Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
File: NGbkl-i6koMIR7TYtnEDJdI72oU.mft (raw, json)
Hash identifier: Qaf5pj4O8q9T+OYs+eMbYWx7WNmE/1b1TQZnlCcGkL4=
Subject key identifier: D5:0E:8D:B0:EF:0C:BB:E3:A4:AE:48:38:FC:E5:41:28:24:81:5A:01
Authority key identifier: 34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85
Certificate issuer: /CN=3466e497e8ba92830847b4d8b6710325d23bda85
Certificate serial: 019D390A0D4CFD78E8695C7CF7A2FED0E238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
Manifest number: 08EE
Signing time: Sun 29 Mar 2026 10:00:53 +0000
Manifest this update: Sun 29 Mar 2026 10:00:53 +0000
Manifest next update: Mon 30 Mar 2026 10:00:53 +0000
Files and hashes: 1: NGbkl-i6koMIR7TYtnEDJdI72oU.crl (hash: UrKcWpoIQ2jQYqwLDlOtfQrB30eBB8sqC6SpQJwR1+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:0d:4c:fd:78:e8:69:5c:7c:f7:a2:fe:d0:e2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3466e497e8ba92830847b4d8b6710325d23bda85
Validity
Not Before: Mar 29 10:00:53 2026 GMT
Not After : Mar 30 10:00:53 2026 GMT
Subject: CN=d50e8db0ef0cbbe3a4ae4838fce5412824815a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2e:0e:ab:a3:7a:2c:c1:43:ed:7f:1c:5e:aa:
47:da:59:a2:94:1c:f4:d7:db:b5:ea:1f:79:ca:d0:
f1:8a:20:88:22:2f:23:af:d7:65:93:49:71:04:2a:
15:f8:dc:dd:19:a5:2f:b5:c5:ac:b8:f4:73:d1:c3:
d6:d4:62:d1:b9:bd:27:ac:a9:bb:32:98:cc:13:98:
9c:97:9e:6d:1a:fa:cc:c0:9e:24:eb:56:86:b6:a7:
1e:61:b1:96:0e:3b:88:ee:d3:1d:59:dc:89:42:b8:
19:69:8a:5a:e7:0d:47:9d:1f:6f:40:8d:01:dc:48:
e5:b5:85:fb:3c:d9:ec:a6:c7:9d:9b:4a:89:97:98:
20:37:2d:05:2c:df:77:23:c2:24:82:3f:c7:3a:d8:
fb:d5:14:4a:f7:25:ef:90:c5:bf:9f:dd:da:89:87:
84:23:b5:f5:c2:73:1d:5c:2b:f5:c2:9a:91:ab:21:
a0:c1:7f:3f:a7:b3:31:36:3e:09:58:e7:da:1a:ac:
19:0e:66:c5:d9:d0:e1:3c:ac:1f:48:ea:dd:4f:5f:
9a:3d:05:90:62:2f:ca:87:62:66:fb:cf:23:f5:92:
16:79:a8:8b:78:01:9b:e0:6c:a0:0f:5c:8f:31:70:
2d:11:f8:87:91:28:0c:77:d1:a6:67:19:fa:58:a1:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0E:8D:B0:EF:0C:BB:E3:A4:AE:48:38:FC:E5:41:28:24:81:5A:01
X509v3 Authority Key Identifier:
keyid:34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c2:f9:ab:a3:4a:81:59:da:be:1d:cc:59:55:cc:66:86:c9:
74:5c:76:1e:c8:15:92:0b:bb:12:03:d2:9e:21:94:55:dc:28:
47:de:57:1f:d1:70:35:d0:29:9c:d3:92:e6:08:73:3f:c5:fa:
a7:2f:af:45:6e:11:69:94:54:f6:16:14:d5:b1:64:49:f2:bb:
d8:ec:37:7a:53:a2:ba:35:0d:29:66:ac:b3:0b:52:e6:e8:22:
39:31:14:3b:9e:e2:5f:20:61:a2:83:a5:34:31:33:44:f9:d8:
9c:00:0c:4a:51:1e:87:0d:f6:56:67:65:99:e5:ca:53:e4:83:
22:e5:04:ab:e7:53:38:c7:1e:c7:ef:97:bb:4b:28:87:52:46:
56:90:7d:17:d8:48:fd:eb:78:ec:d0:d4:dc:3d:db:0d:3f:0d:
bd:b5:f7:f8:43:6e:06:17:ae:5c:af:d0:f8:3e:59:95:f3:60:
4f:b9:ba:89:12:62:3b:eb:af:94:96:ea:9c:00:af:4b:48:3f:
5f:ac:02:b8:f2:3c:49:d0:c6:fb:39:13:99:17:46:dd:0a:35:
72:08:22:12:cc:65:ce:d4:2d:5c:3e:18:40:ee:4b:3e:b1:c3:
7a:59:73:9a:2d:7b:93:8c:af:a9:9f:11:f6:55:b0:a5:cf:b3:
84:d0:c7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:24 2026 by rpki-client