Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
File: nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json)
Hash identifier: 1Dq/sw8hzOz6sUXzjcgXLLD1A3sWf62a25queyAsNwc=
Subject key identifier: 9C:08:BB:BC:22:82:8E:00:DE:0C:2B:B0:D8:EE:32:6A:78:22:CB:31
Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
Certificate issuer: /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Certificate serial: 019D37C0783EA4B83BB73BD4052F8B0B9EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
Manifest number: 12D9
Signing time: Sun 29 Mar 2026 04:00:53 +0000
Manifest this update: Sun 29 Mar 2026 04:00:53 +0000
Manifest next update: Mon 30 Mar 2026 04:00:53 +0000
Files and hashes: 1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: HfjnUU9VCV7FbGrUWJ6M1KRKO8FTrIm4XbH1hcHwFPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:78:3e:a4:b8:3b:b7:3b:d4:05:2f:8b:0b:9e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Validity
Not Before: Mar 29 04:00:53 2026 GMT
Not After : Mar 30 04:00:53 2026 GMT
Subject: CN=9c08bbbc22828e00de0c2bb0d8ee326a7822cb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0f:a5:d8:44:de:fa:88:d9:1a:cd:ac:1f:69:
1d:41:d8:ba:9f:92:55:92:98:7c:bb:9e:0f:4a:31:
27:fc:7b:df:3d:d9:04:52:e9:aa:cc:71:52:cb:2a:
2b:16:14:41:ec:1c:c0:93:f9:75:3e:71:67:c9:2a:
27:d1:7b:e8:0f:fc:e9:92:48:9d:95:98:57:d6:4f:
d3:c2:2d:c3:12:60:ae:d3:95:8c:3e:17:ca:47:93:
15:45:19:0b:40:f0:fc:52:5d:2e:1a:d7:d8:fa:bf:
54:db:a8:63:4b:5b:fc:c4:28:fb:6b:44:8e:95:9d:
5b:9f:18:8a:9e:8d:b7:02:ea:68:f8:8d:5c:b1:70:
b0:50:ed:23:85:61:e0:7d:1b:49:5b:01:ee:dc:13:
65:60:bf:f6:a5:c7:be:2e:32:55:56:d1:5a:ab:bf:
59:13:4c:53:68:32:11:1d:5a:98:3d:04:cf:32:a0:
39:28:f6:d2:90:9f:46:7d:da:a4:8c:54:dc:5d:80:
30:41:5d:e1:16:a1:e2:d0:37:f7:6f:ea:c1:49:1b:
96:40:0e:f2:fd:ae:29:94:f5:be:d0:c6:97:a1:4c:
5d:3a:47:8b:4c:e5:dc:a2:c1:67:13:87:f0:fa:78:
34:b2:a7:06:7b:3e:01:16:13:36:5d:ab:bf:e9:d1:
18:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:08:BB:BC:22:82:8E:00:DE:0C:2B:B0:D8:EE:32:6A:78:22:CB:31
X509v3 Authority Key Identifier:
keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d4:92:1c:7c:bd:05:0c:97:17:c7:95:fc:2a:70:a9:9a:51:
4c:bc:f7:25:fc:76:0e:e9:37:4a:8b:8e:da:f7:95:3c:83:82:
d9:68:a9:b4:46:e2:e7:93:8e:b3:3f:99:ff:df:ee:fa:ed:6a:
7f:e2:2d:97:87:d8:02:db:b8:32:a0:76:46:fd:93:5d:73:fa:
0a:ee:ba:2f:c6:f0:b4:e1:65:53:af:4c:9f:be:8b:6e:93:92:
1b:ed:2f:84:d1:d3:91:1c:c4:46:d8:ea:b9:c2:42:32:c1:20:
e1:ca:18:4e:3a:5a:af:de:59:25:41:e3:f6:3d:4a:a4:f3:46:
fd:39:fc:67:29:98:3d:03:12:57:4f:77:93:d3:6c:ac:c5:7f:
20:94:c6:d9:17:d7:dc:ad:f0:8c:79:1a:3a:e8:2e:ac:c4:6d:
e0:fe:81:11:ed:a2:a7:03:33:73:12:41:1f:d1:7e:ea:27:52:
9b:27:15:45:d7:da:f5:64:a9:88:c9:01:0c:41:d0:c6:cf:ef:
03:f9:01:16:bb:fc:db:c4:33:ea:ae:8d:f3:25:0f:1a:df:2d:
7d:9b:b7:c1:a5:1a:4d:52:93:32:e3:bc:f7:9b:0f:77:23:af:
bc:48:c0:92:2b:44:83:7b:1b:bb:8f:19:fd:a4:ad:81:e9:64:
89:fd:27:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:03 2026 by rpki-client