Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
File: NhF6aBWpGEeNP4wA1nGlcWa_7so.mft (raw, json)
Hash identifier: vbufmEhTDyKntYM9bi4KcVqQaFOB0AznQFKi2bqJ3VU=
Subject key identifier: EA:A2:D4:00:C5:75:34:09:D4:DC:78:2C:AB:AD:D9:4C:1F:ED:ED:02
Authority key identifier: 36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
Certificate issuer: /CN=36117a6815a918478d3f8c00d671a57166bfeeca
Certificate serial: 019D9886CAE1A06960C252A0B9FAEFBA9376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
Manifest number: 095A
Signing time: Thu 16 Apr 2026 23:01:03 +0000
Manifest this update: Thu 16 Apr 2026 23:01:03 +0000
Manifest next update: Fri 17 Apr 2026 23:01:03 +0000
Files and hashes: 1: NhF6aBWpGEeNP4wA1nGlcWa_7so.crl (hash: qbBtFyu2K/RBOLpSpmFGTLHEjXs5Ni7qyRzGDLc4udw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:ca:e1:a0:69:60:c2:52:a0:b9:fa:ef:ba:93:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36117a6815a918478d3f8c00d671a57166bfeeca
Validity
Not Before: Apr 16 23:01:03 2026 GMT
Not After : Apr 17 23:01:03 2026 GMT
Subject: CN=eaa2d400c5753409d4dc782cabadd94c1feded02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:28:cc:56:63:77:69:b5:90:eb:a9:cb:dc:b9:
1a:40:5a:61:39:fe:86:b8:4e:ca:ea:ba:d5:41:a9:
07:61:57:78:c6:80:2d:be:4e:41:43:c1:0f:ba:d1:
46:76:88:d1:5b:d4:de:b3:b8:87:2c:c1:23:f1:6f:
6b:fb:9b:1e:51:b6:ab:75:10:d9:f6:35:23:57:ec:
88:23:bb:cd:24:87:79:d3:4c:83:c7:f3:ed:a4:7c:
b5:7e:24:b4:14:82:9b:38:96:55:d0:47:ea:5d:55:
25:5d:c0:dd:16:7d:f4:f4:fc:23:0a:9a:57:a5:c2:
e9:90:c7:cd:3f:ea:eb:61:6f:83:b0:9a:93:fc:1a:
b9:e0:e1:3d:ba:d1:84:47:06:36:7c:d6:5b:69:08:
49:4a:52:90:5e:30:f2:c9:f0:c8:1f:8f:d0:8e:7a:
51:fd:a0:46:85:9b:cf:57:3c:58:d2:28:24:81:e7:
e5:25:84:50:0f:3a:0a:15:1d:98:dc:fd:b4:8e:8d:
cc:0f:89:5b:60:44:be:94:14:66:b1:fa:7e:20:93:
d6:29:06:cd:64:c8:1f:4e:87:f4:c8:63:e2:73:61:
01:0f:99:39:0d:16:fd:94:1a:12:e9:6a:4f:fe:dc:
75:bc:f3:82:ee:94:41:e6:77:ae:50:54:87:87:7f:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A2:D4:00:C5:75:34:09:D4:DC:78:2C:AB:AD:D9:4C:1F:ED:ED:02
X509v3 Authority Key Identifier:
keyid:36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:76:03:c0:15:71:8a:76:0b:9f:02:a2:a7:89:8e:92:02:14:
e0:d7:e6:9b:16:3f:de:8a:b6:15:54:64:82:a7:38:18:a4:cb:
29:a9:3f:01:72:cb:de:c2:b5:09:09:a7:04:ec:b3:53:11:6d:
af:51:5b:61:85:fd:fc:c2:19:64:73:6c:cf:54:d5:9f:52:32:
8a:cd:d7:a8:05:f1:d8:08:bc:08:7b:aa:a9:09:7b:43:10:82:
1c:5c:de:32:4d:23:72:43:52:0f:a6:e0:cf:32:a5:03:70:b5:
cb:ef:b4:d0:11:ef:a5:34:5b:77:46:c7:a5:c1:28:d2:ad:cb:
3d:44:69:9e:89:9a:85:2b:1b:ea:dc:2b:99:0b:f0:e3:99:99:
eb:c6:53:14:9a:8f:2e:29:d6:34:a2:50:49:11:89:af:1b:c5:
b2:44:0b:b5:5c:53:05:9f:ed:70:ca:c8:d6:d0:8e:2b:11:3a:
63:1d:9d:2e:9b:83:78:32:ca:50:9f:30:1e:92:c4:f2:c8:08:
c4:8c:ce:fc:c1:01:03:b4:33:c2:c9:f5:51:7c:ab:b6:b5:52:
75:94:50:fc:6a:c5:b1:eb:e1:f0:2d:c6:6c:bf:40:1b:96:94:
20:cf:86:85:5f:fb:c5:84:67:c7:91:91:2c:53:9b:2d:5c:cc:
e4:f1:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:30 2026 by rpki-client