Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
File: nR_TKOt-elrN5RmPDX6b4mhHbXE.mft (raw, json)
Hash identifier: 4i4DihzC0iPn3Cn+NoaBKta/5ypJteX9KMHntkIOzU0=
Subject key identifier: 23:59:95:78:63:90:29:3A:DD:E9:0C:50:CA:7B:57:27:EC:A4:7C:67
Authority key identifier: 9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
Certificate issuer: /CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Certificate serial: 019D390A249E27D0F359912465A503870F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
Manifest number: 1337
Signing time: Sun 29 Mar 2026 10:00:58 +0000
Manifest this update: Sun 29 Mar 2026 10:00:58 +0000
Manifest next update: Mon 30 Mar 2026 10:00:58 +0000
Files and hashes: 1: nR_TKOt-elrN5RmPDX6b4mhHbXE.crl (hash: PxAoenb5Cokej4FiaA4CMBDBy7WF2NvTFuxoAFgK678=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:24:9e:27:d0:f3:59:91:24:65:a5:03:87:0f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Validity
Not Before: Mar 29 10:00:58 2026 GMT
Not After : Mar 30 10:00:58 2026 GMT
Subject: CN=235995786390293adde90c50ca7b5727eca47c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e7:c5:fa:16:82:43:31:e9:a9:b2:bb:22:73:
04:1d:ff:c3:9c:69:7b:f7:fa:45:7e:9d:9c:18:b6:
8e:32:19:73:0d:db:f9:b0:ab:20:f9:d0:ea:65:09:
3d:9b:d1:68:b7:75:59:29:2d:76:d9:b2:75:01:d0:
f8:61:5d:99:3c:4c:70:9f:9a:92:86:b2:b2:7c:c6:
80:a7:38:38:b8:e0:4a:98:e0:56:73:15:80:2f:ab:
3f:34:21:fb:59:e5:93:c8:fb:b9:e5:aa:79:1a:13:
94:23:d1:02:46:c7:eb:ad:99:44:dd:1e:f8:ff:2b:
bc:88:4b:ef:16:31:d5:dd:9f:f7:3b:07:b0:f8:f7:
25:c5:8b:34:c7:f3:04:59:40:5d:86:2e:6c:59:1a:
a2:ed:dc:15:86:57:93:16:cf:e2:46:75:32:9c:a2:
09:27:0e:d4:d0:d6:a2:5d:f4:4b:d2:c3:82:a4:b1:
c9:86:bc:1e:72:95:e3:cd:2f:49:ef:26:83:b7:95:
0f:55:c0:2e:1a:57:e0:4b:09:e5:45:55:62:b1:38:
12:8d:84:56:58:aa:b3:b1:5b:68:60:22:5e:3b:7c:
af:6c:5a:cc:c4:f5:ad:30:fb:c2:07:c0:27:fe:18:
8e:41:32:a3:13:29:3e:b9:1e:a6:f1:51:ca:18:b4:
43:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:59:95:78:63:90:29:3A:DD:E9:0C:50:CA:7B:57:27:EC:A4:7C:67
X509v3 Authority Key Identifier:
keyid:9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d6:8b:12:0d:76:76:a1:0d:ec:2d:57:95:46:e0:e2:ef:2c:
d5:db:50:73:93:ae:4a:ac:53:0c:36:6f:64:34:72:c3:5d:f0:
8b:d1:61:1e:10:fc:a1:a4:f0:89:23:99:5d:5b:58:2b:4d:42:
60:d3:ac:be:e1:7a:4b:14:fa:14:c7:2c:00:89:b5:88:80:09:
bc:81:83:d8:f3:fc:10:08:95:82:c0:ca:f6:db:29:7e:41:97:
59:90:3c:7e:80:9c:de:3d:20:96:ed:d6:7c:0e:82:b6:10:01:
d4:59:95:1d:fd:06:16:0d:74:f9:5d:1b:e4:48:60:d8:4a:67:
3f:64:3c:cf:af:b1:d8:2c:aa:55:de:b0:36:48:e6:74:e3:da:
da:dd:52:c0:2c:2b:a3:61:84:c9:cc:07:3a:c4:ec:55:cc:9a:
80:fb:75:96:1d:f3:b9:5e:9e:31:36:8c:87:f9:2b:a9:ac:ee:
34:11:a5:07:8e:09:8e:42:b3:46:9d:92:21:66:da:7c:95:8b:
06:c0:07:4b:f0:a6:7c:c5:8f:8a:9d:70:2e:d8:2f:32:62:a2:
12:cf:9f:bf:d0:92:db:da:af:d2:3c:bb:39:72:44:f1:6a:95:
d8:a3:95:33:07:03:ad:8a:d1:d7:d2:9b:64:2e:38:58:42:c5:
b1:63:59:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:34 2026 by rpki-client