Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
File: NhF6aBWpGEeNP4wA1nGlcWa_7so.mft (raw, json)
Hash identifier: G+xTFx4cW8x4vVOKDkwdTpZ+73mGAA1cn71XlNRMOWo=
Subject key identifier: 34:ED:99:AC:63:1F:BB:0F:E1:C3:C2:9E:30:EA:3B:9A:9D:9F:2E:C1
Authority key identifier: 36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
Certificate issuer: /CN=36117a6815a918478d3f8c00d671a57166bfeeca
Certificate serial: 019CACEBF0F0C669D4BC14A623780EA3A4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
Manifest number: 08E0
Signing time: Mon 02 Mar 2026 05:01:09 +0000
Manifest this update: Mon 02 Mar 2026 05:01:09 +0000
Manifest next update: Tue 03 Mar 2026 05:01:09 +0000
Files and hashes: 1: NhF6aBWpGEeNP4wA1nGlcWa_7so.crl (hash: LvVVwvh2x7Wqv0/9wmADjf/pG5fuP/NUX1gjjSSvuYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:f0:f0:c6:69:d4:bc:14:a6:23:78:0e:a3:a4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36117a6815a918478d3f8c00d671a57166bfeeca
Validity
Not Before: Mar 2 05:01:09 2026 GMT
Not After : Mar 3 05:01:09 2026 GMT
Subject: CN=34ed99ac631fbb0fe1c3c29e30ea3b9a9d9f2ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:0c:03:45:c3:bf:a9:fe:84:38:79:fb:c0:
61:e3:40:ec:30:c9:45:db:86:31:49:25:40:e5:35:
aa:47:c0:ff:7b:1d:4c:f5:8b:c0:4b:de:46:fd:71:
d6:00:87:9b:a0:24:a2:30:a2:58:4e:6c:50:c8:b4:
5d:e5:72:c0:44:0e:19:e4:18:16:6b:fc:24:09:94:
88:c2:14:ea:12:89:b8:35:13:6c:c8:10:94:1d:60:
b0:48:9d:c3:e0:fc:da:07:cf:1e:8b:3d:b8:29:46:
dd:f6:42:92:8d:dc:bc:e4:0f:91:b2:bb:ff:11:2a:
5a:9a:17:61:7b:a6:e9:3c:16:ac:3e:77:81:0b:0f:
33:99:eb:ef:15:22:c9:bc:ab:db:07:f2:a9:0a:5e:
1f:5b:ed:a0:18:21:bb:4b:34:4f:aa:42:ff:64:d9:
a4:07:d3:c3:72:9d:e8:f7:b9:b2:ae:0e:ec:63:95:
b5:42:12:f1:d1:97:3a:87:25:69:7f:5a:59:48:f4:
3c:46:5b:fe:4e:ff:70:3d:01:a7:bd:47:92:33:31:
12:17:6e:dd:c7:07:00:6f:27:ee:2e:20:cc:0b:7f:
01:d4:92:a5:44:45:a6:2e:1e:89:43:16:37:d5:62:
32:c1:60:ab:a1:ff:d0:f4:16:1d:4c:0e:c0:db:72:
c2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:ED:99:AC:63:1F:BB:0F:E1:C3:C2:9E:30:EA:3B:9A:9D:9F:2E:C1
X509v3 Authority Key Identifier:
keyid:36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:90:84:7c:92:1f:f1:4b:ac:ad:ff:9b:33:94:f6:44:f0:8b:
8b:03:cb:1a:c1:24:c9:c1:71:90:53:67:b2:cf:48:b9:ac:73:
04:ea:fa:ef:e3:1c:d1:50:60:a8:c8:8a:ff:97:d9:68:fc:6e:
83:b2:18:5f:f2:6e:81:b0:c4:97:33:02:d8:6e:9a:6d:a4:a0:
d6:29:d1:d2:4b:05:04:53:7e:28:25:19:44:de:b6:be:1d:ca:
7e:ff:df:03:5c:dd:43:28:eb:66:d8:c1:e9:26:59:7d:7c:44:
a0:58:d4:d4:a9:f1:ad:50:d6:20:10:8b:8c:4d:5c:c6:29:ee:
c2:91:a1:09:0d:c6:c2:c5:61:79:44:ea:93:40:0f:5c:8f:6e:
26:b3:57:24:c7:3e:71:0b:40:bd:dc:b1:e5:ea:19:89:4e:13:
32:d6:8d:e9:dc:76:87:b0:f5:ad:6d:ad:0c:36:49:f4:32:4c:
a5:20:f0:63:35:14:57:d5:35:e6:d2:b7:6e:e9:88:3b:92:0b:
1a:13:f8:7c:b8:61:ef:13:0c:2b:32:94:f0:8f:dc:e6:2b:2d:
c2:4e:02:b1:51:33:9c:ee:95:60:55:52:6c:91:e2:2f:16:dc:
74:81:a4:fb:05:46:a9:4f:71:8a:4b:02:74:e0:ec:94:ec:ac:
c2:6c:fc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:49 2026 by rpki-client