Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
File: NscJXgRZhgU7mz6HiQNnJoN90fU.mft (raw, json)
Hash identifier: w8QcBDe2xGTOBoSKnnasAVDX9O2vLHz9lU/hiwZ3jkE=
Subject key identifier: 17:E6:02:2D:EE:7E:D3:92:71:AD:21:2D:71:DB:D9:9D:2D:1C:6D:E2
Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
Certificate issuer: /CN=36c7095e045986053b9b3e8789036726837dd1f5
Certificate serial: 019CAB342494DEE0FF5FE4ADD6679D1303C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
Manifest number: 076F
Signing time: Sun 01 Mar 2026 21:00:46 +0000
Manifest this update: Sun 01 Mar 2026 21:00:46 +0000
Manifest next update: Mon 02 Mar 2026 21:00:46 +0000
Files and hashes: 1: HuSnhil6lfXTqaq7JgeQk-Ofamg.roa (hash: gk7WHH1Fk2fGMGJjH6DsGNArwgZbzQBBGEMIBb7kSmE=)
2: NscJXgRZhgU7mz6HiQNnJoN90fU.crl (hash: 2xrX7myGKv4mX0AH4nk0q/IEj7K6vwwqJfUXzeHimpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:24:94:de:e0:ff:5f:e4:ad:d6:67:9d:13:03:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5
Validity
Not Before: Mar 1 21:00:46 2026 GMT
Not After : Mar 2 21:00:46 2026 GMT
Subject: CN=17e6022dee7ed39271ad212d71dbd99d2d1c6de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:13:01:6e:27:88:68:8b:02:0a:d9:f5:f3:
b7:45:47:ca:0b:37:cf:6a:02:ba:1c:9e:3d:1f:2b:
80:16:0a:b0:28:c6:ba:ea:f3:fb:53:39:20:e4:0f:
4b:62:38:60:4a:b0:36:f1:27:0b:aa:8e:69:7f:26:
cd:89:63:e0:62:b5:f4:a6:dc:68:aa:a9:ec:60:b1:
33:f3:95:20:d1:3a:19:4a:17:7b:28:3d:aa:3c:be:
f0:cf:1c:c6:31:89:85:47:48:16:c2:db:3e:61:59:
40:b5:53:31:0a:c1:2e:77:dc:ca:b2:12:1d:8f:72:
d6:fb:eb:e0:50:fb:40:93:07:25:9f:3d:49:67:f6:
5d:89:3b:36:b4:6b:84:98:6a:44:36:d9:1c:7b:9a:
05:fa:43:6d:98:ef:be:46:7d:ce:22:81:09:a2:20:
1d:2a:b0:73:84:39:e5:ad:ff:46:74:81:c8:e4:14:
11:20:11:9a:de:bd:55:b6:32:0f:9f:92:f5:7e:c2:
d1:13:a9:66:81:e1:2a:0d:70:7b:28:40:c9:f6:be:
c9:5c:df:17:8a:53:9b:30:c0:7e:47:a5:59:94:00:
41:7f:a0:57:7b:2b:ad:fa:21:ab:10:6d:b3:79:9a:
3f:79:87:9c:46:7f:4d:b3:6f:63:bf:b2:f5:38:9d:
bb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E6:02:2D:EE:7E:D3:92:71:AD:21:2D:71:DB:D9:9D:2D:1C:6D:E2
X509v3 Authority Key Identifier:
keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4d:17:83:c1:e5:f2:c9:99:b4:a3:a6:dc:c7:3d:d0:20:52:
8c:3b:7f:fa:93:88:49:d7:8b:fe:61:66:e3:f5:fe:f5:f6:3c:
39:41:52:bb:7d:95:6e:d7:20:bb:35:65:fb:8b:1d:fe:52:fe:
95:54:51:83:c8:82:67:1c:4c:0b:d9:33:6c:13:70:a0:6f:08:
84:a9:ba:4b:31:b3:21:6c:66:2f:b2:89:0f:a6:3f:23:02:5b:
58:2a:7c:49:84:33:fc:b5:04:49:9c:7c:d0:e8:08:44:46:51:
f8:a1:2d:b7:5d:75:35:9d:7d:f0:2f:b9:50:53:d5:59:f7:bb:
72:a2:24:ea:ff:a4:0f:42:1c:96:10:78:46:c6:aa:52:97:39:
58:fe:09:4b:8a:d8:fa:f0:67:a6:a4:0f:f3:28:7a:01:4f:26:
c4:9d:9d:10:ef:d4:a3:2e:f9:4f:a2:d6:1e:5e:61:3e:c3:da:
cc:f6:60:ea:ca:21:66:f7:d2:69:1d:87:a3:66:48:b3:2c:83:
ba:b8:50:b7:aa:67:aa:eb:8d:10:5c:fb:7d:b1:72:5a:fb:a0:
9f:a7:2e:cf:14:73:ed:96:c9:00:07:42:41:28:fb:c0:23:8b:
74:e4:d5:d5:72:7a:2b:22:59:b8:bc:0e:49:ad:a0:ca:a7:d4:
f1:ab:bf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:49 2026 by rpki-client