Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft
File: nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft (raw, json)
Hash identifier: 9B8d7OuWTQNem01LsapSQOFeL7weeOAY8A7c73y5Yo0=
Subject key identifier: 27:C7:65:16:28:A0:EC:07:E0:DA:59:A8:5D:9F:E0:E0:92:F3:FE:AF
Authority key identifier: 9D:76:50:E4:53:B9:8F:6F:4D:D3:33:63:3A:FF:AB:BA:2C:0C:8F:8A
Certificate issuer: /CN=9d7650e453b98f6f4dd333633affabba2c0c8f8a
Certificate serial: 019D3865DEF3BA073CCF0EA0473ACC60E907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXZQ5FO5j29N0zNjOv-ruiwMj4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft
Manifest number: 0360
Signing time: Sun 29 Mar 2026 07:01:33 +0000
Manifest this update: Sun 29 Mar 2026 07:01:33 +0000
Manifest next update: Mon 30 Mar 2026 07:01:33 +0000
Files and hashes: 1: nXZQ5FO5j29N0zNjOv-ruiwMj4o.crl (hash: Vu/WjPD3c7eshMvuPUBHaFzioErimkBzBMcAVCH8yWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXZQ5FO5j29N0zNjOv-ruiwMj4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:de:f3:ba:07:3c:cf:0e:a0:47:3a:cc:60:e9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7650e453b98f6f4dd333633affabba2c0c8f8a
Validity
Not Before: Mar 29 07:01:33 2026 GMT
Not After : Mar 30 07:01:33 2026 GMT
Subject: CN=27c7651628a0ec07e0da59a85d9fe0e092f3feaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fc:ad:9f:8d:8d:06:c5:2d:7b:aa:63:88:af:
8d:97:2a:e6:dd:57:f2:93:f3:39:5a:eb:ae:66:2a:
da:7b:e2:5f:37:4d:40:1a:ee:75:6b:b1:92:c9:fb:
8d:52:cb:37:24:cc:e9:ca:40:b6:c7:80:2c:75:34:
6e:d3:ed:fd:0b:8b:28:92:9e:33:7e:65:46:d2:92:
69:cf:b6:cc:84:b0:bb:31:8b:fa:e8:11:fd:78:0a:
5f:48:61:0d:ad:46:19:f9:53:9a:cc:8f:b3:d8:fa:
b3:07:c0:f1:0e:a5:a3:56:7d:fd:4b:a3:cb:93:65:
c2:fe:52:dd:f4:08:f0:7e:b1:72:18:3b:1c:90:4c:
1f:d9:69:f6:a6:9b:a9:bc:ab:a8:18:ed:be:aa:f7:
04:e3:23:57:bb:16:63:30:8c:07:45:c3:a3:55:68:
05:62:29:6b:04:77:8d:d4:4f:32:a8:4b:95:d9:21:
0a:78:60:9f:09:83:3e:b2:42:97:25:d6:a2:b1:45:
11:b2:b9:3b:de:12:76:c2:d0:f6:38:ea:05:d9:60:
8d:26:bf:91:21:05:39:f4:39:78:04:ee:87:60:70:
6b:ad:0d:3b:27:da:e0:48:1e:a0:dd:7f:d2:b5:1d:
7e:a4:20:3a:84:f2:af:e6:57:4f:63:14:0f:d9:6c:
f9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C7:65:16:28:A0:EC:07:E0:DA:59:A8:5D:9F:E0:E0:92:F3:FE:AF
X509v3 Authority Key Identifier:
keyid:9D:76:50:E4:53:B9:8F:6F:4D:D3:33:63:3A:FF:AB:BA:2C:0C:8F:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXZQ5FO5j29N0zNjOv-ruiwMj4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6bfe53-80c3-4a35-9ecb-d241f9ec5041/1/nXZQ5FO5j29N0zNjOv-ruiwMj4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:bb:96:db:c1:d8:fd:7d:92:68:b8:be:cf:97:f6:89:b0:ea:
b1:09:23:4e:77:43:d7:2e:64:64:a8:6c:2f:f8:47:61:46:d6:
b8:2b:b2:ba:6e:ea:9d:16:f6:17:0c:6b:84:e2:28:a1:17:3a:
a6:36:11:f6:51:03:9d:e3:92:9f:12:59:5f:62:6c:29:4c:31:
16:1e:9f:9b:84:36:cc:5f:b4:23:18:8d:9d:f6:f1:ef:c4:b1:
1b:41:8a:b1:8d:e9:9a:33:9b:d6:6c:69:06:1a:34:6d:9d:f0:
2f:fe:47:21:87:75:ff:89:3f:f9:d0:1e:46:2e:70:fc:32:34:
4d:76:be:78:98:3f:74:27:bf:d6:6d:fe:6b:0e:cd:19:9d:75:
5c:6d:bb:4e:85:cf:f2:0a:16:a6:1b:01:15:01:50:ab:21:d4:
7d:49:b4:32:89:e5:18:eb:b4:17:a9:38:e2:e0:b2:74:10:2f:
ab:75:b2:2f:46:2a:28:3d:1c:18:d8:ce:33:58:4e:16:ed:9a:
25:35:5c:14:4d:fb:c8:ab:e8:c1:a6:01:1c:d5:29:ff:90:58:
b1:a1:f2:9b:82:cf:0e:50:a0:0a:d5:f2:03:c6:ca:43:8c:d9:
c8:0d:03:eb:3a:3a:34:4c:a1:e0:fc:06:62:f1:36:a5:17:61:
97:f9:ea:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:11 2026 by rpki-client