Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft
File: Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft (raw, json)
Hash identifier: Jd9h+JFBpBNkWy+d28imRaq4fvLaMhCXKrRDypy8mQA=
Subject key identifier: 38:2C:6E:41:E5:4D:BF:5F:79:10:57:F6:27:7C:E1:92:41:3B:7F:A5
Authority key identifier: 36:3E:14:53:87:ED:A5:B0:8A:A3:00:D6:3B:4F:C3:5E:59:83:64:FD
Certificate issuer: /CN=363e145387eda5b08aa300d63b4fc35e598364fd
Certificate serial: 019CE5C9394400B0202FE2A42DF234F7E11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj4UU4ftpbCKowDWO0_DXlmDZP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft
Manifest number: 0D9C
Signing time: Fri 13 Mar 2026 06:01:35 +0000
Manifest this update: Fri 13 Mar 2026 06:01:35 +0000
Manifest next update: Sat 14 Mar 2026 06:01:35 +0000
Files and hashes: 1: Nj4UU4ftpbCKowDWO0_DXlmDZP0.crl (hash: 2qccxsFy3sIs6lJ+dK7wJVRecqp5Ngq+E8GBoRxljv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj4UU4ftpbCKowDWO0_DXlmDZP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:39:44:00:b0:20:2f:e2:a4:2d:f2:34:f7:e1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363e145387eda5b08aa300d63b4fc35e598364fd
Validity
Not Before: Mar 13 06:01:35 2026 GMT
Not After : Mar 14 06:01:35 2026 GMT
Subject: CN=382c6e41e54dbf5f791057f6277ce192413b7fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:bd:2f:39:40:0f:80:85:c4:18:62:c3:b3:
a2:03:c4:d3:46:0a:2e:71:f4:9e:d7:12:6d:87:75:
5a:ed:ab:64:a4:6b:e8:ac:c5:5e:dc:f1:63:f5:61:
55:c6:b0:00:1f:c3:18:ef:aa:f1:ca:69:c5:58:df:
da:01:af:f9:e5:c3:73:f4:4c:50:33:f5:de:6b:a9:
54:6b:5e:84:9b:89:b7:61:b7:88:66:73:86:64:f2:
b9:bb:9a:07:8b:e1:3e:33:c3:8b:98:2c:9e:69:33:
d9:67:e1:43:cd:fb:1f:ce:01:e8:62:e4:ca:aa:f1:
47:28:d9:21:61:3e:70:06:ba:34:af:59:2d:7d:82:
8c:f8:36:cb:ab:ba:9e:ac:b3:f6:98:96:73:1e:9e:
64:87:b6:42:46:29:b8:0a:ca:c8:10:c7:5d:ce:74:
56:c6:38:24:0d:20:ec:af:49:75:2b:cb:40:47:33:
3f:73:b8:f1:3a:8e:de:a9:05:e6:49:a9:cb:50:9b:
f3:a6:de:6a:a8:53:dd:8c:15:d0:57:e2:0f:bc:34:
5d:23:a4:e7:a6:69:ae:41:c5:e0:28:96:a3:27:7b:
a3:ed:5d:b6:50:b8:95:69:1c:18:9f:c3:0a:54:5e:
f7:8c:e2:a4:86:f1:8b:d1:b2:e8:46:e3:43:3b:8c:
31:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2C:6E:41:E5:4D:BF:5F:79:10:57:F6:27:7C:E1:92:41:3B:7F:A5
X509v3 Authority Key Identifier:
keyid:36:3E:14:53:87:ED:A5:B0:8A:A3:00:D6:3B:4F:C3:5E:59:83:64:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj4UU4ftpbCKowDWO0_DXlmDZP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:08:31:ac:f7:df:0a:14:de:36:9c:70:ea:cd:5f:d4:7c:79:
77:50:15:5d:dc:64:f9:32:f3:1f:50:17:0e:af:ab:4d:63:43:
3d:41:76:de:ed:5a:70:3f:a0:29:92:ed:22:5d:7f:05:84:73:
35:43:8e:70:0a:96:60:64:e4:4b:bb:de:66:46:bf:81:5c:f3:
28:ff:7c:5b:a7:cf:38:d9:a4:f3:44:82:c8:7a:c0:c6:f2:df:
1b:fe:91:e3:40:95:04:a5:42:8f:8f:50:48:76:fa:bc:9e:1c:
82:2b:5e:ac:c6:b1:b5:4a:6b:02:56:e8:88:c3:f6:bb:d3:d3:
16:06:40:2e:a4:c4:e7:3f:fe:d3:b7:f4:6a:c4:23:e7:d6:7e:
19:fd:b9:2f:87:be:13:93:ea:1e:a9:99:da:75:1c:58:67:73:
28:21:b3:c4:9c:d9:1f:0b:92:c7:92:35:83:8d:39:e2:04:bb:
4c:6f:e3:98:b1:8c:7b:23:b0:6e:16:49:0a:0e:be:88:74:16:
2f:dd:94:3f:17:38:77:a8:aa:5f:f1:e2:d7:7a:99:55:5c:5d:
2c:4f:48:c0:aa:f1:36:af:69:5d:4d:b8:f5:d3:a0:6c:dd:13:
24:b4:47:73:7b:16:53:b6:f4:90:eb:78:4d:e3:bd:bc:f4:6e:
0c:21:bd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:15:30 2026 by rpki-client