Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json)
Hash identifier: eHFPU3pGdIDn4U90+AbAeJbtTbnVmZNiUKc04+hK+p0=
Subject key identifier: 7C:E5:77:24:04:B9:D9:B9:77:0C:88:0F:ED:02:4E:A1:20:D1:F2:3A
Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Certificate serial: 019D38D2FC246C734E9B1D2FB72D95557F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
Manifest number: 08E1
Signing time: Sun 29 Mar 2026 09:00:44 +0000
Manifest this update: Sun 29 Mar 2026 09:00:44 +0000
Manifest next update: Mon 30 Mar 2026 09:00:44 +0000
Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: yJGdCQTi1p4Uf5L8z83GxxrpLQ/ZvW1Wn/LpcP+fvGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:fc:24:6c:73:4e:9b:1d:2f:b7:2d:95:55:7f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Validity
Not Before: Mar 29 09:00:44 2026 GMT
Not After : Mar 30 09:00:44 2026 GMT
Subject: CN=7ce5772404b9d9b9770c880fed024ea120d1f23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a5:6b:50:9c:b0:1c:a6:60:29:07:df:09:95:
70:0f:c0:fb:e1:d0:6f:e9:12:4a:a2:27:ab:e4:32:
9d:26:98:26:38:dd:3d:0a:8f:9a:3b:81:49:11:8d:
27:9b:ad:fb:51:3b:c8:3f:01:5f:8c:48:f0:e6:74:
ca:51:22:63:6e:31:0a:bc:e3:53:db:74:7f:6a:b7:
b4:61:48:9d:c8:24:db:67:33:57:79:de:64:74:81:
fb:81:fb:9f:8b:fd:b3:e8:c8:ba:31:bb:6e:f7:e8:
d3:49:0b:10:43:71:cd:43:92:db:84:c4:1b:f7:e1:
2b:cf:cc:08:d7:45:3b:d2:2e:fe:93:b1:fe:46:dc:
d1:44:b0:53:e6:bf:a5:1a:de:c5:fa:a5:c8:99:f5:
6b:e9:49:47:77:ae:4a:c0:56:bc:22:62:df:c6:7a:
cd:8e:12:bb:d2:46:9c:e0:a1:db:66:59:34:a7:c3:
f1:4d:56:9d:9d:a4:a6:4e:97:4e:b4:0e:72:29:78:
1b:47:8f:a9:41:7f:64:29:b4:5c:7f:0c:57:30:88:
11:57:0e:b4:c9:d8:6a:f8:47:bd:5c:7c:31:cc:98:
a5:8e:9a:90:22:86:5c:fe:53:5c:4d:02:bc:36:0a:
ce:12:cd:54:08:cf:e1:c2:e2:9a:fa:ef:82:40:b8:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E5:77:24:04:B9:D9:B9:77:0C:88:0F:ED:02:4E:A1:20:D1:F2:3A
X509v3 Authority Key Identifier:
keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:43:47:53:d0:b6:05:a1:f1:05:4c:51:2a:ff:92:e1:6c:61:
16:47:c1:7f:cc:0e:77:e0:e6:63:33:28:eb:83:b9:ba:27:a8:
e8:e3:c6:0b:37:fd:97:8a:71:4e:c9:be:ea:e9:a1:4f:a3:fb:
82:f4:62:46:2b:fc:c9:8e:9f:ac:30:52:0e:8d:e1:49:6b:c7:
2b:fc:b1:5e:4a:4b:b0:f9:19:d5:68:c5:94:f5:d4:74:07:9a:
85:bd:da:09:f1:5b:48:52:40:2b:3d:ac:b0:31:49:d1:4e:31:
22:ea:18:9b:bb:de:40:ef:02:12:71:ae:da:9e:e2:ae:25:6c:
8d:dd:dc:0a:1d:2b:5f:5c:7e:31:65:3b:d3:ba:9c:23:bf:59:
3c:b2:7e:74:23:cd:22:6d:1e:8f:f3:23:60:98:17:c1:d3:a1:
aa:32:04:d1:d5:69:05:21:36:0c:7c:3e:0f:3b:d8:2c:a5:88:
41:de:9d:d3:f9:63:13:9a:30:35:d7:3a:d8:ce:03:c9:9e:e1:
a3:05:32:c1:73:82:76:2c:44:93:0c:d8:58:80:01:34:f7:bc:
a7:f8:54:25:73:79:6e:50:80:9b:1e:2a:f4:30:20:fa:fc:c6:
c1:4b:96:fa:de:08:8f:63:f4:ad:10:2b:30:5e:d1:d6:29:2c:
72:64:be:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:39 2026 by rpki-client