Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
File: nlf4Q7F__OqpuGNlgf5NVONG3cw.mft (raw, json)
Hash identifier: /v00yUtbKU4QCDX0kZEeqEJpj3JVcGBI77HBWb9NpLQ=
Subject key identifier: 51:F0:6F:93:D1:06:EC:31:E0:B4:25:CB:11:03:1D:86:B8:78:8C:C1
Authority key identifier: 9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
Certificate issuer: /CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Certificate serial: 019D3AC10F0F380E917499FCFDCC016945D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
Manifest number: 0EE5
Signing time: Sun 29 Mar 2026 18:00:23 +0000
Manifest this update: Sun 29 Mar 2026 18:00:23 +0000
Manifest next update: Mon 30 Mar 2026 18:00:23 +0000
Files and hashes: 1: nlf4Q7F__OqpuGNlgf5NVONG3cw.crl (hash: q+v6DMJ+RXLBzrcf8zg5sEp46Ca4t9ZhTWKidGu0UEY=)
2: ob7F2VCJOAAsHnye3Fkfiw3LDrA.roa (hash: 73dBJpgeQaRvDu0bCVr2PUKhwsl+BWtyqsuA67uRjtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:0f:0f:38:0e:91:74:99:fc:fd:cc:01:69:45:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Validity
Not Before: Mar 29 18:00:23 2026 GMT
Not After : Mar 30 18:00:23 2026 GMT
Subject: CN=51f06f93d106ec31e0b425cb11031d86b8788cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:37:55:6a:1c:3b:74:4f:a0:ef:5b:10:f3:
1c:18:64:42:5b:60:40:4b:b4:e7:39:5c:45:e8:db:
47:20:99:57:ee:49:76:22:6d:41:fd:32:fd:8f:38:
9e:b6:83:54:89:64:c0:3d:86:0b:d3:0b:4f:6f:c0:
c2:81:dc:ba:ec:71:c9:81:1d:da:f1:46:8e:c4:ed:
60:e4:84:1b:5b:5b:dd:84:03:29:d0:e2:a0:e8:f5:
4e:8e:10:71:f1:ba:43:fe:50:22:62:52:4c:8f:84:
8d:de:3f:7d:3f:05:5e:0c:d8:41:b3:b6:a6:f4:7a:
14:16:52:2c:fa:0b:21:1e:34:6b:8f:ad:e9:ac:f4:
6f:79:dc:0e:7b:c1:d1:81:ce:35:ce:8c:96:e4:c4:
3b:f9:e2:93:3f:6b:b6:aa:e2:99:c3:ed:17:de:b9:
f9:c5:6b:6f:e8:52:f9:c7:35:d4:d7:b7:6b:44:3c:
96:0f:ea:96:8a:16:bc:67:4a:6c:cb:4a:6c:42:8a:
1a:80:e7:b7:96:68:15:78:87:ca:67:f1:e9:ce:ee:
f7:9e:76:ff:25:25:c4:dd:ef:6c:29:8e:ea:7d:b8:
f2:2f:a6:91:c1:46:2b:ec:b7:42:99:7b:09:dc:09:
10:90:fb:33:5c:bc:50:52:b7:45:2c:b1:1c:e9:e9:
58:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F0:6F:93:D1:06:EC:31:E0:B4:25:CB:11:03:1D:86:B8:78:8C:C1
X509v3 Authority Key Identifier:
keyid:9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f3:05:d9:bf:5b:e1:df:fc:f6:ef:8b:cc:8f:38:ea:2d:f4:
79:07:16:73:ee:36:6e:98:7b:8f:62:7e:7e:0a:7d:77:c4:6a:
1a:7a:89:89:bf:39:e1:f5:a4:ed:b6:fb:c2:e1:90:78:f9:c6:
51:1b:45:37:8a:13:7a:54:c7:32:f7:e6:99:62:c7:76:a9:5c:
7d:e3:19:f8:64:32:d8:33:9b:d2:db:37:ff:8c:14:b7:d7:b6:
70:c6:0e:81:4c:75:54:d5:a1:dd:ea:f8:b3:b5:a5:94:fb:bf:
ac:7e:d8:14:98:ec:d3:1e:08:e6:f1:dd:3d:51:22:4c:16:07:
0e:44:42:e5:78:dc:35:bd:15:89:a7:99:f4:f4:03:f3:d9:bc:
27:93:81:59:45:7b:41:20:30:f5:ba:9a:ea:66:45:15:55:a7:
a5:24:55:43:62:4a:24:54:ff:d3:9b:e6:bc:6e:50:1a:6f:70:
8a:6b:b7:92:f6:a4:1a:be:07:8b:0a:26:d1:d0:c1:6b:67:f9:
19:48:46:9e:fb:6b:53:c5:65:59:0d:3c:eb:b3:9b:28:04:95:
62:2d:4b:3f:9b:ae:47:15:d4:c9:ef:10:a8:7d:a5:e0:4e:2a:
f6:68:10:aa:93:fd:14:94:04:41:23:b1:29:82:ab:b6:25:b2:
39:b6:12:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:17:08 2026 by rpki-client