Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
File: nPmIlqiK6PNUCut37KHxqUu9aXg.mft (raw, json)
Hash identifier: j1Gr92gJ1Z5HIDMF39F0b4Hb9GFFLcYqL/Iug7+5ctE=
Subject key identifier: D1:F9:67:EE:06:0F:19:3B:C3:54:73:0E:1E:B9:9A:9C:03:A6:5D:B4
Authority key identifier: 9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
Certificate issuer: /CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Certificate serial: 019D38657D5EC53A1EC964BC8147A4388980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
Manifest number: 0A25
Signing time: Sun 29 Mar 2026 07:01:08 +0000
Manifest this update: Sun 29 Mar 2026 07:01:08 +0000
Manifest next update: Mon 30 Mar 2026 07:01:08 +0000
Files and hashes: 1: nPmIlqiK6PNUCut37KHxqUu9aXg.crl (hash: ML/PLRrf5IIfyCIfUuBi9n9hH7R5/9UerTEWqoUC1lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7d:5e:c5:3a:1e:c9:64:bc:81:47:a4:38:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Validity
Not Before: Mar 29 07:01:08 2026 GMT
Not After : Mar 30 07:01:08 2026 GMT
Subject: CN=d1f967ee060f193bc354730e1eb99a9c03a65db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:f4:f9:17:1a:69:6a:02:97:08:80:98:45:
37:4f:f4:65:01:68:e0:46:0a:34:e0:c4:f8:dd:d1:
38:a2:ba:d3:e4:fb:50:6d:18:ff:14:42:3d:1c:2c:
ad:0e:27:88:eb:1e:3b:a3:82:d1:01:2d:d3:02:fe:
de:84:77:eb:87:66:44:9f:16:46:52:a7:26:fe:1e:
8a:93:5f:ab:27:73:4e:a4:9b:4e:ac:fb:e8:4c:3a:
f4:07:fa:23:15:d6:aa:5e:bc:06:de:ab:0f:6b:fb:
96:41:96:f4:e1:25:9b:84:9c:06:e1:4d:5c:48:2a:
f9:cf:84:0a:d6:38:83:96:d6:b0:35:e2:aa:40:26:
49:df:c3:60:34:1b:97:e8:6c:23:63:e9:d6:5b:c9:
67:cc:77:5a:8e:4f:e0:73:68:89:81:26:24:73:91:
65:56:04:76:32:44:21:13:e1:63:67:52:a8:f4:fa:
67:1e:e4:2d:05:1e:68:87:94:c6:40:69:ef:a6:46:
f9:aa:00:74:c7:28:52:e6:c8:02:21:20:fb:f3:1c:
51:5a:e9:2a:a7:e6:90:6b:05:70:44:f4:d3:4a:95:
8d:21:ce:5b:bf:90:28:e9:01:29:82:fa:3c:21:5d:
e1:3e:94:b8:fa:68:c9:ce:51:d4:ff:68:5e:9a:45:
72:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F9:67:EE:06:0F:19:3B:C3:54:73:0E:1E:B9:9A:9C:03:A6:5D:B4
X509v3 Authority Key Identifier:
keyid:9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:bb:27:fd:94:a8:4a:70:5e:d6:30:7e:b1:c8:1a:ad:c7:c8:
bf:6f:45:36:27:74:ac:e3:6a:a1:87:3f:81:42:c0:2e:41:28:
4a:ff:b9:c5:0a:90:b9:ea:d8:e2:91:28:68:9a:02:c1:5e:81:
26:67:9e:04:7c:58:0a:27:02:21:df:f4:59:13:41:75:43:6b:
20:f5:f4:b1:45:19:84:55:1f:27:c8:d1:cd:b8:3f:17:54:69:
c7:df:dc:56:99:ed:98:79:be:71:9e:53:ea:61:c2:d2:7e:2b:
1d:4a:6d:05:8c:1f:d0:25:2f:9e:f4:c8:6e:83:c4:04:cf:10:
c8:fb:9b:55:a3:08:fb:4e:aa:3c:9f:86:aa:64:8f:d3:fb:c9:
9a:6a:17:fd:9e:05:97:4b:45:cc:b7:59:e5:5c:f1:f8:84:48:
0b:c8:d3:a1:d6:02:74:4a:31:c3:51:9b:bb:a8:b3:42:09:b9:
f0:e6:dc:04:f4:06:bc:e0:a8:f6:77:e9:4a:8c:23:a9:34:94:
c7:20:e9:7c:e5:c8:3f:89:d2:88:58:1c:da:24:77:1d:d8:80:
bc:78:41:f5:52:58:b1:00:6f:4f:de:d4:39:f1:07:3f:cd:a5:
8a:03:ef:57:0b:a8:22:7f:f7:01:60:a6:de:a5:06:17:51:31:
29:ec:2c:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZX1exToeyWS8gUekOImAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZjk4ODk2YTg4YWU4ZjM1NDBhZWI3N2VjYTFmMWE5NGJi
ZDY5NzgwHhcNMjYwMzI5MDcwMTA4WhcNMjYwMzMwMDcwMTA4WjAzMTEwLwYDVQQD
EyhkMWY5NjdlZTA2MGYxOTNiYzM1NDczMGUxZWI5OWE5YzAzYTY1ZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtn0+RcaaWoClwiAmEU3T/RlAWjg
Rgo04MT43dE4orrT5PtQbRj/FEI9HCytDieI6x47o4LRAS3TAv7ehHfrh2ZEnxZG
Uqcm/h6Kk1+rJ3NOpJtOrPvoTDr0B/ojFdaqXrwG3qsPa/uWQZb04SWbhJwG4U1c
SCr5z4QK1jiDltawNeKqQCZJ38NgNBuX6GwjY+nWW8lnzHdajk/gc2iJgSYkc5Fl
VgR2MkQhE+FjZ1Ko9PpnHuQtBR5oh5TGQGnvpkb5qgB0xyhS5sgCISD78xxRWukq
p+aQawVwRPTTSpWNIc5bv5Ao6QEpgvo8IV3hPpS4+mjJzlHU/2hemkVygQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNH5Z+4GDxk7w1RzDh65mpwDpl20MB8GA1UdIwQY
MBaAFJz5iJaoiujzVArrd+yh8alLvWl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblBtSWxxaUs2UE5VQ3V0MzdLSHhxVXU5YVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZWIxMDItNDIzZi00ZTkyLWI3YzUt
NzNkMDE0ZTgzNDliLzEvblBtSWxxaUs2UE5VQ3V0MzdLSHhxVXU5YVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZWIxMDItNDIzZi00ZTkyLWI3YzUtNzNkMDE0ZTgzNDli
LzEvblBtSWxxaUs2UE5VQ3V0MzdLSHhxVXU5YVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArsn/ZSo
SnBe1jB+scgarcfIv29FNid0rONqoYc/gULALkEoSv+5xQqQuerY4pEoaJoCwV6B
JmeeBHxYCicCId/0WRNBdUNrIPX0sUUZhFUfJ8jRzbg/F1Rpx9/cVpntmHm+cZ5T
6mHC0n4rHUptBYwf0CUvnvTIboPEBM8QyPubVaMI+06qPJ+GqmSP0/vJmmoX/Z4F
l0tFzLdZ5Vzx+IRIC8jTodYCdEoxw1Gbu6izQgm58ObcBPQGvOCo9nfpSowjqTSU
xyDpfOXIP4nSiFgc2iR3HdiAvHhB9VJYsQBvT97UOfEHP82ligPvVwuoIn/3AWCm
3qUGF1ExKewsPg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:15 2026 by rpki-client