Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json)
Hash identifier: xCEbJfWJXnxpztCuOd8dEz8jZE3kSxmBmcEPHxlyTm0=
Subject key identifier: AF:24:74:DB:21:E8:36:17:92:72:D9:7F:CD:DF:D8:26:79:7D:76:51
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial: 019EBF911D951AB28D521CF85F483C1DB643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
Manifest number: 04BA
Signing time: Sat 13 Jun 2026 06:00:18 +0000
Manifest this update: Sat 13 Jun 2026 06:00:18 +0000
Manifest next update: Sun 14 Jun 2026 06:00:18 +0000
Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: KtwhXKDEOtW7rHDwmvWMNuaCGP7cmEY/QfjTaqa8wdI=)
2: wfRbCWoZLVmY8bAvM8RMoZB0PGc.roa (hash: bnGgZ1CdYYmazMBl45x5uGVuKXkwyk8jwkb9FImtueA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:1d:95:1a:b2:8d:52:1c:f8:5f:48:3c:1d:b6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Validity
Not Before: Jun 13 06:00:18 2026 GMT
Not After : Jun 14 06:00:18 2026 GMT
Subject: CN=af2474db21e836179272d97fcddfd826797d7651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:64:0e:d4:fa:99:07:ec:12:c1:1a:d8:2f:
ef:c9:3b:76:f4:b3:1b:bd:23:70:cb:19:0b:fb:3d:
2b:6e:cf:2f:8a:87:a2:6b:a7:be:b3:bb:a4:12:ea:
1e:65:1f:40:67:41:57:0c:c2:22:da:74:8f:d8:cf:
23:c3:92:24:e5:62:cc:2d:bd:86:eb:6d:d7:14:a2:
5b:71:be:38:72:88:d2:76:25:9e:35:3c:28:63:9e:
cb:4f:1e:8e:36:77:20:59:04:c9:69:0c:60:fd:b5:
35:4b:c3:86:1e:6b:37:1d:9a:1d:ea:5b:a7:b4:79:
5d:c0:fb:00:73:a8:3a:6b:6d:6a:e2:82:86:d0:38:
84:88:2a:60:eb:c2:21:58:4a:36:38:8f:4c:35:3d:
c9:2b:64:ec:6c:10:8d:d8:65:a3:0a:19:45:83:38:
28:41:1c:c4:77:1a:eb:da:dc:32:ca:0d:67:28:40:
bc:9a:a8:27:71:df:76:25:46:79:c3:a8:9c:50:89:
87:40:9c:18:f5:84:0d:28:75:f5:c1:7a:98:59:13:
4e:ba:8c:3a:37:9b:46:ec:d1:a9:8d:fe:5a:57:4d:
a8:94:42:f2:04:3e:f9:1e:2a:96:a2:8f:07:ce:fa:
eb:33:0d:24:5b:8b:6f:67:39:f2:4b:c7:86:f9:6f:
30:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:24:74:DB:21:E8:36:17:92:72:D9:7F:CD:DF:D8:26:79:7D:76:51
X509v3 Authority Key Identifier:
keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:64:bd:b0:a5:ab:b5:40:fe:73:17:99:fc:df:b5:8d:03:58:
c5:60:3c:69:37:89:8f:6c:9a:70:59:72:19:2e:3f:b8:cd:b7:
84:cb:0f:bb:50:43:43:38:9d:6e:42:20:35:cc:fd:af:ca:11:
fc:c3:cc:bb:c5:1c:c9:25:d1:47:eb:d6:d1:e4:47:d6:41:b4:
d7:25:d1:11:9a:93:88:93:bd:91:08:30:09:75:f5:98:59:c0:
75:00:3c:74:c2:8c:5c:64:f0:b5:b5:80:6d:2a:5e:84:bf:01:
ee:b6:38:bd:6a:6a:ca:bc:6d:e3:b7:79:c6:ff:1d:44:43:fd:
70:b2:c7:6d:75:54:78:a4:c2:bb:10:c0:4d:9f:2c:47:59:45:
8f:18:4d:0e:17:29:ef:c0:be:e8:40:19:ed:b3:bd:e7:48:84:
12:71:19:70:91:fb:a9:b3:69:fe:17:78:39:65:ae:bb:3e:3a:
df:c1:25:c8:d9:44:cd:b2:e6:22:81:9e:4f:b6:5a:dc:fc:51:
1a:16:2e:42:92:ff:1d:1f:60:8c:c1:8a:e0:9b:0c:e9:41:d8:
93:96:fb:a4:72:d1:8e:ae:bc:ee:d2:53:cb:75:bd:b1:37:40:
08:4a:92:be:20:d2:2a:0f:a1:d9:96:40:1b:18:98:cd:99:55:
43:68:11:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:25:35 2026 by rpki-client