Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
File: nuC9T-woxBx9-CFI8JHsPzkb23A.mft (raw, json)
Hash identifier: Hi5xpFHut3O1p8u0Fu3MDFOKuNW8xbsdtxfQoFeQz1k=
Subject key identifier: F3:7A:42:E0:45:0C:55:DE:32:2C:E2:48:EB:D7:F7:DD:66:C1:30:E9
Authority key identifier: 9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70
Certificate issuer: /CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70
Certificate serial: 019CAD5A2E714E784AABDBC86F8033CB794F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
Manifest number: 09F5
Signing time: Mon 02 Mar 2026 07:01:34 +0000
Manifest this update: Mon 02 Mar 2026 07:01:34 +0000
Manifest next update: Tue 03 Mar 2026 07:01:34 +0000
Files and hashes: 1: nuC9T-woxBx9-CFI8JHsPzkb23A.crl (hash: 5tRrFPBlo9ERyGa6LE/K612cKgxa/v4lhiYBqsSD4Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:2e:71:4e:78:4a:ab:db:c8:6f:80:33:cb:79:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70
Validity
Not Before: Mar 2 07:01:34 2026 GMT
Not After : Mar 3 07:01:34 2026 GMT
Subject: CN=f37a42e0450c55de322ce248ebd7f7dd66c130e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2a:14:f8:f3:61:98:96:a3:22:8f:f3:52:22:
11:37:e2:31:41:0d:25:b4:7e:27:80:c0:9c:50:35:
b3:e4:6e:61:17:41:91:00:67:9b:13:a7:35:30:33:
65:b6:db:c7:b5:08:30:c4:5f:9b:88:76:f1:b4:32:
da:d0:21:a1:f5:2d:99:71:8c:0c:d5:27:7b:37:1f:
a8:62:20:84:ed:63:ae:63:fe:8a:03:cb:8c:66:ee:
58:af:03:a1:85:0f:57:d5:fa:74:a5:09:f2:0a:4e:
db:ed:d1:49:28:bd:5f:e3:5d:36:a8:3b:45:79:8f:
58:7c:be:ae:ea:33:c2:3a:05:15:81:70:1e:90:2e:
18:f0:b9:f6:70:35:37:0a:ad:d4:8c:77:d5:aa:99:
15:0b:f1:89:be:bf:66:cb:3b:27:13:a5:22:d4:b8:
e9:ac:88:e4:c9:41:64:51:34:13:5b:28:ac:60:a8:
5f:52:45:09:da:f9:e9:f8:7a:59:e7:ff:ab:83:28:
42:b1:b0:cc:87:16:e6:92:28:13:ad:e9:ae:6f:d0:
39:8f:42:22:71:45:72:b5:4c:e6:0e:95:7b:27:2a:
21:d8:c3:49:ba:31:cc:76:67:97:f7:03:57:59:75:
1c:61:c6:fc:ce:b8:83:d7:54:f5:ba:3c:da:e7:17:
d0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7A:42:E0:45:0C:55:DE:32:2C:E2:48:EB:D7:F7:DD:66:C1:30:E9
X509v3 Authority Key Identifier:
keyid:9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:27:e6:f9:57:45:de:68:47:10:23:6c:de:4c:9c:71:d3:c5:
f2:88:78:26:fe:50:25:ce:bd:09:80:80:8c:c0:e2:26:74:d4:
fd:51:01:f4:2a:20:28:de:38:31:da:a6:5f:31:36:d5:2c:af:
53:d0:c1:e4:30:9b:99:94:06:db:c5:7c:f0:db:5e:52:e3:0b:
0c:46:5d:ad:6c:ac:9f:db:d7:d2:d6:74:2c:cc:5d:5c:50:63:
74:ac:99:ab:5d:b2:f0:b5:2c:ef:de:34:c0:df:2d:dc:0f:01:
1d:14:52:01:95:51:2b:12:5f:a2:0c:14:0e:fe:88:ea:53:2a:
6e:80:1c:51:cb:cc:95:b7:0f:33:03:d8:65:98:4a:b5:0f:3b:
0a:3e:e6:93:db:42:85:40:c7:b7:5e:39:42:e0:ca:1b:ed:9e:
9f:69:6e:23:07:4c:c7:f7:a6:a7:75:7f:6b:61:91:91:46:92:
db:bb:96:0d:7f:75:98:b6:3f:20:47:e2:31:08:6c:45:73:26:
41:b9:09:2f:eb:79:3d:66:72:60:46:29:8d:e2:7b:10:7d:0f:
5a:5f:e7:ac:4b:04:e5:fb:b1:cd:8a:db:51:fb:b7:8b:6c:93:
94:3e:6b:10:ed:f9:4d:67:42:d8:c7:8c:43:b1:49:cb:a4:c4:
6a:a7:9b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:38 2026 by rpki-client