Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
File: NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json)
Hash identifier: sFzjhwkpKBOKBqYaIZ+9kQUCOZmR7aNlJU/rxBfqnE0=
Subject key identifier: 72:F3:B9:7F:BF:88:A1:F0:97:D8:7F:AF:7D:31:90:70:88:BF:10:40
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Certificate issuer: /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial: 019CAE6C86C7C0064C578A766193C25E55E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
Manifest number: 03A8
Signing time: Mon 02 Mar 2026 12:01:13 +0000
Manifest this update: Mon 02 Mar 2026 12:01:13 +0000
Manifest next update: Tue 03 Mar 2026 12:01:13 +0000
Files and hashes: 1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: JzYFzpyW6TfFmZ6YzTJPEC7ABrUGOe89wCGOlkeCwvw=)
2: wfRbCWoZLVmY8bAvM8RMoZB0PGc.roa (hash: bnGgZ1CdYYmazMBl45x5uGVuKXkwyk8jwkb9FImtueA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:86:c7:c0:06:4c:57:8a:76:61:93:c2:5e:55:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Validity
Not Before: Mar 2 12:01:13 2026 GMT
Not After : Mar 3 12:01:13 2026 GMT
Subject: CN=72f3b97fbf88a1f097d87faf7d31907088bf1040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bb:a4:92:b7:40:cf:7e:39:19:ca:27:45:1e:
2d:18:ee:13:c3:47:d8:b0:ad:8f:0a:ff:3e:6a:7a:
1a:fc:3d:ed:53:bc:f5:e5:b1:85:47:c9:c2:bc:33:
d2:e9:b5:c6:bf:ab:8c:be:79:32:39:ad:14:32:55:
03:71:4d:ee:9f:ad:fc:cf:14:3f:61:bd:48:08:15:
6a:82:17:00:f9:20:68:e2:ee:41:af:04:84:9f:1c:
17:31:3b:c6:d5:c6:86:b4:9f:c3:92:31:12:85:c6:
72:22:57:c1:20:4d:86:9e:7b:a1:d7:d7:aa:6e:e6:
d1:39:3b:79:ed:98:55:b8:a4:a8:30:18:b9:2c:2d:
e7:14:dd:f3:ee:46:50:64:05:d9:07:b3:ed:28:8d:
2b:60:2f:83:25:61:af:a0:35:36:3b:d4:f2:a0:8a:
68:2b:d6:b3:bb:93:5a:15:21:5f:65:cb:7d:5e:ab:
c4:1d:0d:a9:94:70:00:37:37:30:17:80:b5:69:b9:
c4:ba:5a:9e:16:0a:c7:78:0e:e0:31:4c:b7:d0:eb:
51:41:f9:96:05:2b:80:8c:de:f7:c3:0c:19:ae:55:
10:64:f2:29:3e:99:d9:2a:cd:22:a6:e6:83:c5:b6:
30:75:f4:6b:d6:b7:5b:ba:56:b1:a6:82:51:3e:55:
fb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F3:B9:7F:BF:88:A1:F0:97:D8:7F:AF:7D:31:90:70:88:BF:10:40
X509v3 Authority Key Identifier:
keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a1:49:bd:3c:17:6d:01:ab:b3:c9:f8:94:ba:dd:50:81:17:
dc:56:76:11:d9:be:63:7c:49:51:63:51:9a:9e:80:02:11:78:
bf:38:ed:85:f5:e1:60:9e:e1:ef:82:4c:c7:d2:99:81:55:fb:
2b:f3:30:ff:66:dc:f6:3d:43:18:e9:bd:a1:12:59:24:10:c7:
9d:66:43:fc:55:3a:a6:a8:74:18:45:ad:ad:ae:d5:2f:ad:7e:
d1:9f:a9:39:06:63:fb:af:ce:6f:9c:29:2a:2b:59:54:04:bc:
3e:b3:ba:b9:f8:ef:b5:49:59:da:b1:15:20:d9:67:4a:5d:74:
cd:f0:60:ff:23:04:4b:93:fb:43:fe:95:9e:a9:94:60:69:6b:
53:bb:72:93:d8:cc:39:ec:3a:bc:2a:f4:1c:0e:55:1b:a3:8c:
3f:2b:cd:8a:da:70:c1:33:f8:9d:88:30:5a:25:7a:90:c9:90:
f0:c5:bf:b8:f3:ef:3a:ab:83:00:aa:a3:47:73:fb:d1:5f:bf:
7b:b9:91:0d:ce:a2:7e:00:aa:51:d8:ff:bc:dd:74:47:82:90:
7e:46:d2:12:c9:df:37:88:35:a3:f8:5f:58:10:27:ee:c3:86:
91:09:4f:2f:b1:2a:55:0d:ba:8c:df:70:ea:4c:4a:dc:ed:eb:
00:a1:10:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:51 2026 by rpki-client