Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
File: NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json)
Hash identifier: +gacryWUljs/TI+kq3JGWIqcusVL2QTsxURInszIEqo=
Subject key identifier: 0F:80:CB:72:6B:47:D6:E4:2F:70:A9:DB:A2:B5:EB:4B:63:7E:9C:32
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 019CA8D7BE663E777BB9AB5A65DC445E35C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
Manifest number: 1449
Signing time: Sun 01 Mar 2026 10:00:37 +0000
Manifest this update: Sun 01 Mar 2026 10:00:37 +0000
Manifest next update: Mon 02 Mar 2026 10:00:37 +0000
Files and hashes: 1: 3ji0Wlm5mmLR8IrB0SjVb6LKBu8.roa (hash: epu2k++TCBPSDoOcNwdGM1yWxCA7jm2nmD6aInDJWwU=)
2: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: BIE2uOiREe+Lvq/m2QAVNExiedfKGtUX01fW5NFEYHA=)
3: ki3i4uGb2pymrQuc6PTH8eApHJ0.asa (hash: cR3C02zA8I9gR3Y+/Z+ZCQNWMiMl6ofoAUTqfpPH8v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d7:be:66:3e:77:7b:b9:ab:5a:65:dc:44:5e:35:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Mar 1 10:00:37 2026 GMT
Not After : Mar 2 10:00:37 2026 GMT
Subject: CN=0f80cb726b47d6e42f70a9dba2b5eb4b637e9c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ff:90:8e:8c:f8:18:2e:a8:45:21:b2:04:db:
10:7f:11:e0:09:e1:17:42:4d:0c:5a:53:c2:45:cf:
01:89:b6:80:3b:ef:65:f8:45:96:dc:87:51:1c:b6:
a5:08:2c:00:c0:90:b7:01:f3:40:2e:47:b7:f9:d4:
b8:a4:cb:c9:fb:67:95:02:f4:2d:de:c7:2f:41:48:
f9:7b:8f:b5:71:79:c3:00:0b:9a:23:e8:c6:a9:5d:
c1:e4:77:e8:a5:c6:61:f2:6a:6e:f3:2a:49:83:93:
16:0b:78:75:2d:6a:bc:a1:80:b5:ce:77:a4:cb:ef:
90:83:29:b7:c3:2b:3b:70:c0:e6:02:87:06:68:ae:
8a:f1:c4:fe:90:12:a4:11:4a:3c:e9:6e:bf:51:38:
33:40:b4:30:28:82:b4:a7:2f:bd:63:09:69:b2:d0:
df:7a:16:e8:a6:54:92:4e:25:28:9c:e9:18:0d:55:
da:ca:06:96:9a:69:18:a6:94:f9:a4:72:55:24:b4:
79:03:48:c2:9c:4e:14:10:77:86:54:88:ef:44:7f:
37:58:92:b7:29:eb:83:16:b5:87:d1:d1:58:4c:f1:
a2:27:35:c1:0c:b2:be:62:eb:e4:a8:db:87:cf:e9:
b3:6d:39:c2:ad:ec:3e:c8:82:3a:d0:f8:9d:1f:06:
03:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:80:CB:72:6B:47:D6:E4:2F:70:A9:DB:A2:B5:EB:4B:63:7E:9C:32
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7e:91:1d:b2:18:68:a9:41:3b:e6:c9:9c:f1:be:c7:03:95:
b1:16:8c:da:12:98:b8:31:22:80:e9:22:ce:b1:ad:fe:b9:54:
1f:35:49:04:66:8b:2f:10:d5:92:6c:96:3d:39:c7:a1:8c:ba:
b9:ef:76:25:a9:0d:7b:99:c6:c2:a8:b1:c5:99:e3:7d:5a:55:
21:1f:eb:1d:78:31:f0:75:63:b8:09:d6:7d:93:52:f6:44:b4:
33:e6:75:93:a2:f3:38:47:3b:1d:25:f0:ce:44:96:a4:60:91:
e5:37:ba:c9:eb:22:92:08:46:8d:9c:37:05:42:dc:ef:70:3e:
11:a4:cf:ec:28:27:80:f4:8c:04:1f:62:9f:5d:54:3e:ea:e2:
1a:46:d5:e2:63:bd:7b:53:9a:40:48:5e:6e:bf:07:eb:47:bf:
66:41:2f:71:da:bd:c8:9d:07:bd:af:72:ae:4b:11:34:72:87:
e4:04:f9:05:49:82:40:90:84:c7:ce:fb:c5:91:91:c0:3c:c1:
93:c8:75:4f:80:a6:e2:d5:c1:f7:c7:5a:5e:96:c6:70:eb:8c:
15:fd:16:63:d8:1e:93:ad:7e:38:16:46:66:d2:b3:fd:37:95:
fb:d8:e5:12:23:bb:35:cf:89:ee:05:e1:6d:9c:67:8e:0f:3f:
59:4f:68:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:27:49 2026 by rpki-client