Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
File: NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json)
Hash identifier: utBj9fqgxtX5fvyxw7r0vtL8qqJneKkONAxvQcXqe+c=
Subject key identifier: 5C:58:69:BF:13:F3:48:3D:CE:0C:47:67:D3:90:23:54:A9:08:C1:15
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 019EBFC83BB2A601C9DB5B19F68C24578B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
Manifest number: 155E
Signing time: Sat 13 Jun 2026 07:00:31 +0000
Manifest this update: Sat 13 Jun 2026 07:00:31 +0000
Manifest next update: Sun 14 Jun 2026 07:00:31 +0000
Files and hashes: 1: 3ji0Wlm5mmLR8IrB0SjVb6LKBu8.roa (hash: epu2k++TCBPSDoOcNwdGM1yWxCA7jm2nmD6aInDJWwU=)
2: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: GnyLtTXUgLaKodtsOV7REXcO6LqR9SW1cQ236AH70WI=)
3: ki3i4uGb2pymrQuc6PTH8eApHJ0.asa (hash: cR3C02zA8I9gR3Y+/Z+ZCQNWMiMl6ofoAUTqfpPH8v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:3b:b2:a6:01:c9:db:5b:19:f6:8c:24:57:8b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Jun 13 07:00:31 2026 GMT
Not After : Jun 14 07:00:31 2026 GMT
Subject: CN=5c5869bf13f3483dce0c4767d3902354a908c115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:18:6a:ae:e4:7a:7a:3f:00:31:98:5a:b2:7a:
1d:7d:0a:f2:7c:ac:75:15:6f:6b:52:99:da:bd:86:
c5:41:2d:56:8d:16:39:de:22:4b:29:aa:00:d5:fa:
27:b3:d2:e4:2b:a0:5f:14:dc:95:20:29:1c:2b:00:
ef:78:03:4d:09:17:60:41:d1:f6:4c:39:60:dd:ca:
84:02:32:b9:cb:40:b3:59:09:00:55:fe:57:89:9d:
52:fc:f4:b2:37:52:e3:c7:93:69:76:8d:6c:e3:c5:
dc:49:c6:d6:fe:64:c5:9a:a7:c1:55:8a:0c:4a:35:
3f:9e:1a:ea:a4:13:99:68:01:40:5f:60:10:9e:ac:
3c:b4:e4:c1:9a:12:85:d5:2b:1d:4b:02:da:69:dd:
93:a7:32:5b:46:09:d5:4d:3e:2d:95:27:1f:58:ee:
5d:f9:5a:5f:eb:f3:dc:7a:63:ec:a1:8a:07:1b:0b:
52:47:db:c1:d5:db:0c:0f:be:f7:44:24:89:3a:92:
4c:ea:66:2f:7f:a3:40:31:46:cd:8e:91:f9:d6:fd:
3e:45:7a:35:8b:e7:d7:04:c0:fa:98:b6:49:4e:01:
5b:62:d5:3f:1b:76:05:db:7e:39:fb:58:48:82:04:
3a:1b:c0:69:88:bb:d4:94:6c:76:e6:e5:ff:96:49:
52:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:58:69:BF:13:F3:48:3D:CE:0C:47:67:D3:90:23:54:A9:08:C1:15
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:33:ed:b2:71:fc:8d:58:ff:1c:0b:d9:bc:48:7a:55:89:cd:
5a:76:84:3e:67:9e:2d:49:98:82:7b:35:76:78:42:8e:51:0a:
9f:31:1b:ea:3c:d4:12:7b:21:07:14:89:b3:76:ea:49:cc:97:
56:a5:52:f1:93:cc:7f:22:20:35:a3:90:c8:21:99:08:59:d4:
b8:fb:f8:d0:4d:c0:90:39:9f:ca:fa:27:a8:ef:5c:e7:45:57:
2f:68:55:b7:24:7a:3d:44:d5:73:b2:5a:24:4c:c6:45:45:12:
61:fb:22:fe:8f:2f:02:b6:15:2e:5b:c7:30:80:c6:ca:a6:0b:
f1:5f:c3:6e:16:4a:ca:f9:81:68:2f:8b:ed:a5:7b:3a:b5:6e:
23:ec:03:da:c6:be:11:d2:78:20:a1:8a:22:d1:0d:80:5b:c2:
17:b0:48:7b:68:4e:51:92:57:4e:f4:29:99:86:cb:a9:12:c1:
29:e5:97:71:66:94:86:e2:48:b4:e5:8a:3d:f6:eb:20:96:c7:
88:da:a3:24:2f:0f:f5:43:5f:2f:30:4f:b2:ca:d6:d0:87:6d:
24:55:50:bf:dc:ca:a2:f5:c4:af:a5:ca:b8:16:b2:22:d6:7b:
4c:ef:43:27:70:f1:b2:aa:c8:75:f0:30:ea:b3:27:ec:45:63:
95:b2:d7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:26:02 2026 by rpki-client