Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
File: nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json)
Hash identifier: GoYYADj+Fot4nCadqnVovM97+fmLlrrtiUDtHPq3q5M=
Subject key identifier: F6:C8:FB:79:06:64:1B:E2:97:F5:61:58:A5:7D:35:BC:64:B7:74:D0
Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
Certificate issuer: /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Certificate serial: 019D386592E887BE00889C4EDA5F5F1CEED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
Manifest number: 098D
Signing time: Sun 29 Mar 2026 07:01:13 +0000
Manifest this update: Sun 29 Mar 2026 07:01:13 +0000
Manifest next update: Mon 30 Mar 2026 07:01:13 +0000
Files and hashes: 1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: u6hJAFYdM+uQo0zq0z7IkPSISbTxQYNaxA2KZ2aKXd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:92:e8:87:be:00:88:9c:4e:da:5f:5f:1c:ee:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Validity
Not Before: Mar 29 07:01:13 2026 GMT
Not After : Mar 30 07:01:13 2026 GMT
Subject: CN=f6c8fb7906641be297f56158a57d35bc64b774d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:21:57:22:2a:0d:b6:f7:7a:fa:42:b0:7b:00:
8e:ed:3e:78:b0:63:05:c3:fa:8c:35:2c:e6:45:b7:
0c:d3:8a:2b:06:c7:86:e5:f2:b0:ad:36:c6:e1:e9:
5c:96:5a:e9:88:c1:24:87:ae:f9:0e:93:d8:d0:1d:
41:44:bc:46:f2:4c:0f:65:4c:d7:e8:f3:4f:88:db:
71:af:11:31:43:00:a1:af:72:08:78:55:79:50:88:
17:3d:0f:32:26:7c:b6:24:9f:85:b8:28:b8:82:51:
d4:4a:31:f0:46:72:0f:5f:0a:9c:55:99:c4:b4:3d:
d5:c7:cf:1b:f9:ea:ef:d5:4e:f1:9f:88:93:c3:bf:
56:18:b7:08:2c:de:ac:53:6e:6e:9d:c3:b0:8d:0e:
73:27:ab:b3:b3:37:cc:23:77:30:7d:de:73:b1:85:
3a:c3:37:d8:c0:26:00:a5:04:b9:94:a6:a2:ad:aa:
a9:12:fe:f5:7d:ae:6f:42:be:64:bc:92:b0:ca:37:
fd:92:bf:f1:9d:d9:33:a2:f5:fb:dc:a5:a8:53:05:
7b:6c:65:5a:5e:ec:c0:a0:ee:1c:f3:d2:2a:7b:9f:
2a:ae:08:c4:d8:73:75:08:9c:bd:bf:af:98:10:df:
aa:8a:69:35:5b:17:b8:73:22:ca:0d:7b:5f:0b:5b:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C8:FB:79:06:64:1B:E2:97:F5:61:58:A5:7D:35:BC:64:B7:74:D0
X509v3 Authority Key Identifier:
keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a0:ae:40:d7:b1:8e:de:ce:38:57:8d:49:d3:91:35:b4:02:
4a:62:0c:a5:cc:53:f4:3d:49:40:23:a2:94:de:ba:4f:2d:36:
69:8a:52:a8:31:3a:4a:50:5f:6d:f3:b2:c7:cd:17:40:27:21:
5e:fa:34:13:ce:f7:ed:7e:e7:91:71:1b:eb:75:94:a2:89:48:
36:86:47:93:47:cc:a2:cf:8d:95:4e:41:22:7d:14:92:d2:c7:
b4:5d:fa:2b:b5:eb:a7:96:aa:52:d5:30:7a:c8:17:37:b9:27:
a3:11:cf:8f:64:14:1d:cb:78:d5:42:27:d3:69:24:d3:56:10:
d5:82:92:57:14:f0:bc:25:99:d6:01:61:a5:64:8c:fa:34:8d:
0f:81:8c:04:20:d5:ef:b4:fb:5e:c4:96:84:4d:a8:fb:eb:58:
e6:ab:10:03:1c:af:e5:f1:7d:7d:9c:fd:c9:a5:09:fb:ea:3c:
52:ae:fe:e3:ef:f3:59:5b:6d:f2:fb:15:cc:c2:17:68:05:ad:
0a:b8:7f:a9:e7:b2:69:d6:c0:69:94:96:03:18:3d:82:ee:3f:
c8:e5:32:a7:d9:cf:2f:2e:8f:6f:03:1b:72:2c:34:df:50:93:
3f:15:28:ba:2c:8f:35:8a:c7:eb:b6:0e:1e:e3:83:32:c7:c4:
4f:5c:71:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:58 2026 by rpki-client