Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
File: nSPpHVsFtF8H04Uk9PHi45K4qDo.mft (raw, json)
Hash identifier: a3IEtZtW1mUZWhOb3QfYBYkRYD919YIzFZDEmrVplvk=
Subject key identifier: 2E:C5:74:D9:C6:F7:37:84:4E:4F:21:EA:4C:67:02:BD:85:7F:0D:B5
Authority key identifier: 9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
Certificate issuer: /CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Certificate serial: 019EB80F2A3DDB7A22F3466ACCA4FC73A9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
Manifest number: 097F
Signing time: Thu 11 Jun 2026 19:01:01 +0000
Manifest this update: Thu 11 Jun 2026 19:01:01 +0000
Manifest next update: Fri 12 Jun 2026 19:01:01 +0000
Files and hashes: 1: nSPpHVsFtF8H04Uk9PHi45K4qDo.crl (hash: q19prSfJUI1oCFcc9OgY4PR4ISbBoY6SF/MAKGPr7aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:2a:3d:db:7a:22:f3:46:6a:cc:a4:fc:73:a9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Validity
Not Before: Jun 11 19:01:01 2026 GMT
Not After : Jun 12 19:01:01 2026 GMT
Subject: CN=2ec574d9c6f737844e4f21ea4c6702bd857f0db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:87:5a:30:b3:c1:64:31:b2:ec:32:b3:93:6a:
78:80:31:21:6e:ef:72:0d:32:5f:bb:4e:9c:52:f4:
a6:af:b2:d2:8b:67:e9:a5:a2:fa:3c:ce:97:cb:62:
e3:1a:5a:bd:6d:72:ba:a3:67:db:a1:48:b5:ee:79:
fc:68:6b:17:7a:fb:81:f4:e6:5e:82:29:f5:07:34:
fa:82:29:b3:4a:f5:14:3b:c6:82:2c:ea:d1:21:e3:
82:04:8a:3e:2e:b5:3a:fb:70:fe:c0:c8:e1:ec:0e:
99:b1:07:d9:3a:ae:4c:db:f1:96:17:a6:e3:f8:29:
97:61:a6:a3:56:c1:72:4b:5e:96:b2:46:a2:a5:e0:
4d:f7:49:b4:ff:6f:ba:27:09:c8:95:49:c9:61:29:
b7:98:51:66:3e:ef:5c:5a:ac:ac:dc:56:fd:27:63:
21:b1:b8:fa:d5:44:86:69:ca:56:12:73:8b:0f:7d:
d2:e2:3f:38:ff:01:78:e2:3d:7b:b7:ff:46:fb:ca:
29:9d:c9:2b:b3:e8:88:48:f2:d6:5e:fb:45:80:d4:
4e:98:09:e0:7e:97:87:ad:a9:56:32:28:14:c6:c8:
c4:39:39:8d:e4:66:86:39:a6:74:45:4f:2b:0c:8c:
7f:2b:49:e2:c7:63:40:ab:54:93:8b:08:c8:af:0d:
16:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C5:74:D9:C6:F7:37:84:4E:4F:21:EA:4C:67:02:BD:85:7F:0D:B5
X509v3 Authority Key Identifier:
keyid:9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b6:1e:f8:cb:0b:8a:55:26:65:70:46:ac:78:d6:84:1c:82:
df:fd:d7:65:89:a7:27:58:ee:bd:c0:e9:45:a4:a7:1c:8a:49:
66:f5:92:c9:25:a0:02:19:85:2c:52:c3:68:58:56:05:f8:82:
8a:cc:37:25:98:c4:d7:a4:98:4f:fe:dc:27:08:f0:9a:36:5b:
23:5d:1e:04:3c:95:b5:31:f2:5a:65:8b:98:a3:09:ae:84:5d:
be:66:44:37:64:42:a8:27:f5:e9:87:90:3e:07:9c:a2:58:fc:
49:2a:a8:18:eb:e6:3b:92:df:62:dd:6f:16:65:0f:2d:06:62:
4e:ba:97:56:5e:93:62:a4:5e:84:11:98:fa:ce:81:23:0a:82:
5e:e4:bb:f6:38:5b:d1:38:02:bd:f5:6c:c7:be:a5:cd:9c:fa:
51:30:ef:dd:17:e1:67:a7:9c:64:90:fe:14:03:4a:94:38:b7:
c9:12:35:30:b6:9a:72:48:83:03:9e:93:77:26:dd:2b:ad:af:
30:8a:77:c5:6a:2b:33:4c:ea:84:c0:7e:c5:9c:ff:85:47:d5:
68:02:f3:1e:7c:dc:4a:d2:d3:a3:2f:ff:15:99:e6:64:1d:6f:
86:9d:74:f6:1b:67:b0:da:2d:93:96:4e:69:87:97:92:9e:75:
66:c7:50:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:27:02 2026 by rpki-client