Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
File: NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft (raw, json)
Hash identifier: 0LjfzWpRfOP8deomDMTEWvS0yYWdH8QxgXe7I4q4Wug=
Subject key identifier: A2:7F:03:BF:B5:EC:6F:52:CD:37:77:93:60:62:11:1D:82:81:6E:6C
Authority key identifier: 34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E
Certificate issuer: /CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
Certificate serial: 019D984FE0EF99CD2936109C0679A5DC4C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
Manifest number: 14A1
Signing time: Thu 16 Apr 2026 22:01:04 +0000
Manifest this update: Thu 16 Apr 2026 22:01:04 +0000
Manifest next update: Fri 17 Apr 2026 22:01:04 +0000
Files and hashes: 1: NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl (hash: iu0BoBk+oUvFrfBrSdktwrGilD012MiKmGRW96syHgc=)
2: yLkWfOZ9pwRHBarKKNZ4fHLFIcc.roa (hash: svQPIicQF6L4iRCTdIy2JhuS8+4OxhvfXxWW++0FFdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:e0:ef:99:cd:29:36:10:9c:06:79:a5:dc:4c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
Validity
Not Before: Apr 16 22:01:04 2026 GMT
Not After : Apr 17 22:01:04 2026 GMT
Subject: CN=a27f03bfb5ec6f52cd3777936062111d82816e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:a2:4a:b7:b0:64:d5:77:c1:59:e8:8b:ef:
dd:83:a7:32:64:5c:8a:2d:78:7d:16:04:4a:01:a4:
f5:cf:8d:ed:47:b0:88:cd:5c:09:01:6c:97:7c:2d:
a1:26:95:0f:ff:9a:c4:2b:9f:e2:2f:4d:8d:96:83:
2b:16:b6:5f:64:8a:03:4c:a3:16:1c:76:d8:96:e4:
4c:b5:83:68:11:44:b8:9d:c8:5e:ad:00:8e:27:d1:
59:71:70:27:23:3c:4b:21:2e:99:6e:b6:d9:1b:66:
f0:bf:53:7e:a8:32:ed:1c:4c:65:a0:3d:0e:f2:6c:
0d:d0:ab:1d:be:bb:45:37:c9:dd:55:d6:ad:67:56:
63:28:31:38:e0:0f:a7:81:b5:88:7d:2f:1b:79:c1:
b4:3c:0c:56:cd:33:0b:3c:a8:21:f2:ae:cc:cd:22:
b0:52:81:fe:13:54:48:26:58:e7:58:fb:4e:eb:4a:
9f:a1:7d:2c:ac:31:73:84:b4:e1:fe:d2:5f:88:81:
41:93:70:70:0c:8b:7f:01:2a:95:df:c3:2c:6d:30:
e9:c7:12:93:30:cd:76:2e:6f:92:bc:42:29:44:f4:
41:17:99:33:db:d4:39:03:4e:b9:b5:e0:d8:67:a6:
b4:c9:12:42:bb:b0:11:ce:4b:e3:af:12:14:29:1f:
a3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7F:03:BF:B5:EC:6F:52:CD:37:77:93:60:62:11:1D:82:81:6E:6C
X509v3 Authority Key Identifier:
keyid:34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:90:c9:cd:4b:ae:06:e5:76:53:e8:b8:74:74:4c:fe:b8:cc:
c4:fb:52:c1:88:20:69:a7:43:7d:12:9b:40:68:d2:dd:bd:69:
