Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
File: NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json)
Hash identifier: M4SBPR37Ih+xv9S2CEnNAV/F+90XR+7M9e8zapeaUkw=
Subject key identifier: 8E:3F:E4:B4:4C:52:FC:EA:12:B6:CF:ED:61:82:DF:1E:FB:1C:83:24
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Certificate issuer: /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial: 019D985089716C22F117BB26D5735F2F0383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
Manifest number: 14C5
Signing time: Thu 16 Apr 2026 22:01:47 +0000
Manifest this update: Thu 16 Apr 2026 22:01:47 +0000
Manifest next update: Fri 17 Apr 2026 22:01:47 +0000
Files and hashes: 1: 3ji0Wlm5mmLR8IrB0SjVb6LKBu8.roa (hash: epu2k++TCBPSDoOcNwdGM1yWxCA7jm2nmD6aInDJWwU=)
2: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: 75AmTVMjyyHwJlFNvT/8Rjkmx+KC/uD7TZz3gbz7aew=)
3: ki3i4uGb2pymrQuc6PTH8eApHJ0.asa (hash: cR3C02zA8I9gR3Y+/Z+ZCQNWMiMl6ofoAUTqfpPH8v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:89:71:6c:22:f1:17:bb:26:d5:73:5f:2f:03:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Validity
Not Before: Apr 16 22:01:47 2026 GMT
Not After : Apr 17 22:01:47 2026 GMT
Subject: CN=8e3fe4b44c52fcea12b6cfed6182df1efb1c8324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:7f:fd:59:f9:a3:bb:ca:34:2a:3a:96:bf:
0a:08:5b:0b:31:46:a2:e2:6a:52:2e:16:65:de:10:
0c:08:49:69:79:15:21:57:80:12:94:e7:8f:57:ab:
e7:a5:e3:33:56:e4:1a:88:3c:cb:a1:3c:7a:96:2d:
10:3d:d6:00:e1:bb:81:83:1d:64:43:82:e0:ed:20:
5b:c0:72:60:f9:dc:50:3b:18:3e:ad:3c:49:75:e6:
e0:f8:27:b7:d0:b1:d1:db:d1:e6:7d:ea:a8:a5:1f:
5f:37:8a:b1:df:0d:b8:fa:05:4a:af:f1:c3:77:3c:
f4:9c:da:f0:3b:7d:41:c1:a2:7a:46:f1:89:f3:02:
1a:fa:81:87:b3:5d:c2:54:10:cf:1d:31:db:42:14:
6a:e5:22:1b:67:f1:ce:49:40:25:96:fe:72:6c:49:
db:1f:46:c0:ae:36:af:b1:85:89:07:dc:49:89:97:
7b:9c:57:18:84:2d:95:99:ab:36:33:9c:f5:04:2f:
d1:2e:cb:17:cc:61:46:e5:b3:f8:3a:a5:0d:3a:b4:
cd:1a:b0:13:09:7b:18:05:2b:a3:86:46:0d:2c:15:
7e:92:07:ae:a9:64:f6:17:75:2c:8e:46:2e:1e:7a:
fc:50:eb:8f:fa:d2:de:ca:61:83:98:47:14:de:78:
d5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3F:E4:B4:4C:52:FC:EA:12:B6:CF:ED:61:82:DF:1E:FB:1C:83:24
X509v3 Authority Key Identifier:
keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f9:e1:06:0f:81:40:16:21:f2:2d:43:0a:31:32:45:c8:90:
90:36:50:ce:3a:26:50:ed:c2:a1:cc:95:ac:24:5e:61:45:bb:
f0:4a:bb:77:76:d6:71:04:0a:00:cf:15:ef:d1:bf:a0:6e:81:
be:64:ca:fa:b4:eb:03:79:bb:e5:25:b0:e2:3f:15:c4:85:95:
32:63:2e:12:36:3d:d3:57:48:dc:d4:35:2d:da:e4:23:5f:4e:
f1:48:aa:7d:c7:9d:bb:92:80:89:46:82:09:a7:1c:6c:37:74:
ca:7b:c0:bc:4e:b2:f2:68:48:1c:2f:e0:52:6e:71:9a:30:45:
03:93:72:6a:74:5d:df:31:be:c1:68:65:0f:39:ac:8e:a5:0c:
b6:25:b4:59:f3:38:bf:f7:aa:ba:a5:1b:28:a4:9f:ed:d6:5e:
99:e7:9c:96:8e:79:90:b8:1d:5b:e7:87:5f:26:5f:ac:f6:21:
28:da:b1:76:a6:b0:3d:84:fc:9e:ab:f1:39:0d:cf:5c:a9:d0:
84:7c:6b:40:16:1b:2c:d4:0e:c6:e2:61:78:e8:85:45:39:07:
63:4b:7c:a0:07:56:9e:7d:8d:17:5b:2f:a1:65:ea:d9:0d:5a:
8d:c9:ca:7f:82:1c:74:87:67:a7:91:0a:a8:b1:41:24:ed:3c:
ad:23:9f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:40 2026 by rpki-client