.roa (hash: siyWzC01/7D6KwgOGvzUXqq60mfjtP7SOo5lCWwEAqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:76:c1:d1:ae:e5:52:f7:fc:17:48:8e:7a:f9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
Validity
Not Before: Mar 1 17:00:50 2026 GMT
Not After : Mar 2 17:00:50 2026 GMT
Subject: CN=08082dcacf73f582435a219ab46e50678b42a3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:dd:0e:43:65:39:92:a1:e9:59:7a:f1:08:
e8:a0:d6:33:bd:87:c7:a4:04:c5:7b:41:eb:e3:bf:
22:9d:f1:27:50:1f:2f:be:ba:78:ab:0e:b6:cb:07:
f6:ff:19:28:f6:e3:5f:75:b1:88:1f:c8:7e:50:23:
83:32:25:f4:17:a7:d4:60:43:ab:0d:3a:6b:85:ed:
3b:16:40:8e:ab:c6:ab:9a:41:da:66:32:28:59:b3:
0b:57:72:f9:3a:08:35:0b:4d:62:3e:08:f7:8a:aa:
5f:87:05:01:81:ea:78:5a:ba:48:41:54:99:a8:f8:
1c:ce:d0:2d:23:32:29:76:53:b6:38:d0:37:14:1f:
cc:0d:e5:1b:26:4e:53:e1:9c:2e:97:19:1d:87:7f:
10:9c:70:c3:4b:75:59:81:42:3c:e8:21:d4:7b:63:
8f:fa:ee:3b:70:16:07:74:96:5b:ce:1b:00:c2:94:
26:08:14:23:9f:d0:d7:91:20:24:0d:a4:07:07:90:
6e:1a:c2:d4:ff:04:56:96:37:68:1d:49:15:53:4a:
3f:c2:4f:4e:6d:ba:20:54:7d:84:11:b4:f4:54:bb:
ce:25:1c:7a:e5:18:33:25:49:f9:eb:52:97:51:26:
a3:9a:08:5d:df:cf:33:03:9e:3b:7c:00:f2:f0:8b:
ad:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:08:2D:CA:CF:73:F5:82:43:5A:21:9A:B4:6E:50:67:8B:42:A3:A5
X509v3 Authority Key Identifier:
keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:65:28:d9:c8:59:e8:87:47:2b:6b:dd:95:ba:c3:ce:03:aa:
68:d4:a7:00:f6:a9:23:6c:82:ae:d6:4c:64:2c:22:ab:ec:92:
2a:a4:f9:16:b3:e4:ea:53:d7:22:8f:64:ec:bb:c2:09:2c:e3:
48:b1:41:48:b9:d7:dc:a0:f4:d7:0c:14:94:c5:27:cc:46:c9:
79:33:d0:cc:9d:bc:e3:c2:56:dc:02:30:ff:2c:ed:7c:dd:d5:
f5:21:1b:3d:9b:6c:10:8a:1e:e2:38:cc:f3:82:d1:ef:32:74:
81:d6:c2:03:2a:3d:30:8a:b5:c2:f6:2e:4a:30:c8:61:59:3f:
26:09:79:3f:60:b1:ef:82:bf:72:92:52:ac:da:87:36:73:28:
1a:4f:cb:e0:c0:16:8e:f5:bd:8f:93:e6:02:3d:02:c1:60:c0:
a6:0a:8b:04:20:c3:5b:20:7e:6a:5d:30:be:4f:0c:b4:cd:20:
75:c9:cb:dc:b2:0f:4c:b8:32:5e:31:af:92:be:1f:00:2e:78:
74:0d:44:58:b6:89:4e:46:97:a6:c7:fe:70:d4:8b:9c:a5:cb:
be:57:15:7d:0e:93:ef:92:4e:91:3b:f2:43:ea:d1:b5:8b:e4:
3f:66:01:b4:29:27:c7:21:e1:9a:2e:45:51:10:e1:b5:8c:39:
fc:9e:fb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:46 2026 by rpki-client