Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json)
Hash identifier: rGadHVqSpDhN68LMPFHBa/CH6yeuV+1AMnhWa/LFf9I=
Subject key identifier: 11:51:8E:02:53:98:39:ED:7C:49:8F:BA:50:6E:34:C0:9D:7C:C8:D8
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial: 019D389C5706DF5C8FA76EDDEFBB4CE2384E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
Manifest number: 0956
Signing time: Sun 29 Mar 2026 08:01:03 +0000
Manifest this update: Sun 29 Mar 2026 08:01:03 +0000
Manifest next update: Mon 30 Mar 2026 08:01:03 +0000
Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: VIlNGaQ+GEOo/IgH9DOKjQn8UB1xqX0ZSLiBSS824IM=)
2: zaw-l3nyUygb03TlyeeZ5uNtuxc.roa (hash: vbvudETvvHbmCpQdctUZ1OuuVkp6d4krvgnH2TdlDSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:57:06:df:5c:8f:a7:6e:dd:ef:bb:4c:e2:38:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Validity
Not Before: Mar 29 08:01:03 2026 GMT
Not After : Mar 30 08:01:03 2026 GMT
Subject: CN=11518e02539839ed7c498fba506e34c09d7cc8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3a:82:7e:ab:15:5c:b0:7e:09:89:2c:cd:a2:
70:38:83:1a:87:09:aa:34:3d:ef:9d:47:bd:0c:cc:
e6:20:2e:a1:8d:8f:6f:33:ea:15:c4:7d:ad:fd:ea:
8a:b4:69:7f:48:fc:fc:7b:0a:69:93:45:e1:81:bb:
e3:b6:0b:47:9c:fc:4e:db:6c:d5:40:9f:7c:50:77:
f6:5a:83:37:19:f3:f6:18:70:1d:5f:3f:9f:54:4b:
48:41:5a:c6:57:8b:28:3e:f6:47:9f:c6:30:7c:ec:
ed:e8:43:01:ea:d8:4b:51:b8:93:17:6a:0e:f5:45:
1f:aa:03:31:2b:0f:7c:cb:0b:f6:0b:52:ee:dc:f6:
7d:cf:cd:0b:14:37:cf:cb:3d:9d:8c:6f:fd:3d:e6:
aa:71:ac:22:f6:a5:61:76:18:a8:2d:73:bb:97:75:
8a:3b:9f:f2:6f:d7:a9:3d:fb:4b:39:b7:c6:3e:3f:
06:69:97:81:4f:05:25:df:3e:bc:8a:a0:b9:62:78:
d2:8d:c9:ea:4f:e7:a4:b6:25:43:72:42:4a:de:12:
9b:b4:29:61:34:01:e3:60:67:e7:c6:3b:21:a9:f3:
70:11:a3:bd:38:03:98:fb:40:57:74:50:28:0e:af:
3e:0d:c9:fa:22:9d:9b:d7:a5:ee:aa:34:6a:cb:ca:
07:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:51:8E:02:53:98:39:ED:7C:49:8F:BA:50:6E:34:C0:9D:7C:C8:D8
X509v3 Authority Key Identifier:
keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6d:5f:8a:5a:ef:8c:b0:53:08:df:b0:af:c1:32:23:7d:5a:
dd:48:a3:85:7f:39:82:55:78:04:55:23:de:76:98:69:9a:6d:
7a:bd:c5:df:09:83:32:e4:c4:07:fa:c4:7f:ce:dd:db:38:d0:
eb:86:79:c7:82:0b:c6:15:96:3c:67:fa:b1:5b:15:88:8d:3a:
22:52:75:12:db:3e:03:c3:51:e8:0e:5e:c9:a6:0b:32:b7:16:
1b:ca:b2:7f:b3:40:36:c7:0c:ff:19:4f:ce:61:0a:d0:7e:5b:
40:85:2a:28:cd:95:69:dc:1a:e9:90:1b:87:67:b2:69:1e:36:
01:ee:eb:93:30:21:54:5f:1a:26:57:11:f7:a0:f3:07:ab:93:
49:a2:58:ad:fc:fd:de:e1:87:24:76:74:c9:8f:55:fb:97:75:
0e:24:d1:41:57:f9:f1:30:49:21:d6:c8:26:d2:b5:93:5d:b8:
24:0f:82:c1:0e:bf:56:74:6b:2e:cf:8a:6d:98:ea:7e:d9:5b:
53:4b:ff:cd:5c:96:87:5f:4d:4f:ff:20:be:f8:55:9c:e4:29:
39:ef:2f:a3:a9:d4:83:59:ae:42:f4:82:7a:e6:05:2e:c2:54:
29:2e:c8:53:b6:e8:5b:a2:76:29:9c:ff:17:89:83:7d:d3:19:
24:0d:f2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:27 2026 by rpki-client