Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
File: nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft (raw, json)
Hash identifier: yvn7YfRbZF1XzCa/HWrBZq1P7O+U1IsKOboRzvV7aw4=
Subject key identifier: C3:97:28:9D:9C:1A:ED:64:54:45:23:AC:EE:E5:DB:09:FA:AA:68:CD
Authority key identifier: 9C:37:52:26:FC:E6:27:E3:22:80:6C:93:A5:43:E2:3F:26:F5:49:16
Certificate issuer: /CN=9c375226fce627e322806c93a543e23f26f54916
Certificate serial: 019DDC8C5F9D3E7EDD7319ACB0E80A5B59F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
Manifest number: 0E2C
Signing time: Thu 30 Apr 2026 04:01:20 +0000
Manifest this update: Thu 30 Apr 2026 04:01:20 +0000
Manifest next update: Fri 01 May 2026 04:01:20 +0000
Files and hashes: 1: nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl (hash: H57Ll6IFTGcJoL+mYOGm0BB9Dnt7YdqxKOtJ1XwhfUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:8c:5f:9d:3e:7e:dd:73:19:ac:b0:e8:0a:5b:59:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c375226fce627e322806c93a543e23f26f54916
Validity
Not Before: Apr 30 04:01:20 2026 GMT
Not After : May 1 04:01:20 2026 GMT
Subject: CN=c397289d9c1aed64544523aceee5db09faaa68cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:19:89:7b:4b:58:b3:1d:8f:1e:6d:d0:93:
11:d6:94:3f:0f:69:c0:f3:0f:0f:53:7e:76:59:14:
90:0c:eb:38:97:bd:44:39:ab:68:1f:88:5d:c7:15:
5b:d1:05:6a:9d:62:e4:45:37:ca:34:40:32:7b:e7:
5a:67:17:47:b8:b4:59:a9:e7:90:31:14:bb:47:8e:
b4:ca:23:76:71:e3:92:85:c0:d3:33:b8:87:e7:f3:
46:c9:00:5f:e8:cf:c3:d5:ad:0f:51:8f:9d:01:23:
99:7d:de:52:d2:e4:3b:c1:46:d7:4d:24:e0:d9:8f:
08:43:0c:8a:88:60:fa:82:9a:d6:f2:8b:8c:88:12:
55:9d:39:6a:de:f4:d6:b8:3c:39:23:b1:e3:69:48:
d1:13:bf:ea:a2:fe:5e:05:82:df:79:82:15:0a:d1:
c2:ee:c0:bd:c0:81:e2:dc:fc:61:48:a3:8e:d0:59:
70:37:4e:ae:88:54:bf:da:f9:60:6d:0a:9a:3a:32:
e6:cb:cd:9e:27:8d:e6:01:be:e9:60:36:25:93:eb:
be:99:e6:14:2c:4a:45:1d:d1:77:27:74:58:01:40:
58:52:6f:ec:e0:55:b6:1d:1a:b5:ef:1c:e1:59:cf:
a8:59:b9:1d:44:20:fd:1d:81:c0:29:54:59:19:f5:
43:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:97:28:9D:9C:1A:ED:64:54:45:23:AC:EE:E5:DB:09:FA:AA:68:CD
X509v3 Authority Key Identifier:
keyid:9C:37:52:26:FC:E6:27:E3:22:80:6C:93:A5:43:E2:3F:26:F5:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDdSJvzmJ-MigGyTpUPiPyb1SRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/6c4724-35e0-46db-aded-cb6d8b620dc8/1/nDdSJvzmJ-MigGyTpUPiPyb1SRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:4a:f1:71:75:72:f1:f9:ef:12:f6:8c:5d:40:3a:a4:e9:5c:
09:58:c6:28:d5:be:74:b7:5f:12:c1:ee:48:59:7b:db:bb:82:
04:42:7c:e3:74:06:5e:f3:3b:d7:84:88:9f:b5:13:f4:6f:37:
d8:07:3a:ab:8a:9b:0f:79:1b:2f:69:b5:3c:be:e6:b8:90:62:
93:9d:3a:36:c8:30:05:8c:7b:a9:e9:4a:82:57:92:d6:35:0d:
4f:22:a9:4d:05:00:6c:39:2d:33:72:2c:86:fb:53:2d:9a:cb:
c4:cb:87:66:7f:7a:02:62:ca:42:ea:0e:51:5c:dc:6d:13:c6:
9e:06:34:6e:be:a3:22:2d:72:b7:8f:5b:41:f6:80:22:ed:d9:
e4:dc:74:4b:e7:f0:b5:4d:a0:e6:75:c8:c1:e3:75:d6:08:c5:
2a:55:7a:90:a9:aa:f9:1c:2e:b4:37:a5:a3:4f:fc:f7:ef:16:
29:c3:c4:f9:3f:cc:8a:45:8a:49:34:41:86:f5:a3:6b:c8:ef:
d7:c7:83:0a:48:26:72:13:8c:06:fc:2a:0c:07:93:ec:52:df:
6e:0c:e1:96:71:36:76:b7:bb:70:77:eb:47:5b:0a:3c:fc:90:
29:18:fc:e4:48:4d:02:0b:d0:8e:9c:b8:1e:b9:1e:c9:89:3f:
3c:fd:77:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:40:54 2026 by rpki-client