Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: UDJlwSxkbdPjODTryguHgWlUOvOyePNYprfO3GE840w=
Subject key identifier: E2:FC:18:F3:6C:65:04:CD:D6:4C:32:01:86:3C:DE:5E:1A:25:51:96
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 019CABD8FD30E88048C760714A04D25CD72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 0F27
Signing time: Mon 02 Mar 2026 00:00:50 +0000
Manifest this update: Mon 02 Mar 2026 00:00:50 +0000
Manifest next update: Tue 03 Mar 2026 00:00:50 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: q4nDxvxR6U0uJTtkgxLnoSzkVXxSCNJ2Hz1xvK4+x/4=)
2: d4grg2tvuefsoHmD0ZdaVonf75c.roa (hash: OXvdnvF2UW52gDEgFTfQ3VspznPh5gZEegyP1xQRgjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:fd:30:e8:80:48:c7:60:71:4a:04:d2:5c:d7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Mar 2 00:00:50 2026 GMT
Not After : Mar 3 00:00:50 2026 GMT
Subject: CN=e2fc18f36c6504cdd64c3201863cde5e1a255196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:ba:cd:ec:8f:bf:7e:f7:c5:e8:ea:75:fb:
ba:52:55:6e:07:f6:9c:ab:b6:0f:02:03:1d:8d:6e:
9f:15:f2:40:39:29:0e:c0:85:ad:c3:47:5f:72:68:
32:25:41:4c:22:ce:c6:5f:d5:da:71:55:d0:12:ca:
1d:54:fd:72:a0:f2:b1:1d:99:23:d8:bf:f6:42:bb:
bb:1c:ce:53:2f:08:d6:30:ba:fa:fe:18:aa:8f:58:
90:ec:cb:bb:12:a3:37:47:9d:a8:53:1d:bd:e3:9a:
0f:14:b1:a1:8e:58:26:b7:90:d0:a6:99:54:6f:b0:
b3:26:30:8a:d5:ee:48:8b:b1:c7:a5:4f:99:be:16:
ed:ca:6a:a9:d2:e8:bd:ab:35:92:60:37:e1:34:e9:
50:21:94:9c:f1:74:f2:70:e1:1d:fb:3a:be:e6:fb:
b0:30:e4:32:99:90:c7:cb:bf:b4:db:5f:de:bd:60:
94:cf:6e:5a:9c:92:99:7d:d4:52:51:15:2e:d3:b6:
8f:05:db:4e:36:30:d8:a3:7f:1d:0b:a4:7e:51:40:
d7:24:a2:85:de:85:3b:97:f8:91:76:fe:ac:c3:6e:
17:5c:d6:46:ea:60:b8:65:15:d5:92:06:f2:b9:63:
1f:bc:03:6e:7e:a0:eb:83:3d:1a:ca:d3:a0:a1:c1:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FC:18:F3:6C:65:04:CD:D6:4C:32:01:86:3C:DE:5E:1A:25:51:96
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:40:22:e9:4d:31:dd:97:8a:62:48:04:79:fc:28:c9:8f:4c:
95:4a:cc:d2:f3:4f:16:d6:c3:4f:7b:a1:43:be:a8:26:88:73:
52:5c:6b:57:78:1b:ff:bd:ca:0c:80:21:58:15:7b:d0:95:9a:
98:3e:0b:9d:27:fc:15:83:2c:2c:f6:1c:7a:dd:a7:30:a2:9c:
43:d2:5a:65:68:83:aa:8a:53:be:db:fb:72:15:f9:2b:8c:35:
a5:8b:8e:e7:8f:82:0a:30:1b:a3:61:d1:cc:ab:f3:22:32:eb:
9b:b6:88:f5:39:1b:bf:52:ab:f6:16:a2:80:40:2d:81:ec:97:
c8:dd:3c:6f:30:3a:9f:ff:5d:27:c9:38:47:c8:4d:46:e4:5a:
85:1e:ab:94:aa:23:c9:23:6d:a8:82:2d:2c:9e:90:c3:8c:55:
67:52:64:cc:95:38:a3:05:d4:91:44:f3:a4:74:49:11:3a:46:
3e:b7:fe:01:24:cf:44:e2:7d:33:75:8d:fa:09:de:30:56:3f:
df:1c:a8:91:69:cb:1a:35:51:cd:90:3c:e6:ab:85:97:a6:4b:
da:bf:9a:aa:98:a9:a6:13:92:cd:aa:6f:73:80:1b:6f:22:6a:
d9:c2:c3:79:1f:63:e5:fe:d6:29:23:7d:f2:be:a7:13:3f:24:
a7:11:5d:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2P0w6IBIx2BxSgTSXNcrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NzQ2NWZmZGJhM2MwNWMyMWJlNWIxNWYwZDkxNWVmY2Ni
MDY5ZTUwHhcNMjYwMzAyMDAwMDUwWhcNMjYwMzAzMDAwMDUwWjAzMTEwLwYDVQQD
EyhlMmZjMThmMzZjNjUwNGNkZDY0YzMyMDE4NjNjZGU1ZTFhMjU1MTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxS6zeyPv373xejqdfu6UlVuB/ac
q7YPAgMdjW6fFfJAOSkOwIWtw0dfcmgyJUFMIs7GX9XacVXQEsodVP1yoPKxHZkj
2L/2Qru7HM5TLwjWMLr6/hiqj1iQ7Mu7EqM3R52oUx2945oPFLGhjlgmt5DQpplU
b7CzJjCK1e5Ii7HHpU+Zvhbtymqp0ui9qzWSYDfhNOlQIZSc8XTycOEd+zq+5vuw
MOQymZDHy7+021/evWCUz25anJKZfdRSURUu07aPBdtONjDYo38dC6R+UUDXJKKF
3oU7l/iRdv6sw24XXNZG6mC4ZRXVkgbyuWMfvANufqDrgz0aytOgocFZJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOL8GPNsZQTN1kwyAYY83l4aJVGWMB8GA1UdIwQY
MBaAFDZ0Zf/bo8BcIb5bFfDZFe/MsGnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NWNhMWEtNjgyOC00ZTZkLTlmZWEt
NWU0N2NmMTk5ZGZmLzEvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NWNhMWEtNjgyOC00ZTZkLTlmZWEtNWU0N2NmMTk5ZGZm
LzEvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEAi6U0x
3ZeKYkgEefwoyY9MlUrM0vNPFtbDT3uhQ76oJohzUlxrV3gb/73KDIAhWBV70JWa
mD4LnSf8FYMsLPYcet2nMKKcQ9JaZWiDqopTvtv7chX5K4w1pYuO54+CCjAbo2HR
zKvzIjLrm7aI9Tkbv1Kr9haigEAtgeyXyN08bzA6n/9dJ8k4R8hNRuRahR6rlKoj
ySNtqIItLJ6Qw4xVZ1JkzJU4owXUkUTzpHRJETpGPrf+ASTPROJ9M3WN+gneMFY/
3xyokWnLGjVRzZA85quFl6ZL2r+aqpipphOSzapvc4AbbyJq2cLDeR9j5f7WKSN9
8r6nEz8kpxFdaA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:15:18 2026 by rpki-client