Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
File: r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft (raw, json)
Hash identifier: WOy27r5cN+zYU56UCL2g/tz0poOBPrdDvbiCrHv6fSs=
Subject key identifier: FB:AA:6C:D5:BE:5F:01:98:95:11:71:2E:B6:90:7F:09:F7:74:EC:AC
Authority key identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
Certificate issuer: /CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Certificate serial: 019D3940D8709DFB48D1EB8333BC2D09743B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 11:00:43 +0000
Manifest this update: Sun 29 Mar 2026 11:00:43 +0000
Manifest next update: Mon 30 Mar 2026 11:00:43 +0000
Files and hashes: 1: r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl (hash: NGq2uiukceBVPAW5nQGEDAGDJx3IYyErmxciiGBfdqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d8:70:9d:fb:48:d1:eb:83:33:bc:2d:09:74:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Validity
Not Before: Mar 29 11:00:43 2026 GMT
Not After : Mar 30 11:00:43 2026 GMT
Subject: CN=fbaa6cd5be5f01989511712eb6907f09f774ecac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:5a:65:3c:f7:53:80:79:6e:42:a1:c0:04:
6b:04:95:d8:60:01:09:33:8f:50:99:8b:35:b2:2e:
e5:bc:a6:e5:3d:a5:08:30:be:96:14:b1:ba:5b:4e:
4e:54:bb:2b:5d:ab:c2:28:a0:01:da:de:58:1e:2e:
55:13:e0:6d:3e:62:c6:0e:1d:00:b4:8b:3e:43:6b:
27:3a:25:2f:9e:27:a2:f9:58:4f:c6:7e:bd:bb:39:
cc:58:03:e9:21:b7:d4:68:5a:d5:9d:57:0b:8a:07:
29:f6:5a:4b:95:88:c2:5b:d7:d8:bd:9e:d0:b4:f6:
25:d7:2e:61:11:fd:c5:25:d0:44:66:51:97:6e:8d:
11:99:09:0e:0e:3a:28:81:9c:e3:f3:d5:96:64:c7:
73:ed:46:f8:cb:85:f2:a6:45:55:2a:2b:29:cb:ee:
fa:5e:43:65:8d:d3:0a:23:0c:ff:e4:97:ea:ab:74:
13:53:0a:ff:b8:69:30:c8:cd:a8:e0:c8:06:10:66:
b2:6f:aa:10:17:11:12:a3:19:f1:5d:fd:9e:97:72:
2c:d0:29:26:2b:e7:58:af:a5:6f:d8:db:f1:59:34:
30:ef:07:9a:75:ea:9e:a2:22:49:d2:ab:a3:16:dd:
4c:e5:d0:e9:56:94:f6:5d:f1:b0:82:eb:bc:1d:ca:
10:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AA:6C:D5:BE:5F:01:98:95:11:71:2E:B6:90:7F:09:F7:74:EC:AC
X509v3 Authority Key Identifier:
keyid:AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:dd:0b:eb:74:68:b1:1c:35:11:08:56:c6:95:ef:a9:c1:3e:
2f:1e:ac:ab:f1:31:3f:f9:8b:1f:a6:42:7a:c2:e1:fc:32:86:
66:ff:fc:8e:db:37:b2:ab:c6:46:94:d9:6e:cb:af:ef:9b:ae:
bb:bc:98:42:c2:c9:72:af:ae:f0:0c:3b:9f:51:55:57:8c:75:
d1:71:20:00:8a:a0:26:a0:cb:b3:5d:4e:3a:6d:db:f5:3b:45:
9f:95:a5:37:b5:5c:5f:45:b0:ed:45:62:5b:9a:db:c8:d2:8c:
ae:16:34:a2:bd:71:95:75:d0:08:cf:36:2a:ea:62:6d:0a:6a:
d9:e9:52:7e:7e:3b:af:cb:63:37:5f:81:8c:cb:69:7a:4c:d6:
94:04:a8:a4:7d:23:74:4a:0f:a5:13:a0:bf:f8:c8:eb:be:6c:
63:06:02:7b:4b:ac:78:d5:76:3a:09:b4:62:71:c2:f5:fa:fb:
d0:03:c2:80:89:1d:39:80:ed:a5:fd:8e:d6:27:f2:64:de:d6:
a9:d7:17:28:74:2a:d9:c3:04:c3:67:17:71:97:2c:8a:a3:83:
0d:ce:ae:d4:1a:e7:83:22:71:f3:22:63:a1:50:8b:d1:b2:ce:
9d:b7:dc:57:a4:12:06:52:7c:60:b9:f7:8d:2e:d8:23:f1:fc:
ca:58:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:23 2026 by rpki-client