Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
File: nuC9T-woxBx9-CFI8JHsPzkb23A.mft (raw, json)
Hash identifier: x5nYNC/0pU13Yp/88rQ52uY2fN6sO+oWfqiLe8X487s=
Subject key identifier: C1:E6:11:69:0C:25:96:BB:F4:11:DD:7B:4F:36:6C:13:19:8F:63:B0
Authority key identifier: 9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70
Certificate issuer: /CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70
Certificate serial: 019D9AE309123C708234D904BA550E9EE68B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
Manifest number: 0A70
Signing time: Fri 17 Apr 2026 10:01:03 +0000
Manifest this update: Fri 17 Apr 2026 10:01:03 +0000
Manifest next update: Sat 18 Apr 2026 10:01:03 +0000
Files and hashes: 1: nuC9T-woxBx9-CFI8JHsPzkb23A.crl (hash: hvr8BAMEU7H2w/RBamUrVaVfSiwXDX5zkpagsofkG3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:09:12:3c:70:82:34:d9:04:ba:55:0e:9e:e6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70
Validity
Not Before: Apr 17 10:01:03 2026 GMT
Not After : Apr 18 10:01:03 2026 GMT
Subject: CN=c1e611690c2596bbf411dd7b4f366c13198f63b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:fd:76:e7:2a:ea:6b:82:1d:c3:3b:e7:de:
4f:a6:a7:2e:8b:fa:eb:29:a2:73:cf:b2:a3:43:68:
93:88:55:20:9a:47:6f:2b:5e:68:4b:98:66:95:a7:
07:05:36:91:16:8f:04:96:f9:75:a0:22:b0:4b:65:
8a:8b:10:7e:92:2f:c6:e8:59:f1:15:74:2d:a4:c0:
08:ab:88:28:6d:23:90:9b:13:c5:73:7d:1d:3a:e7:
83:f5:0a:12:30:48:49:d3:ed:9c:a2:c2:72:7b:8b:
53:af:92:c0:74:4e:4a:c3:fa:03:6e:d3:cd:6b:c2:
9b:0f:80:e0:5a:1e:5c:ee:5c:ef:2a:3d:cf:b7:8a:
d0:2c:cd:52:4e:7b:32:da:b7:54:43:60:75:a2:96:
d8:e7:bc:71:f5:7e:e6:a4:50:df:f6:60:0c:1b:e2:
d0:40:e8:93:1c:b8:1e:c4:c1:0e:da:45:cf:89:4e:
5d:5d:ee:49:16:7a:98:07:bf:2e:99:b9:89:64:06:
f2:33:f8:14:8e:91:3f:14:85:5c:fc:cc:52:d1:60:
6a:a1:ab:af:c8:ba:1f:75:7c:2c:e8:3b:cc:3f:2c:
e1:18:f1:61:ea:fd:a0:5a:e3:2c:33:f8:fd:49:1d:
7a:4b:88:1d:30:4a:0f:ea:ba:fa:d7:4b:ad:a9:38:
29:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E6:11:69:0C:25:96:BB:F4:11:DD:7B:4F:36:6C:13:19:8F:63:B0
X509v3 Authority Key Identifier:
keyid:9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e6:4b:95:f6:89:6f:1b:ff:56:b8:37:37:87:e1:1e:ee:0f:
1c:6f:47:53:c4:df:32:dd:66:25:cd:a8:4c:cc:90:cf:2f:0d:
36:96:ca:57:c5:a4:d7:d4:4e:4b:f4:4a:8e:26:0e:96:b9:dd:
91:e4:92:e4:c6:db:dc:ea:6d:f9:9e:e4:63:6b:af:98:26:9e:
b4:f6:4c:e8:40:e0:f4:ee:a8:ca:2f:22:d2:76:e5:55:ca:22:
a0:f7:bd:35:c1:8f:31:e5:d5:40:16:88:cb:3e:fd:05:eb:08:
14:7f:7b:e7:45:54:98:7f:fa:8b:93:81:57:04:8b:3b:db:6a:
85:7b:33:5d:ba:59:dc:fb:71:65:43:44:4e:9c:6f:f2:f9:96:
67:07:c4:98:d9:55:8c:1d:dd:10:f3:b8:b7:ba:5b:48:07:47:
2c:f3:11:0b:31:bb:b4:84:cd:e7:de:79:0b:79:6f:17:23:a2:
82:32:ca:36:06:f2:94:c9:db:ee:23:f3:ac:ea:0a:54:16:49:
b5:8e:6d:86:64:d1:3a:31:b0:a3:aa:65:9e:20:ac:89:8f:31:
02:4d:f2:d3:c0:59:50:f0:aa:4e:16:99:04:f3:15:94:f9:6b:
2b:29:91:9d:03:dd:bc:a2:6a:9e:57:44:c4:d0:13:8e:ba:ee:
2e:94:38:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:18:17 2026 by rpki-client