Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
File: nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json)
Hash identifier: rWx+gLaK/XRxDpKh3ATPGAhOYkwBkP/e+76RaJRALAk=
Subject key identifier: 54:A9:95:A8:04:68:52:33:DD:62:73:1E:1A:0A:60:E0:2A:03:C6:59
Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
Certificate issuer: /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Certificate serial: 019CAB6B8926BD7BEB1D0FEFCD0B6369E9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
Manifest number: 0944
Signing time: Sun 01 Mar 2026 22:01:17 +0000
Manifest this update: Sun 01 Mar 2026 22:01:17 +0000
Manifest next update: Mon 02 Mar 2026 22:01:17 +0000
Files and hashes: 1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: e85w7rAuegnZQMUDavBOD61nvbLCK16QsQLDq8AiYGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:89:26:bd:7b:eb:1d:0f:ef:cd:0b:63:69:e9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Validity
Not Before: Mar 1 22:01:17 2026 GMT
Not After : Mar 2 22:01:17 2026 GMT
Subject: CN=54a995a804685233dd62731e1a0a60e02a03c659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:b5:9c:4a:34:68:74:b5:06:bf:00:e2:88:
23:4c:13:56:1b:86:6f:95:d2:8a:f7:8b:b1:f9:00:
07:1a:36:9a:3f:b4:a2:7d:31:af:6c:75:4f:d0:2d:
22:47:45:5b:f3:c5:90:fb:ff:16:27:02:ad:ac:87:
fd:38:30:d0:41:41:ef:0c:7c:52:6f:ec:1b:9f:84:
29:f8:5a:7b:43:54:63:91:51:f0:6c:5e:b8:d4:a7:
97:c5:5d:0a:4a:6a:23:48:4e:2c:21:de:eb:15:21:
25:90:ad:bb:3e:3a:32:3f:40:00:2e:9c:87:13:74:
c7:51:51:c8:d2:49:c2:09:97:a2:d8:01:66:7b:50:
37:d6:72:92:44:2d:11:f5:8d:1a:6d:04:4a:a3:8b:
c0:34:9b:a7:f8:ea:14:16:4d:cd:89:42:d9:66:04:
22:95:4c:46:e0:fb:de:f5:3a:53:a1:f6:3b:91:bf:
4b:e4:55:bc:95:bc:71:dd:5c:fb:5a:bd:4f:05:9e:
e9:ee:a0:1b:f1:ba:ad:55:e4:06:a7:b9:89:8d:6f:
cf:22:9d:c9:47:8e:59:5b:c9:dd:64:f8:7b:e1:79:
a8:0d:6d:80:01:eb:c2:96:43:3d:6d:76:df:a1:8c:
1f:b4:c7:e3:5d:25:4a:fe:1b:25:ff:a5:80:7d:d3:
88:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A9:95:A8:04:68:52:33:DD:62:73:1E:1A:0A:60:E0:2A:03:C6:59
X509v3 Authority Key Identifier:
keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:af:c5:33:7b:46:d7:d7:f4:22:de:11:e9:f6:6c:1a:7c:47:
18:01:a1:b5:5d:b2:0f:e5:18:53:4a:82:9f:0f:d2:a0:f3:b6:
86:b2:5a:0c:d0:e2:9e:74:b3:08:d6:d3:e2:63:1c:09:9c:a7:
66:3b:b0:fd:45:27:41:d1:7d:a8:f0:b2:1a:f4:14:43:2d:6e:
37:cc:0a:eb:b0:17:5e:cd:57:25:00:09:7c:18:ce:eb:62:b0:
1a:5f:2b:3a:5b:eb:5b:cc:40:57:11:a7:4b:d4:85:a5:0c:29:
5e:00:4c:71:ea:46:49:9e:ac:ec:03:7c:04:08:0c:a3:6e:e3:
ec:9d:3a:af:c0:ac:72:f1:34:86:ae:21:88:14:17:0b:df:19:
f0:af:dd:6c:9f:35:3e:d0:1f:2c:53:00:8b:50:0b:ce:db:11:
e1:8b:a6:f6:38:f7:9d:a9:5a:85:9d:aa:9c:56:50:e2:c3:12:
17:13:74:cc:2e:88:ca:80:df:37:af:48:70:7c:29:00:73:dd:
65:79:ba:e2:21:b3:0d:eb:dc:54:17:74:59:36:a4:bd:a6:30:
23:6f:8a:d7:e0:22:fb:50:3f:66:80:53:46:af:75:e5:53:58:
c3:4c:06:09:fc:ee:06:c6:58:6b:f8:74:61:cf:09:4d:d6:c7:
a0:f7:df:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:55 2026 by rpki-client