Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
File: nBBfWIvTBDjjPxwtKWdUxz341Ss.mft (raw, json)
Hash identifier: uT8cv8xyBDUcfuRTHr+Rzltg5zjPTWm7ozAo+ijfRUE=
Subject key identifier: 59:2C:02:64:19:8B:AE:F3:1F:F0:0A:05:6A:2B:5D:21:1C:21:C7:84
Authority key identifier: 9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
Certificate issuer: /CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Certificate serial: 019D38663A1A6D7C4D3BBE054A1F21C1936C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:01:56 +0000
Manifest this update: Sun 29 Mar 2026 07:01:56 +0000
Manifest next update: Mon 30 Mar 2026 07:01:56 +0000
Files and hashes: 1: nBBfWIvTBDjjPxwtKWdUxz341Ss.crl (hash: 02wIFaF8qA9nn9Cl8rQesB+QaRoQg1EcS4ICGdhKCok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3a:1a:6d:7c:4d:3b:be:05:4a:1f:21:c1:93:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Validity
Not Before: Mar 29 07:01:56 2026 GMT
Not After : Mar 30 07:01:56 2026 GMT
Subject: CN=592c0264198baef31ff00a056a2b5d211c21c784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:0c:61:76:e9:05:ea:6f:b2:54:1b:9a:42:
7d:48:49:b4:ab:35:c3:8a:55:e1:46:7b:25:f3:f2:
a7:20:24:0b:a6:70:12:b7:4e:af:ea:06:28:6f:fc:
e4:b9:c4:7e:07:87:b0:98:88:d0:f1:cf:d8:34:bf:
29:b4:8f:fb:5e:e3:f0:19:ee:a8:cb:ca:f5:da:82:
ed:01:94:73:80:62:7e:54:50:c2:26:f2:88:15:66:
62:2e:49:35:0c:c5:c5:66:48:a8:db:65:0c:1c:57:
ab:54:38:08:02:75:3f:68:46:82:c3:b4:6f:50:f8:
d1:9c:b7:c1:21:30:fe:d0:6f:15:f9:66:9a:ee:65:
7f:65:16:9e:f2:b3:54:6a:3f:72:bc:4b:ae:bb:82:
df:07:31:10:61:ee:78:70:e3:f3:64:34:89:15:46:
ab:cd:03:39:62:28:69:8a:cb:55:c0:e2:51:ab:5c:
c2:d3:ea:7b:7b:b8:5a:1c:1c:ec:f5:0e:6a:63:ae:
64:39:79:b3:e4:a6:97:65:d0:56:f1:ed:0e:c9:a6:
78:83:a3:7d:b4:5e:fc:f3:7e:5d:cd:36:d1:b4:79:
76:d7:2a:5d:9d:c5:38:fc:6f:ff:98:8d:e6:e2:a6:
c8:53:4f:84:e7:75:a5:01:10:b2:3d:cb:95:84:d1:
89:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2C:02:64:19:8B:AE:F3:1F:F0:0A:05:6A:2B:5D:21:1C:21:C7:84
X509v3 Authority Key Identifier:
keyid:9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d0:f8:59:93:16:1e:0e:9e:86:aa:6b:06:1b:9a:82:ab:e0:
be:f3:bb:61:09:fe:ed:2d:69:db:be:ed:8c:60:2c:cb:3e:b3:
30:99:22:b1:f9:61:2f:14:9d:2b:99:6a:77:2b:ed:31:ff:04:
f6:b6:15:a5:b2:e3:e4:af:cd:e5:0e:8f:1e:db:04:98:e9:78:
b6:f4:bd:42:f8:81:44:20:d4:c0:e2:55:e9:36:21:0f:dd:10:
99:78:5f:5e:88:4b:13:ff:e1:60:82:88:92:4b:20:7f:df:fe:
3a:7b:0c:26:b6:87:d9:20:57:fa:48:28:86:53:8d:1b:3e:c1:
2c:e5:f4:3d:d8:8e:fd:37:7d:fd:2c:18:25:5a:2d:e9:aa:94:
12:34:bb:f5:31:d7:7a:e5:73:ff:79:db:56:0b:bf:71:bb:7f:
6a:20:1f:9f:bb:7b:7c:e3:c8:8c:9d:29:6e:15:db:36:52:18:
38:f4:05:5a:c8:3d:fe:d6:93:eb:b8:4a:c2:f7:b8:7c:11:66:
a4:f5:1b:b3:74:ff:3f:ca:8c:2c:5a:df:79:ea:5b:7a:24:f8:
c0:9f:48:e2:d0:11:37:18:c8:8f:7c:ba:b3:e9:e8:3c:bb:b4:
33:fa:0a:e3:1c:d5:1d:9b:03:8a:83:9d:56:d4:7c:3a:79:88:
da:af:f5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:44 2026 by rpki-client