Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
File: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft (raw, json)
Hash identifier: 2JppGject3aRxciTcl3UyljlycCmetFNIl0MGJhiuME=
Subject key identifier: 22:29:B6:A2:6F:53:4B:E0:49:C2:E7:AD:76:FF:32:42:19:4F:7C:1F
Authority key identifier: 36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
Certificate issuer: /CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Certificate serial: 019CADC741EA6DDF56E475126AFF10CE94F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
Manifest number: 0535
Signing time: Mon 02 Mar 2026 09:00:42 +0000
Manifest this update: Mon 02 Mar 2026 09:00:42 +0000
Manifest next update: Tue 03 Mar 2026 09:00:42 +0000
Files and hashes: 1: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl (hash: nACbiXpxFqNegs74sC1Z7O9WeYuRvXwnr56cZNlJHVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:41:ea:6d:df:56:e4:75:12:6a:ff:10:ce:94:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Validity
Not Before: Mar 2 09:00:42 2026 GMT
Not After : Mar 3 09:00:42 2026 GMT
Subject: CN=2229b6a26f534be049c2e7ad76ff3242194f7c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:97:ad:71:ad:43:2b:02:4d:a2:77:75:1f:db:
22:3e:23:86:ad:c6:c3:5d:93:50:3f:6c:52:a6:59:
9c:d4:a8:2f:43:6e:57:64:58:ee:0c:51:97:60:b2:
61:f8:68:0a:3f:bc:51:8d:42:f6:da:e1:cc:30:57:
41:dc:85:a7:4b:f1:d0:91:91:af:11:3a:bd:1d:25:
98:0d:6f:35:00:99:ae:d3:4b:47:75:70:75:3c:8c:
32:41:6b:ca:26:5d:ca:c6:16:6c:fd:c7:8e:97:6c:
29:06:07:3b:6d:70:0a:63:7f:67:f6:e1:e7:5d:e2:
62:06:1d:6d:b9:3d:4e:e9:03:50:20:bc:9d:25:20:
a4:70:54:55:62:4a:fe:9f:8c:46:f7:6c:ab:d3:31:
88:79:64:f2:78:ae:73:4f:72:0b:b2:43:63:a2:98:
7b:25:e5:24:d0:0d:69:e2:f5:2e:78:ef:5a:d5:82:
a5:52:87:01:50:92:2e:9b:d8:e8:db:77:bf:8c:34:
7e:68:15:f5:c7:33:f8:84:39:5f:49:0a:a3:34:c2:
4d:cf:5f:25:7c:54:b7:fd:85:7e:5d:62:a3:f2:7c:
80:60:66:86:9c:d9:bf:13:77:5b:2e:37:ac:35:e8:
c1:b0:08:67:1e:ab:f4:ce:4a:a4:5e:12:15:7b:12:
19:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:29:B6:A2:6F:53:4B:E0:49:C2:E7:AD:76:FF:32:42:19:4F:7C:1F
X509v3 Authority Key Identifier:
keyid:36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ac:e9:8f:bc:4c:72:3a:28:85:f6:31:a6:5b:37:3e:f5:34:
f1:a9:0a:21:45:b8:6e:8d:3e:54:59:bf:34:dc:22:54:4b:b5:
f9:ec:c0:4a:81:16:b5:14:31:9e:dd:bd:a9:2e:2c:6e:2f:51:
40:ff:0c:ec:12:70:2a:6c:1f:9f:e0:24:f3:83:1c:10:3d:9e:
69:ac:e0:9e:c7:5e:ac:3e:81:9d:5e:35:c4:49:ed:5c:db:12:
59:6e:10:52:5b:d2:a1:ef:ce:19:fa:b8:90:6f:32:73:07:41:
c0:6d:77:11:e0:1d:68:7f:44:74:b1:30:13:ae:f3:21:2a:e5:
a5:74:c7:19:2f:75:53:a0:81:e3:68:19:49:13:29:db:f3:2d:
c5:d8:3c:ee:61:13:18:d5:c6:ee:fc:db:39:e8:69:0f:64:a0:
1e:b0:0e:24:31:8c:9c:26:e1:82:2e:9e:ef:0a:5d:af:63:77:
96:ea:52:2a:ab:ad:99:66:c0:0e:d8:95:14:65:3c:4a:e7:45:
b4:8d:40:77:d0:c2:ab:25:e6:cb:9f:90:bf:5d:16:f2:86:1b:
20:ac:cb:f7:4f:60:31:03:4f:72:1a:82:16:60:d2:7c:c1:49:
48:d9:42:7b:1a:c1:dc:d5:bb:b1:5f:0c:4d:e8:f6:03:b1:72:
4e:db:27:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:15 2026 by rpki-client