Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
File: nc28ow8_5XpR57bAt_MgOvFnKiI.mft (raw, json)
Hash identifier: CWqB3m8DAbB6kDr9m5B6XqhPsKxhCTYIhymJoKLpIrE=
Subject key identifier: 1F:56:24:4D:28:A2:BC:8A:C6:BF:A3:4C:E8:7C:44:E0:6E:80:36:98
Authority key identifier: 9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22
Certificate issuer: /CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22
Certificate serial: 019CAB6B96D308C4A25728EA62284B91FFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
Manifest number: 1840
Signing time: Sun 01 Mar 2026 22:01:20 +0000
Manifest this update: Sun 01 Mar 2026 22:01:20 +0000
Manifest next update: Mon 02 Mar 2026 22:01:20 +0000
Files and hashes: 1: nc28ow8_5XpR57bAt_MgOvFnKiI.crl (hash: g3OoPNhx94dH42GldbmC6nXNIua7mxSxKyFVdtmoigU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:96:d3:08:c4:a2:57:28:ea:62:28:4b:91:ff:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dcdbca30f3fe57a51e7b6c0b7f3203af1672a22
Validity
Not Before: Mar 1 22:01:20 2026 GMT
Not After : Mar 2 22:01:20 2026 GMT
Subject: CN=1f56244d28a2bc8ac6bfa34ce87c44e06e803698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a2:96:28:e3:55:ed:fb:d2:ac:a1:76:00:6e:
95:94:da:01:10:81:f3:cf:92:7a:9b:da:9c:0c:03:
b7:69:f3:5a:17:fb:6e:97:9e:eb:da:38:a0:f2:5a:
66:8a:9d:f7:b4:5d:d0:2d:f4:97:b2:f2:e9:f4:b7:
a9:37:64:34:1d:49:71:53:ae:c4:00:8d:79:ba:d1:
52:b6:30:1c:cc:b2:8a:e0:a7:6e:40:12:97:63:fb:
37:bb:b0:3d:7d:bc:56:fb:70:2b:6a:6b:4c:37:4e:
a4:13:a7:7a:cb:75:28:91:f8:4a:5c:20:82:43:0f:
18:ee:bc:ff:09:68:62:46:d9:f8:41:46:7d:0c:81:
f0:85:4d:2c:7c:81:2e:9d:b7:96:d2:8e:a3:63:81:
cd:b0:d9:a9:ac:14:a8:51:be:66:05:d1:06:2d:07:
a1:4d:c5:ad:f0:53:05:7c:c4:c4:d8:9d:15:55:03:
75:86:5d:b9:c3:0c:41:02:c6:19:7a:3b:1b:02:7a:
dc:db:64:07:e3:8c:85:9b:0a:8c:0b:f0:27:f2:d2:
48:d4:ab:05:d9:7b:0b:1b:37:8c:50:fe:f6:1c:10:
b9:94:3c:28:07:2f:ac:88:fb:50:65:1a:3b:18:ec:
29:7e:a6:07:28:24:5c:42:9f:4b:e0:bd:bc:de:1b:
6b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:56:24:4D:28:A2:BC:8A:C6:BF:A3:4C:E8:7C:44:E0:6E:80:36:98
X509v3 Authority Key Identifier:
keyid:9D:CD:BC:A3:0F:3F:E5:7A:51:E7:B6:C0:B7:F3:20:3A:F1:67:2A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nc28ow8_5XpR57bAt_MgOvFnKiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ac72a6-b836-4043-bd23-fa060b9a3b40/1/nc28ow8_5XpR57bAt_MgOvFnKiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:02:af:eb:85:a0:57:71:11:c1:57:ac:ba:fa:6d:1f:01:08:
09:b7:92:74:d2:56:29:87:8f:91:ee:50:d8:0d:94:72:29:d4:
6e:37:0b:57:96:8b:df:4b:4d:82:40:de:41:23:cd:f8:de:9e:
c2:60:e1:a3:18:44:20:75:ba:0a:4d:2d:a7:a8:14:35:1d:58:
58:ea:07:5b:c6:55:82:d4:14:b8:3b:d2:7f:eb:ac:62:9a:07:
15:5d:22:98:8e:03:9a:34:b9:a3:69:21:a7:97:a9:a3:3f:02:
43:eb:b7:2f:2e:f1:e3:43:6c:8d:74:9a:2a:d4:db:fa:83:50:
90:53:2f:aa:0f:61:2c:68:32:a6:f6:89:4d:6d:7b:7f:7a:20:
ed:f2:21:58:9a:76:5a:75:fd:c1:57:74:b5:89:1e:e5:26:00:
98:ab:82:18:c0:7e:81:16:68:49:1f:11:03:16:93:b6:6e:7c:
79:ac:e4:17:ee:e5:b8:4f:fa:72:83:f9:7d:d9:5c:76:6f:49:
e3:7d:93:01:3b:7b:a2:b7:4a:de:10:ee:d3:48:b4:b7:6e:55:
c0:47:12:c9:dd:b1:9c:69:bf:1a:74:91:8c:c0:da:cf:95:1a:
d3:40:2b:f7:b4:a2:2f:3c:bb:06:21:f9:e3:71:85:ec:3f:d4:
f6:08:34:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:38 2026 by rpki-client