Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
File: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft (raw, json)
Hash identifier: Pgd4z62LQZaP1tUK0Q5qqCdZxy742A4q/W0DXYY2CXQ=
Subject key identifier: 26:E4:0F:B1:90:7F:E1:23:2D:F0:2E:7D:73:DA:99:CC:D5:47:A7:33
Authority key identifier: 35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74
Certificate issuer: /CN=35ced0549f5b35dafa74d90b0468200178545d74
Certificate serial: 019D38D382D5C422E9F4DC241C34B4FC04DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
Manifest number: 03AD
Signing time: Sun 29 Mar 2026 09:01:18 +0000
Manifest this update: Sun 29 Mar 2026 09:01:18 +0000
Manifest next update: Mon 30 Mar 2026 09:01:18 +0000
Files and hashes: 1: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl (hash: rc7qInJKOj/qMeUjHqNH96TA9WsEOSqYcYfCg7mQUms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:82:d5:c4:22:e9:f4:dc:24:1c:34:b4:fc:04:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ced0549f5b35dafa74d90b0468200178545d74
Validity
Not Before: Mar 29 09:01:18 2026 GMT
Not After : Mar 30 09:01:18 2026 GMT
Subject: CN=26e40fb1907fe1232df02e7d73da99ccd547a733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:11:11:2c:69:1f:92:ad:d7:d7:ae:06:7e:3f:
f1:ef:fc:3c:15:a9:6d:cf:fd:34:12:01:1f:be:7f:
e2:4a:c2:2c:54:83:f2:60:e9:c0:97:30:45:f2:c6:
16:84:d5:c5:f7:ba:20:06:bc:15:51:7d:88:66:c2:
45:a2:72:81:c4:f6:b2:c8:48:9e:6f:71:33:6e:7e:
0a:6e:8e:8c:5d:04:6c:90:1e:9f:38:50:bf:43:da:
10:cd:85:d3:d1:48:9d:ac:38:d4:71:1c:28:2e:02:
6d:35:ff:95:19:17:d1:06:a3:15:a4:bb:a0:ff:6c:
64:b9:30:dd:70:8d:44:a2:c8:46:0a:93:fb:d9:b7:
e9:09:58:84:45:bd:cc:be:6f:e8:45:13:07:c2:76:
5c:d3:64:c9:66:55:01:d6:ed:d7:d2:f3:a3:b7:dd:
e6:39:76:70:e1:e0:cf:0a:09:17:28:e9:a9:d7:ab:
d3:b8:b7:0a:8a:e5:15:3d:89:a2:62:30:1c:8d:02:
47:c9:97:4e:6c:4a:ea:c3:27:8c:a5:c1:6c:cd:e6:
10:df:2d:af:c8:1b:ce:64:a6:df:55:d1:10:fb:aa:
11:8c:b3:e4:c8:33:8c:88:eb:1b:d5:6c:ee:f2:ce:
bc:d9:f9:c9:bc:b5:87:83:57:03:5d:c8:d5:fc:b0:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E4:0F:B1:90:7F:E1:23:2D:F0:2E:7D:73:DA:99:CC:D5:47:A7:33
X509v3 Authority Key Identifier:
keyid:35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:30:0e:a6:08:8e:9b:44:2f:b5:73:36:e0:ad:45:51:77:23:
4d:0c:27:ac:8b:c0:c6:99:ae:8f:e2:8e:f7:0f:56:04:80:da:
16:e0:21:fe:40:0e:f1:c3:45:99:63:7f:fe:63:63:4b:12:3f:
24:7a:ec:47:10:b7:0c:d0:d1:df:38:ae:19:4a:5d:56:46:a8:
0d:5a:01:31:0a:9f:0f:af:cc:eb:98:04:fa:09:d6:a8:f2:a0:
1c:ca:21:38:19:d3:d4:3b:33:39:75:d9:2c:66:01:77:3b:fb:
c2:88:46:13:ba:4e:9d:e9:96:62:d4:89:9e:94:32:65:24:53:
91:2f:d8:53:34:6b:21:d4:7a:1a:88:7e:2f:f8:94:c0:b1:b7:
b2:51:46:0e:da:a5:76:65:4e:d7:87:56:9b:ba:46:d1:13:51:
c8:19:23:59:74:08:0e:0f:11:91:fc:9d:67:ca:8d:d8:8d:58:
55:d3:0d:48:18:eb:a4:4d:57:a3:b9:62:49:a0:81:9d:46:6d:
6b:5c:e8:b6:53:fb:8e:0b:f5:31:ff:da:37:d4:30:6c:13:9c:
18:93:80:cb:58:02:e1:34:d8:37:c7:61:fe:dd:77:6d:c8:a7:
75:d1:7a:55:dc:66:53:1a:37:c9:01:c8:7f:47:ac:b2:55:19:
3b:a6:da:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:51 2026 by rpki-client