Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
File: N0862b8UbAabjYPW1a1UggRetw0.mft (raw, json)
Hash identifier: 8nRRfvRYuAAYXkra24BNx/BZdT3pMh2Sm4QLfrhfxdE=
Subject key identifier: 93:F9:29:C3:EB:97:5F:A9:FC:AB:5F:13:D8:D7:AC:EC:57:D1:3E:AB
Authority key identifier: 37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
Certificate issuer: /CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Certificate serial: 019D39AEC6AD3E0ECD89D399CE28B77852E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 13:00:48 +0000
Manifest this update: Sun 29 Mar 2026 13:00:48 +0000
Manifest next update: Mon 30 Mar 2026 13:00:48 +0000
Files and hashes: 1: N0862b8UbAabjYPW1a1UggRetw0.crl (hash: Rwe9vPKZgWYfj/y8ijUyFl2qna9+1Y0aegDjAKFDXw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:c6:ad:3e:0e:cd:89:d3:99:ce:28:b7:78:52:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d
Validity
Not Before: Mar 29 13:00:48 2026 GMT
Not After : Mar 30 13:00:48 2026 GMT
Subject: CN=93f929c3eb975fa9fcab5f13d8d7acec57d13eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:78:21:91:18:bc:8d:60:dc:2b:bd:63:99:00:
a5:0c:87:6f:04:c2:d1:62:9f:ca:95:cd:c9:a3:f0:
80:4f:12:d7:20:e7:14:04:4d:37:06:fe:e6:5e:3f:
99:b8:34:13:77:6c:7d:43:ce:f6:a9:b7:e3:09:6c:
8d:2c:47:05:6b:27:5c:38:cf:d7:d0:2c:2d:41:96:
51:e5:55:78:e7:06:16:99:3e:d1:85:14:41:4e:53:
ce:ab:1a:82:01:1c:44:7a:04:31:f7:40:75:4d:97:
ab:db:b4:4a:f3:9b:c5:dc:41:83:cd:53:ee:24:1b:
33:1c:1d:bf:56:3a:12:fc:a9:2c:6b:a7:4d:84:e9:
82:cc:02:ff:6d:1e:04:93:bf:03:c3:74:9c:1f:cd:
4d:7f:d7:e5:dd:60:f7:7a:12:49:4f:17:bf:f6:6a:
75:d6:e4:16:df:ce:3a:bb:55:3f:5b:91:21:a6:35:
9d:a8:31:3f:b8:29:b8:04:da:4a:91:ec:4d:94:0d:
8c:30:66:0c:19:fb:d0:3a:0f:da:e0:ee:5b:4e:9e:
d3:58:74:81:cf:f6:15:4e:94:c2:e2:c3:dd:48:d7:
97:e9:4f:ea:1c:52:bf:be:14:46:40:ca:83:88:4e:
1c:de:ce:26:e6:87:99:bd:bf:c6:5c:b6:87:cd:44:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F9:29:C3:EB:97:5F:A9:FC:AB:5F:13:D8:D7:AC:EC:57:D1:3E:AB
X509v3 Authority Key Identifier:
keyid:37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:51:3f:ff:49:29:ce:5e:9c:91:12:62:21:39:21:92:25:63:
30:3b:a1:e2:13:23:a2:e5:cb:70:60:1e:00:3e:b2:eb:82:f4:
a3:b7:11:0f:39:21:57:11:8b:60:6b:cb:ca:82:b9:e2:cc:eb:
3f:09:36:74:3e:fe:7f:32:a3:50:72:1b:88:48:0d:d9:02:4e:
c0:c8:3f:36:0d:bb:16:ec:51:c0:d9:e5:59:b3:3e:4b:fc:79:
1e:b2:ec:fe:99:9c:d3:a4:63:fa:07:4e:e5:37:2c:1e:33:f3:
2d:6a:44:05:94:d1:da:f9:d2:fe:69:5a:c4:98:88:53:04:58:
8c:54:64:cf:c5:55:e1:4a:7b:2b:32:e5:a3:f0:82:67:18:9c:
ab:89:7d:61:47:ff:82:5f:bd:ae:15:6d:fc:03:cf:8f:6b:0a:
04:ca:be:75:bc:c5:46:5b:8d:ab:e6:60:42:21:38:63:48:f0:
30:bf:4c:ab:8d:58:22:a9:f2:d5:70:c3:04:c9:c9:91:1d:a1:
16:75:06:d7:ec:af:e0:55:43:4b:a0:a7:4d:b6:63:f4:f4:d8:
cd:fe:17:62:f0:91:8d:bf:28:a6:71:63:22:bb:8e:e8:3e:23:
52:cc:80:5e:e7:09:f3:fc:c2:ac:28:32:d8:32:ba:fc:8f:0d:
56:54:0b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 22:06:08 2026 by rpki-client