Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
File: NM-cB0OwPV4EX0bprPToAKnxio4.mft (raw, json)
Hash identifier: 1SOBT1+x1ualyH85oCn434dc9sCImQsXhIGv5NOJkY0=
Subject key identifier: 33:00:5C:C0:D9:1A:73:5F:F8:F2:87:F6:9B:25:33:8D:DF:CA:01:91
Authority key identifier: 34:CF:9C:07:43:B0:3D:5E:04:5F:46:E9:AC:F4:E8:00:A9:F1:8A:8E
Certificate issuer: /CN=34cf9c0743b03d5e045f46e9acf4e800a9f18a8e
Certificate serial: 019D38D3A0D9DFE287385E0B027E62B11879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
Manifest number: 0D9B
Signing time: Sun 29 Mar 2026 09:01:26 +0000
Manifest this update: Sun 29 Mar 2026 09:01:26 +0000
Manifest next update: Mon 30 Mar 2026 09:01:26 +0000
Files and hashes: 1: NM-cB0OwPV4EX0bprPToAKnxio4.crl (hash: i9zv2lBJfzyggFZpBN6WmAFqPF7JgD0xwbjmJp61/gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a0:d9:df:e2:87:38:5e:0b:02:7e:62:b1:18:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cf9c0743b03d5e045f46e9acf4e800a9f18a8e
Validity
Not Before: Mar 29 09:01:26 2026 GMT
Not After : Mar 30 09:01:26 2026 GMT
Subject: CN=33005cc0d91a735ff8f287f69b25338ddfca0191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:da:2e:8e:c8:49:38:eb:d2:ed:b3:f2:db:
97:e2:9c:74:26:5b:d8:5c:e1:e1:8e:f4:9f:d1:12:
69:35:d2:9b:3d:5d:3e:a4:4d:18:59:bf:8c:f7:da:
38:0f:53:51:bb:96:63:0c:2d:cf:3b:d2:a3:47:7b:
0c:d8:a1:7e:39:a7:60:5f:e7:01:49:5e:7f:f3:cf:
a0:a3:a9:ae:35:5a:3d:ce:6b:32:a8:a2:d0:53:ca:
53:0d:3f:13:a3:6d:13:ff:50:5c:4b:5e:e6:4a:9a:
35:b0:a3:5f:9c:49:73:2c:61:b9:bd:0c:31:51:65:
43:fd:6e:22:d9:e9:72:34:30:be:7a:43:85:ca:ff:
af:c6:bd:c8:32:0b:13:30:c9:8c:51:f6:bf:86:c3:
f4:8d:58:31:b5:56:ab:1b:7f:8c:cb:58:64:77:56:
60:a0:b8:ad:53:fd:b6:8d:fa:e0:42:ad:e5:5b:e1:
b2:e6:84:f7:cd:4f:02:a0:58:22:d6:cb:96:17:99:
9e:ce:74:1c:44:52:c1:fc:bd:b0:87:20:d1:70:ef:
5b:d9:cd:cd:f2:c4:8b:d9:a9:37:24:6a:f0:30:79:
97:7a:90:fa:84:18:ef:c8:3e:58:dd:96:9f:21:2a:
da:78:45:ea:3e:58:ef:d3:81:cb:9b:aa:7e:99:d0:
ba:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:00:5C:C0:D9:1A:73:5F:F8:F2:87:F6:9B:25:33:8D:DF:CA:01:91
X509v3 Authority Key Identifier:
keyid:34:CF:9C:07:43:B0:3D:5E:04:5F:46:E9:AC:F4:E8:00:A9:F1:8A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:7a:c0:72:6c:26:a2:69:6b:de:3b:4e:1f:6a:b7:12:9e:19:
14:5c:6c:3d:c8:c0:97:5d:bc:02:63:20:77:1b:9a:4a:1f:04:
eb:6b:82:b9:14:60:29:d3:30:38:45:94:b6:c6:9c:96:77:1d:
b7:58:9e:4a:93:a2:9d:1a:2b:7e:e0:4b:4f:45:37:99:9b:f0:
e8:57:e6:20:13:f6:77:ef:37:bd:e5:5d:0e:79:5f:fb:29:35:
5a:77:d9:4b:46:bd:1f:60:5a:ac:79:ba:0b:6e:91:52:8f:3c:
42:10:5e:26:4e:dd:cb:05:d1:d8:3a:6d:dc:00:83:e1:3f:cc:
fb:ff:b9:26:57:7e:b0:c8:65:e7:60:44:5d:10:4b:d8:38:97:
eb:f6:ec:70:77:65:5a:51:99:34:aa:7f:7c:5c:40:a6:8d:c0:
23:24:db:91:94:6a:96:e5:4d:a4:7c:83:dd:2d:2d:a2:6c:d6:
aa:aa:de:24:0e:f0:36:4b:33:5f:8e:11:e1:46:49:76:55:13:
3e:2a:5f:6a:83:0f:69:86:d8:e7:9a:90:f3:d0:42:a0:2d:ca:
78:6d:8c:5c:36:b8:a7:95:a5:2d:3f:b6:4e:1a:5c:05:a4:a1:
9e:47:fd:22:b8:ac:c6:2d:64:f4:dc:ab:eb:4f:cf:ba:12:1d:
fe:78:d6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:23:51 2026 by rpki-client