Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft
File: nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft (raw, json)
Hash identifier: ASm9PMwPQfmCexL1CfZ/hxHa1hoNrAtWZyDHb35jmXw=
Subject key identifier: 9F:74:67:D1:E4:46:D1:79:BC:97:CB:10:DE:3F:A3:FD:72:F2:07:7A
Authority key identifier: 9C:6A:BE:67:79:E6:90:55:28:C6:8E:3A:AB:2C:E0:7D:62:16:1F:64
Certificate issuer: /CN=9c6abe6779e6905528c68e3aab2ce07d62161f64
Certificate serial: 019CE5FF0C3369A8065DF06F1238181FC34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft
Manifest number: 0949
Signing time: Fri 13 Mar 2026 07:00:23 +0000
Manifest this update: Fri 13 Mar 2026 07:00:23 +0000
Manifest next update: Sat 14 Mar 2026 07:00:23 +0000
Files and hashes: 1: nGq-Z3nmkFUoxo46qyzgfWIWH2Q.crl (hash: uYO2D7x8p1DS7g/ERlTkQ55U7rwEFjAygaNVSiq58VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:0c:33:69:a8:06:5d:f0:6f:12:38:18:1f:c3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6abe6779e6905528c68e3aab2ce07d62161f64
Validity
Not Before: Mar 13 07:00:23 2026 GMT
Not After : Mar 14 07:00:23 2026 GMT
Subject: CN=9f7467d1e446d179bc97cb10de3fa3fd72f2077a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:72:ec:09:cc:a8:ba:50:b9:39:ca:96:77:
b5:21:b5:6e:21:06:84:05:96:8f:01:1a:44:af:54:
b0:24:1b:ac:b2:33:c7:d8:50:7c:f3:22:22:1d:0a:
92:a4:50:d5:ec:59:10:95:5e:6f:af:6a:4b:b5:21:
b9:31:a7:e3:70:cd:cc:19:49:58:ec:80:cf:79:5b:
fe:b7:5b:18:69:df:b8:d5:8f:39:5c:f3:93:5d:85:
13:b2:bb:c9:d2:62:d7:a7:3a:c9:0e:41:25:b0:72:
02:28:31:c7:99:b1:23:a6:91:43:58:5c:ef:a6:53:
41:27:80:af:6b:57:ea:03:54:87:09:84:93:9c:95:
c2:87:07:d5:cd:77:0d:d4:f0:7a:b5:f5:7d:30:65:
75:15:a6:22:92:ef:d6:2a:15:93:fd:b5:84:8e:53:
41:69:a9:a9:a0:95:18:66:ff:12:74:09:e1:a3:47:
19:ee:fa:33:4b:6a:c7:cc:19:5a:58:3f:bd:d6:8b:
e6:56:75:06:73:d4:c2:c1:d1:9a:0b:48:b3:32:36:
76:ba:e3:bd:55:02:04:4a:28:25:0a:f6:2e:88:24:
07:64:94:94:3c:80:09:3b:6e:cc:8f:c7:30:28:be:
98:6e:c0:5f:08:b2:68:d4:65:96:ba:54:77:c2:8c:
87:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:74:67:D1:E4:46:D1:79:BC:97:CB:10:DE:3F:A3:FD:72:F2:07:7A
X509v3 Authority Key Identifier:
keyid:9C:6A:BE:67:79:E6:90:55:28:C6:8E:3A:AB:2C:E0:7D:62:16:1F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/582239-d5ec-4b83-9a51-d42284a702de/1/nGq-Z3nmkFUoxo46qyzgfWIWH2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:01:4e:98:70:6b:39:2e:f3:f2:69:a8:04:86:14:95:ee:a3:
75:46:48:72:ee:0b:e0:5f:d1:3a:69:db:a6:7d:55:67:0b:e3:
3d:6f:b4:73:21:ec:bc:46:1c:d4:3c:45:c8:9e:18:0c:9a:e9:
1a:42:0a:75:9c:bd:8a:2c:ba:a0:c4:28:77:f1:05:7b:bc:98:
31:9f:55:b8:b1:4c:37:c1:54:72:5e:e2:ba:d4:d7:54:56:65:
70:55:1b:cf:d7:23:ad:86:1e:eb:e7:46:ca:ea:c7:0f:c0:db:
75:fc:4f:f7:1a:7e:e9:b7:48:2f:6f:e3:ea:0f:e1:ad:ff:c4:
cb:93:5e:80:07:00:c5:aa:6f:37:b5:42:82:c0:74:aa:96:e5:
ad:ac:d9:15:61:92:40:61:9f:1a:e8:f1:35:4d:86:5d:bc:19:
1d:f2:32:95:6f:a6:e4:4f:46:9a:41:a3:40:e2:96:2a:54:56:
05:cc:32:5e:9d:95:7c:0e:76:c1:d3:e2:f5:a7:9d:9b:25:09:
61:c6:97:a9:a4:6b:d6:5d:d3:b7:e0:9a:5a:a7:fd:78:a3:57:
0a:99:23:ef:af:42:98:a0:a7:99:23:a4:be:7a:82:ae:b4:d0:
84:19:c4:2a:57:0f:a9:da:39:0e:94:d5:a8:b8:e3:46:02:3c:
0f:45:96:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:58:17 2026 by rpki-client