Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
File: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json)
Hash identifier: JnFjZ1EfA7N24C6hkBzGG9t4RZaKtyv5dFKvM3Eo7CE=
Subject key identifier: AA:E8:D1:7B:EA:9D:7E:19:33:3C:69:B5:19:65:CB:7E:98:44:58:7A
Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
Certificate issuer: /CN=36be697c8489f482220f5c4064babe4c83c419d6
Certificate serial: 019CAB6BBE276353589C493A78E878E153DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
Manifest number: 0CD5
Signing time: Sun 01 Mar 2026 22:01:30 +0000
Manifest this update: Sun 01 Mar 2026 22:01:30 +0000
Manifest next update: Mon 02 Mar 2026 22:01:30 +0000
Files and hashes: 1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: uG7OLd979kGh0LKUnbjvl+y/f2ac4A2eyC5eBZJKefw=)
2: V7ehPHGc-IPjCptiIqNGOp1gBiE.roa (hash: J/1jCxZxkRbRLNpc2zFMuakcbWm535PWrbp1jxC/YvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:be:27:63:53:58:9c:49:3a:78:e8:78:e1:53:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6
Validity
Not Before: Mar 1 22:01:30 2026 GMT
Not After : Mar 2 22:01:30 2026 GMT
Subject: CN=aae8d17bea9d7e19333c69b51965cb7e9844587a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:ba:86:75:00:25:8c:5b:f8:ca:66:2a:97:
dc:51:e1:48:fb:f0:70:4e:2f:52:f9:2e:78:54:49:
c2:af:41:f7:79:82:e9:2e:24:b4:89:a4:41:4e:da:
75:49:9c:fc:de:0e:6f:1c:96:10:dc:bc:eb:fb:8b:
f3:5a:08:87:d8:dc:14:8a:f0:89:b2:66:77:10:cc:
a9:31:c4:fc:51:8a:98:f1:fb:60:15:71:7b:ac:e5:
0b:06:c3:10:35:f9:9a:e7:52:ed:0f:3c:99:7d:cd:
89:db:be:38:e4:83:f7:93:85:d7:9b:09:f5:c7:65:
f5:ba:9a:99:8f:65:75:1d:6d:c1:f4:4d:5b:a4:d2:
97:6c:bb:ed:77:bf:82:71:5f:d5:95:6a:26:7b:ef:
c8:31:19:40:f8:c4:a5:46:f7:dd:72:87:bf:4a:a1:
fc:1f:e7:79:5f:6c:3e:95:17:8c:f6:20:09:f7:94:
74:c7:4d:a1:7e:74:46:09:1c:11:9d:ca:a5:1f:e0:
69:ab:0d:b1:ab:c4:4e:5c:40:0d:8d:bd:c9:bc:e4:
95:31:17:a8:7b:d3:e2:b6:a4:93:89:b7:fe:ec:65:
89:87:e9:79:91:86:8c:a4:6f:cb:e9:7b:7c:2d:ea:
9b:42:f7:9e:95:65:5c:75:5e:98:95:25:b7:12:92:
2b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E8:D1:7B:EA:9D:7E:19:33:3C:69:B5:19:65:CB:7E:98:44:58:7A
X509v3 Authority Key Identifier:
keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:da:23:4c:b4:f2:d5:75:b4:8f:58:0e:5f:75:d6:4a:90:91:
a2:be:6d:4d:93:2c:ba:c6:65:05:4c:be:e4:68:d1:91:42:69:
0b:ee:7b:2a:3e:f4:fb:1f:0f:ce:71:4e:ee:b6:f7:cc:9a:7e:
88:ad:23:06:c6:65:a9:c4:ff:79:70:a5:17:b3:78:a6:cb:89:
e4:cd:d1:ae:54:e5:1f:a4:c2:ec:e1:47:8d:47:99:7a:61:8e:
39:d3:8c:00:50:14:4f:d8:46:7d:d7:6f:f5:aa:d6:6b:37:3c:
39:26:cd:45:69:fb:86:3e:a5:e4:ec:73:90:ba:7a:7e:58:61:
d6:f6:8d:b4:08:c7:08:93:0f:61:ea:e8:1a:fa:78:a5:b7:50:
cb:59:e2:11:a7:69:b5:0c:b7:98:94:b6:1d:e4:52:13:e7:bd:
f3:c5:92:72:ae:cd:a0:70:fb:86:cb:f0:9e:3b:c4:d9:f0:69:
7d:a1:9b:e2:3d:90:d8:f9:d9:10:af:23:1a:cd:76:f0:89:7d:
9d:e5:8b:bf:d4:5d:05:32:6f:38:09:89:6e:c0:f4:5b:ec:8f:
36:f9:4f:ed:e4:fb:75:c5:39:ca:78:02:27:85:dc:17:23:56:
c9:55:eb:88:fe:0a:63:a1:4d:73:64:be:40:e5:10:14:89:a7:
c6:b9:53:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:12 2026 by rpki-client