Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
File: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft (raw, json)
Hash identifier: pu/YhTnLb7tOcAa+0Y9PnAksg2U3+e+t/C8O4xGRGbA=
Subject key identifier: 6D:B1:C4:13:A5:5D:A3:C6:A0:9E:DE:F5:0C:63:A9:34:87:97:99:68
Authority key identifier: 36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
Certificate issuer: /CN=363bd1b29c89edb944e28710d193874c94323eaa
Certificate serial: 019D38666D90B8100BAED823227ECE186169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
Manifest number: 0572
Signing time: Sun 29 Mar 2026 07:02:09 +0000
Manifest this update: Sun 29 Mar 2026 07:02:09 +0000
Manifest next update: Mon 30 Mar 2026 07:02:09 +0000
Files and hashes: 1: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl (hash: ayr6WDl7uCfPzNGCyE4+J9k6+4VDDcKNrDU/FdCgl14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:6d:90:b8:10:0b:ae:d8:23:22:7e:ce:18:61:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363bd1b29c89edb944e28710d193874c94323eaa
Validity
Not Before: Mar 29 07:02:09 2026 GMT
Not After : Mar 30 07:02:09 2026 GMT
Subject: CN=6db1c413a55da3c6a09edef50c63a93487979968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:49:73:62:14:7e:32:93:bb:fb:3b:a9:3c:
e5:a8:5c:48:f6:18:c3:aa:18:9e:ee:12:a5:6b:90:
1e:71:67:dc:d9:62:57:6f:6d:55:33:c9:b3:17:02:
2c:91:2e:93:01:75:e5:d4:d7:ce:29:ea:53:f8:6c:
ed:09:52:1e:a4:a9:10:8f:24:a3:20:0c:96:ed:10:
ac:9e:51:d2:43:5c:d3:4c:1f:18:9e:96:50:0d:19:
00:f6:7b:45:30:7e:9a:de:da:1b:48:79:ac:b6:1d:
25:b7:23:1b:9b:ae:a8:29:43:5b:37:95:86:5a:3d:
28:83:8f:6a:c5:73:d2:5d:ec:86:8d:e1:aa:2f:b3:
e5:e1:f1:f4:8d:42:05:53:e8:e2:1a:e4:d3:d8:a2:
f3:d3:4a:14:8a:cd:01:ed:3c:9b:92:27:f8:1e:b0:
dc:86:68:6e:76:95:4d:0e:3e:4b:d1:e6:3f:c5:42:
38:7c:ae:c3:89:44:3a:10:ac:7a:e4:f6:6a:a7:21:
43:83:f0:e6:85:ff:d3:73:5f:e7:02:0f:b5:48:04:
0a:29:38:96:b5:06:92:07:d6:92:03:55:a6:da:d2:
72:ca:f2:c7:d3:fd:0e:00:4b:ce:9a:7f:ad:7b:ff:
c7:24:dc:ff:95:3b:b4:9d:59:87:bd:e4:45:12:6a:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B1:C4:13:A5:5D:A3:C6:A0:9E:DE:F5:0C:63:A9:34:87:97:99:68
X509v3 Authority Key Identifier:
keyid:36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0e:6f:74:63:ca:f6:44:20:3a:f1:6b:eb:99:74:e5:ac:29:
1f:a1:e8:0b:69:9f:07:c9:d7:9f:6b:5b:d2:6a:9d:ca:88:b4:
62:d4:89:e6:92:62:04:5f:31:fa:39:f3:a8:59:a5:4d:30:6e:
2f:55:5b:a0:04:2b:42:ca:47:47:31:30:00:c8:b3:43:1a:43:
c1:95:81:64:26:33:5c:4c:1c:b1:8f:60:4c:aa:2c:1b:5f:a0:
1e:6d:48:2c:0f:c6:77:16:b0:b9:df:3a:c0:39:bc:9b:bc:7a:
06:b6:75:d2:67:4c:1b:79:5a:7d:d6:64:79:be:c6:74:c6:86:
f6:84:87:19:a8:e7:77:b3:c3:6c:e0:5f:76:0a:72:c4:a0:9f:
77:01:0c:60:02:88:b1:83:c7:0c:97:a8:19:38:60:bc:43:2c:
94:8f:a3:14:85:6f:84:49:4c:f7:7f:b4:bc:3f:e2:7b:50:48:
6e:6d:66:c2:2f:3f:8e:27:c8:90:a9:65:36:9f:64:50:2d:33:
00:d7:82:0b:0f:c9:3c:10:5e:fe:df:8a:a3:87:c6:7b:9c:c4:
4f:3c:32:a2:f3:c5:c5:0a:71:7d:f1:ac:f2:43:52:c3:cd:aa:
e1:be:e1:14:99:4f:c5:8a:be:5a:3e:6f:c6:da:4c:22:26:52:
1d:2f:df:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:12 2026 by rpki-client