
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
File: Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft (raw, json)
Hash identifier: lZAqZozRYukCsbelLcLS0g9e/UqTUA1zPdU2d3IsAts=
Subject key identifier: 48:A1:38:04:A2:F4:19:30:14:17:E9:C4:D4:79:6F:80:40:BF:30:41
Authority key identifier: 36:3E:43:7F:6B:68:34:B0:84:74:7E:AF:76:D8:D2:60:A7:9B:FC:8B
Certificate issuer: /CN=363e437f6b6834b084747eaf76d8d260a79bfc8b
Certificate serial: 019EFC842675748EBB041D4684AAABFE1ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj5Df2toNLCEdH6vdtjSYKeb_Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
Manifest number: 44
Signing time: Thu 25 Jun 2026 02:02:59 +0000
Manifest this update: Thu 25 Jun 2026 02:02:59 +0000
Manifest next update: Fri 26 Jun 2026 02:02:59 +0000
Files and hashes: 1: Nj5Df2toNLCEdH6vdtjSYKeb_Is.crl (hash: ZEWGbjeG2epM0N2kvEds5sZ9TyFP+C2OiLRnvIEVlOg=)
2: QTwY7hZ5jhbuRgKMO0Ou2fKamBU.asa (hash: AlP7J188PqhkPU3RkVEeK3sJgESC4Fbnn4Z98OFzkN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj5Df2toNLCEdH6vdtjSYKeb_Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:84:26:75:74:8e:bb:04:1d:46:84:aa:ab:fe:1a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363e437f6b6834b084747eaf76d8d260a79bfc8b
Validity
Not Before: Jun 25 02:02:59 2026 GMT
Not After : Jun 26 02:02:59 2026 GMT
Subject: CN=48a13804a2f419301417e9c4d4796f8040bf3041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6b:68:39:c8:ec:d2:41:fa:fe:f1:31:22:4b:
1e:ad:cd:3c:d3:b2:8f:99:df:ed:4e:42:e7:cb:3e:
72:b4:84:cd:cb:30:4c:61:6a:b7:00:33:dc:3f:d0:
ca:b2:ee:e0:89:2a:3f:60:ec:f8:b7:8d:e8:67:85:
7a:ae:9e:c7:9e:b0:95:17:e4:81:b6:8d:50:2d:14:
f6:7f:b2:25:5a:ce:0d:96:41:f3:a9:d8:00:a9:59:
96:66:62:38:07:fc:69:97:f2:61:0b:18:91:dd:8a:
fb:61:ec:03:07:a0:bd:5a:0e:70:73:ec:73:e5:9a:
26:7f:16:57:8b:35:47:f9:c5:a2:58:a1:ed:cc:e0:
ae:ce:b3:c8:d0:2b:96:31:07:b8:9e:1b:87:f8:2b:
12:28:2d:3e:f1:75:ff:68:01:66:03:ec:e8:f2:34:
47:b9:d1:65:0f:a7:d8:61:a6:0e:ca:06:4e:ee:7b:
6f:90:3c:af:96:5c:76:0c:65:73:2d:c2:a7:8b:9d:
b8:1a:78:2e:df:9f:2a:83:10:4d:d0:a3:4b:79:84:
93:04:c3:27:1b:9a:86:04:01:f3:9d:52:9f:78:85:
6d:39:59:4d:82:8b:50:04:82:11:8f:35:90:d0:ef:
fe:70:1e:d4:7e:2c:4b:6e:55:5c:ca:ef:4f:74:a2:
e9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A1:38:04:A2:F4:19:30:14:17:E9:C4:D4:79:6F:80:40:BF:30:41
X509v3 Authority Key Identifier:
keyid:36:3E:43:7F:6B:68:34:B0:84:74:7E:AF:76:D8:D2:60:A7:9B:FC:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj5Df2toNLCEdH6vdtjSYKeb_Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:39:7b:32:25:a5:39:29:e2:55:fe:08:a3:19:96:ea:99:a6:
72:1e:5a:ed:ae:72:b0:fe:5e:f8:3e:d7:1f:be:ec:4b:2d:cf:
2e:41:90:d1:f8:f6:6a:57:68:c2:4b:36:90:a7:52:1d:0f:62:
55:11:f3:34:9b:7a:38:db:e0:f5:57:2c:1c:2c:c4:02:fe:7b:
3a:8f:50:a2:43:b9:9b:ce:67:e7:bc:b7:69:3f:c4:b4:e9:6b:
92:73:cf:61:95:37:47:fd:50:f6:e8:4a:af:dc:54:3c:87:99:
89:13:44:d1:2b:fa:ad:b6:56:05:09:d5:20:b4:77:36:e8:53:
47:45:90:cc:f9:9a:ad:43:be:f0:51:ef:f6:6a:f3:d9:05:ef:
e1:78:f8:d2:fc:a7:88:e7:4b:bf:9b:1b:46:84:78:3a:b3:1e:
22:d1:2e:09:6e:0a:61:29:9c:70:2f:b4:fe:fd:11:6d:0c:5c:
5b:f7:d4:eb:65:30:e5:11:00:fc:49:44:a4:ba:f4:1f:ff:75:
cf:e3:fe:e4:43:8b:0e:b4:27:88:27:f3:cd:ff:f2:20:d7:d6:
25:4c:75:94:ef:7c:d8:4d:bb:f8:38:52:7e:a6:2a:4b:d6:33:
04:e5:ed:a0:ae:e2:61:e4:fd:5b:43:d1:d4:0f:6c:66:9f:be:
03:ba:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:34:30 2026 by rpki-client