Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: 54zX194v829qY8bdCSM+MBi1UtPg2mGKOt9gheqUgeg=
Subject key identifier: C7:47:21:DF:2C:A7:5E:CF:5A:16:6F:DA:0F:2C:E6:99:B7:06:D6:21
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 019CE3DA66AAA9EB8E9340FDCF3FF1CF91A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 0F44
Signing time: Thu 12 Mar 2026 21:01:06 +0000
Manifest this update: Thu 12 Mar 2026 21:01:06 +0000
Manifest next update: Fri 13 Mar 2026 21:01:06 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: 069Jm01V0xin96B1VE11sPbQBuhwDuqViilVM9UPUCU=)
2: d4grg2tvuefsoHmD0ZdaVonf75c.roa (hash: OXvdnvF2UW52gDEgFTfQ3VspznPh5gZEegyP1xQRgjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:66:aa:a9:eb:8e:93:40:fd:cf:3f:f1:cf:91:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Mar 12 21:01:06 2026 GMT
Not After : Mar 13 21:01:06 2026 GMT
Subject: CN=c74721df2ca75ecf5a166fda0f2ce699b706d621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:41:6b:d3:b6:42:44:7f:18:c3:22:52:2b:0a:
86:2e:ad:be:da:f8:d6:13:f5:17:d5:0f:eb:df:f5:
19:e6:84:dd:3f:41:4c:a8:aa:7c:af:5b:70:0f:78:
e7:60:13:fa:f7:b7:18:c2:aa:17:96:26:8b:68:61:
4d:9a:f7:50:0d:09:2a:16:bf:b1:28:52:04:1c:28:
e4:70:3f:6f:f0:87:f7:67:06:a5:c9:60:d3:07:87:
6c:ad:28:5e:8c:2d:2a:3f:6d:28:79:2e:2f:1c:80:
f1:6a:9c:f4:33:4c:4e:cb:85:c2:4e:a7:70:5b:2c:
e5:8f:ee:01:c0:03:1c:8e:97:04:e1:a6:6c:36:aa:
9d:f2:55:39:9c:54:9a:96:83:72:89:2b:77:40:8a:
7e:d3:2f:cb:bf:8c:b1:40:f0:a8:3c:dc:de:0f:c0:
94:1e:72:20:19:22:44:d0:9c:2e:f0:ba:53:79:d3:
14:a0:89:51:9b:05:1c:ef:1d:5d:45:b6:5f:cd:f9:
a7:0d:c8:95:12:91:41:11:5c:41:f8:1a:64:a1:3c:
3d:44:32:c1:67:8a:d4:79:cf:8c:82:be:a4:cb:e6:
8e:42:ca:75:19:f7:f0:6a:2f:58:b4:40:d7:c3:12:
44:dd:8d:7a:e0:e9:e9:41:83:ec:6a:be:f5:12:d9:
76:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:47:21:DF:2C:A7:5E:CF:5A:16:6F:DA:0F:2C:E6:99:B7:06:D6:21
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ed:51:cf:39:04:de:3c:1b:84:1f:ad:09:ab:8d:b1:86:4c:
bc:18:ae:ab:dc:a8:e4:51:08:24:96:be:f4:4b:d7:ef:7e:10:
06:89:15:20:db:50:02:28:0e:fc:a7:55:e3:2a:b4:3d:46:40:
29:6f:60:9e:90:f5:c7:43:ab:7c:cd:82:2e:5b:61:ca:c8:9d:
ea:b2:5c:67:a5:fb:f3:9b:e2:09:18:3a:bf:20:c5:2d:f8:6d:
92:c0:14:7d:4b:4b:3e:ce:8a:f9:b1:81:ca:2b:0b:27:5f:17:
ed:51:05:28:5d:f1:87:17:30:f0:eb:39:cb:6f:04:5a:01:38:
9b:65:ed:53:a9:10:77:3c:6c:da:7c:66:0d:bd:9c:d0:a5:c1:
87:e1:90:32:3b:a3:86:55:e4:ba:02:fc:34:08:17:a6:76:44:
16:14:3e:6b:5a:46:94:75:1c:b5:f1:3c:2e:f2:f2:2b:38:0b:
40:ae:72:31:bf:7a:44:cf:65:c8:6f:35:1e:63:ad:1b:46:2a:
ec:4e:da:81:54:3e:0a:90:91:19:1d:36:dc:41:4d:c3:fe:8d:
c1:0c:3d:3a:6b:5d:de:04:cd:42:90:77:18:3e:1e:13:e5:3e:
09:10:39:08:20:ee:c1:09:d1:8b:6a:61:1c:f7:35:90:03:95:
13:bb:e6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:50:46 2026 by rpki-client