43:c1:3d:62:22:2e:7a:54:64:04:65:55:21:f7:a5:01:4b:78:
98:f2:2a:50:54:41:f5:ad:5d:d5:64:19:e8:26:17:9b:88:a9:
0c:96:e3:40:3b:75:3c:23:19:fe:16:41:e5:c9:f3:44:48:c9:
3a:96:15:39:26:19:51:05:e7:b5:e1:2c:d4:21:46:7b:4e:82:
29:f2:a8:f4:3e:a5:e6:70:e6:62:dc:e6:db:3d:c0:e2:f7:8d:
25:75:34:46:0f:8c:3a:b9:8e:df:38:95:c6:cb:cb:57:94:47:
53:53:d9:9e:ef:c9:27:21:78:56:e6:80:02:dc:d4:6e:6d:88:
f9:f8:47:5d:d4:b5:a8:5a:53:ed:7d:52:be:4b:53:aa:54:27:
87:b1:66:49:4b:02:06:35:c7:4e:9d:08:d6:1e:07:cc:03:72:
f7:84:fe:df:31:44:2d:16:3f:2a:7e:c9:52:e3:e2:e0:33:3d:
85:8f:81:57:ca:f9:33:fb:bc:f5:31:5d:06:72:0e:99:a7:e8:
69:49:2f:3e:0d:b8:fd:9b:73:de:27:11:96:9b:5d:85:04:5d:
7c:1f:6b:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT+Dvmc0pNhCcBnml3ExFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZGRjYmM4ZjYxYjI2MGZkM2YzZTc4YjZiODY4NzdjYjk1
ZmQ4M2UwHhcNMjYwNDE2MjIwMTA0WhcNMjYwNDE3MjIwMTA0WjAzMTEwLwYDVQQD
EyhhMjdmMDNiZmI1ZWM2ZjUyY2QzNzc3OTM2MDYyMTExZDgyODE2ZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApReiSrewZNV3wVnoi+/dg6cyZFyK
LXh9FgRKAaT1z43tR7CIzVwJAWyXfC2hJpUP/5rEK5/iL02NloMrFrZfZIoDTKMW
HHbYluRMtYNoEUS4ncherQCOJ9FZcXAnIzxLIS6ZbrbZG2bwv1N+qDLtHExloD0O
8mwN0KsdvrtFN8ndVdatZ1ZjKDE44A+ngbWIfS8becG0PAxWzTMLPKgh8q7MzSKw
UoH+E1RIJljnWPtO60qfoX0srDFzhLTh/tJfiIFBk3BwDIt/ASqV38MsbTDpxxKT
MM12Lm+SvEIpRPRBF5kz29Q5A065teDYZ6a0yRJCu7ARzkvjrxIUKR+jWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJ/A7+17G9SzTd3k2BiER2CgW5sMB8GA1UdIwQY
MBaAFDTdy8j2GyYP0/Pni2uGh3y5X9g+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk4zTHlQWWJKZ19UOC1lTGE0YUhmTGxmMkQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82NTA4YTEtNDQxMi00MGM3LThhNzIt
NTJjZDZlODlhYThkLzEvTk4zTHlQWWJKZ19UOC1lTGE0YUhmTGxmMkQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC82NTA4YTEtNDQxMi00MGM3LThhNzItNTJjZDZlODlhYThk
LzEvTk4zTHlQWWJKZ19UOC1lTGE0YUhmTGxmMkQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJDJzUuu
BuV2U+i4dHRM/rjMxPtSwYggaadDfRKbQGjS3b1pQ8E9YiIuelRkBGVVIfelAUt4
mPIqUFRB9a1d1WQZ6CYXm4ipDJbjQDt1PCMZ/hZB5cnzREjJOpYVOSYZUQXnteEs
1CFGe06CKfKo9D6l5nDmYtzm2z3A4veNJXU0Rg+MOrmO3ziVxsvLV5RHU1PZnu/J
JyF4VuaAAtzUbm2I+fhHXdS1qFpT7X1SvktTqlQnh7FmSUsCBjXHTp0I1h4HzANy
94T+3zFELRY/Kn7JUuPi4DM9hY+BV8r5M/u89TFdBnIOmafoaUkvPg24/Ztz3icR
lptdhQRdfB9r1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:33:29 2026 by rpki-client