Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
File: nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft (raw, json)
Hash identifier: ZAwyI415RH11OxNA4U+EcfJjZzqknxRx+tG3cdwFQMo=
Subject key identifier: 7D:24:A1:38:E0:A6:D9:30:6C:C2:41:5D:66:AE:2D:8F:A3:AE:55:A8
Authority key identifier: 9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
Certificate issuer: /CN=9e3f1579ae176662d663a3834c0fef824cee033c
Certificate serial: 019D378956799D3C7BBCF76D30AE99461B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
Manifest number: 05BD
Signing time: Sun 29 Mar 2026 03:00:40 +0000
Manifest this update: Sun 29 Mar 2026 03:00:40 +0000
Manifest next update: Mon 30 Mar 2026 03:00:40 +0000
Files and hashes: 1: nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl (hash: qFo96X0TBOqrZFtn7Kbg1xXdXw+JYbx0sheHCKIX2vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:56:79:9d:3c:7b:bc:f7:6d:30:ae:99:46:1b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3f1579ae176662d663a3834c0fef824cee033c
Validity
Not Before: Mar 29 03:00:40 2026 GMT
Not After : Mar 30 03:00:40 2026 GMT
Subject: CN=7d24a138e0a6d9306cc2415d66ae2d8fa3ae55a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:f5:49:83:d1:93:d4:8a:58:8a:50:cb:9e:
77:43:73:51:e0:6b:78:25:d6:01:db:9e:26:b5:8c:
fc:89:6a:e1:34:b0:08:51:1b:6b:08:53:a7:b3:dc:
3d:c3:7c:65:0e:4c:f6:db:88:cc:3d:82:75:86:a8:
5b:d3:f5:34:ca:3d:30:d4:15:67:16:b8:ea:d5:9b:
01:8e:75:18:16:b9:d9:af:d8:71:dc:6a:6a:f7:d7:
33:e5:9d:52:55:14:23:d9:86:ac:67:cb:d0:6b:af:
5d:8d:c7:33:b1:55:2f:0d:70:ed:02:97:cd:8b:b5:
df:06:21:5f:95:8b:d4:1e:60:48:4f:10:f2:12:dc:
9d:67:89:ad:06:a3:16:0a:aa:71:18:4b:c1:14:86:
d4:5b:c9:b6:22:b3:16:8d:a3:95:7c:30:0d:53:e9:
0b:0e:4b:1b:8d:55:f9:b2:81:71:04:fb:98:f2:7d:
31:59:89:e1:ed:b0:53:9d:fd:dd:56:28:df:e0:53:
9a:26:d5:5b:a2:0c:b4:51:6b:6c:99:02:20:68:d7:
aa:74:3c:f3:6e:34:6e:46:7d:89:68:f1:47:88:aa:
01:58:57:f6:b7:19:60:28:dc:22:7f:38:a5:f3:3d:
64:b8:df:01:6d:e3:1a:8b:b5:6f:ca:b9:1d:b4:eb:
32:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:24:A1:38:E0:A6:D9:30:6C:C2:41:5D:66:AE:2D:8F:A3:AE:55:A8
X509v3 Authority Key Identifier:
keyid:9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4b:74:2e:6a:73:6f:03:f7:8c:cc:02:95:6c:e7:42:49:2a:
23:c4:85:20:49:f9:74:a4:39:c4:94:7d:d9:dc:1d:e4:1c:f1:
e2:43:dd:13:d6:05:74:3f:bd:d4:4d:67:c9:8e:1c:6a:98:e3:
c6:ba:55:2e:e6:46:05:de:98:30:5f:26:75:74:07:5d:4f:77:
78:7d:8e:ef:d7:ee:6d:28:5c:f3:62:ef:6f:e6:2f:87:cd:69:
3b:ab:87:09:cf:dc:c1:ac:ee:6b:4d:f0:d1:42:03:ed:e0:79:
10:0e:2e:97:fc:96:f7:f9:67:98:e8:dc:83:69:63:cf:3d:f9:
c9:32:7c:47:76:81:3f:21:a9:ba:b8:dc:de:e1:cf:55:5c:44:
49:a6:3e:71:30:92:cf:59:94:30:78:67:50:f8:62:ef:ef:3b:
83:54:d7:1d:23:02:a6:b4:bb:7b:31:1b:ed:73:4f:11:0d:d9:
65:25:44:4c:92:cd:3a:38:e0:8e:1a:9c:15:aa:ce:ed:38:e3:
56:7c:d4:4e:dc:44:66:c3:6c:fd:b7:5f:04:a8:97:24:6a:51:
10:aa:0d:8d:1e:32:05:17:a5:1c:2f:ba:b6:82:79:f2:5a:f0:
b0:aa:39:a9:12:ad:69:6b:3d:29:20:e2:c4:a6:ee:60:0f:12:
2f:f3:b6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:39 2026 by rpki-client