Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
File: nEbB13YgBThO2FJs-hx0llZPUNM.mft (raw, json)
Hash identifier: wCtzq9F7Tt4t7Yp0bsIxKvP+2T8EIxNxnU4dJbdQDgk=
Subject key identifier: 6A:0F:76:94:13:31:73:A6:69:3A:8E:41:8A:EA:01:B8:6D:19:71:37
Authority key identifier: 9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
Certificate issuer: /CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Certificate serial: 019D3940735BF70C4FBBF48E9E4B788F4A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
Manifest number: 0728
Signing time: Sun 29 Mar 2026 11:00:18 +0000
Manifest this update: Sun 29 Mar 2026 11:00:18 +0000
Manifest next update: Mon 30 Mar 2026 11:00:18 +0000
Files and hashes: 1: nEbB13YgBThO2FJs-hx0llZPUNM.crl (hash: C7Z+7rbrCCDNeIG/7lXOJiObCW+R6AC/+pIqL9yp+CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:73:5b:f7:0c:4f:bb:f4:8e:9e:4b:78:8f:4a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Validity
Not Before: Mar 29 11:00:18 2026 GMT
Not After : Mar 30 11:00:18 2026 GMT
Subject: CN=6a0f7694133173a6693a8e418aea01b86d197137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e2:ab:d9:fa:0c:e7:5c:87:a6:86:90:bd:9c:
1f:d9:bf:fe:9b:52:8c:92:dc:8d:e9:f9:cb:26:20:
b8:88:b8:f5:5f:43:a8:d4:8f:2b:c7:d1:11:a8:2f:
7f:1c:37:f1:83:f6:ce:e8:13:95:26:de:07:ba:4f:
2c:90:4c:6c:03:85:21:d9:07:29:3c:c7:2b:7f:b3:
3c:5d:9b:b9:1e:eb:8d:8d:7d:35:82:d9:e8:4c:be:
0e:1c:a5:c6:de:b8:16:4f:8a:6b:c8:7c:3f:9f:2b:
8c:f8:b9:81:22:eb:45:47:5d:f3:05:c8:46:03:45:
92:35:c9:49:f1:52:1d:83:2c:10:ed:1f:10:d9:5d:
1d:a1:c2:56:03:c9:ca:52:ce:7f:2b:3a:fb:3c:7f:
27:78:6b:ae:f7:95:72:42:d1:e5:47:7c:45:24:62:
85:ec:1f:db:b0:3e:5a:99:55:79:9e:61:dc:3d:58:
0a:26:e7:f0:79:ed:7f:d3:d2:91:54:f6:90:2d:6c:
d3:00:6e:09:49:3d:a5:13:77:c1:9c:0e:d6:1b:86:
c4:77:d7:a2:2d:3f:66:29:14:61:6c:87:f2:95:64:
29:f8:09:05:52:3c:d8:be:2c:2c:64:55:e3:d8:d6:
20:18:9c:72:b5:fa:18:0e:cb:d7:09:08:b0:33:4d:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0F:76:94:13:31:73:A6:69:3A:8E:41:8A:EA:01:B8:6D:19:71:37
X509v3 Authority Key Identifier:
keyid:9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b9:1e:56:fe:66:0f:ab:a6:80:96:28:4d:dd:c5:74:33:9e:
ae:c2:81:68:da:90:62:cd:72:68:49:66:a3:e9:4d:64:0e:4f:
31:47:1e:6d:ff:b8:c9:c5:af:ff:d0:9c:02:83:49:c0:7b:24:
df:75:6f:b2:09:88:c3:9f:cf:d8:d6:9b:38:82:92:70:23:2b:
1d:6c:38:4e:6d:7a:ca:01:9c:ff:6b:75:24:81:32:ab:1c:3a:
76:32:0e:dc:31:0d:42:d5:8d:f8:e2:2e:fb:76:d2:7c:08:12:
4e:a9:1b:af:6a:32:3f:86:53:9f:c3:7d:57:fa:6d:c0:13:09:
e3:67:e1:e0:7d:7f:0a:a5:de:40:16:55:ac:6e:2c:99:69:80:
9e:9a:85:33:28:ac:ee:bd:27:bd:2f:a0:59:d2:42:87:8d:c6:
a9:78:b0:0b:1c:a1:d8:a1:76:a1:59:18:fd:e2:42:e2:d3:eb:
f0:63:61:b9:04:9d:04:fb:6a:5f:92:71:4a:98:39:d9:ea:8a:
7e:61:2c:30:82:92:ab:74:31:7f:1c:55:82:4e:36:2d:7e:9d:
9e:e0:c9:25:4b:59:bc:db:62:84:a2:a3:a8:21:93:56:60:3d:
bb:f6:cb:28:58:f8:d8:99:06:cf:3b:72:8c:7d:66:c3:2e:61:
cc:4a:9f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:06:12 2026 by rpki-client