Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
File: nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json)
Hash identifier: wc0b0mulZf8Zffr8a4h1z+xpQBpAkdJSwCR+YS1bG3c=
Subject key identifier: FC:97:AA:25:E0:7F:3F:E5:B7:11:98:E0:13:45:F0:4F:42:77:48:4E
Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
Certificate issuer: /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Certificate serial: 019D9A3ED2DB3F221BFEF014E1584F42ECC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
Manifest number: 130C
Signing time: Fri 17 Apr 2026 07:01:41 +0000
Manifest this update: Fri 17 Apr 2026 07:01:41 +0000
Manifest next update: Sat 18 Apr 2026 07:01:41 +0000
Files and hashes: 1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: JCQe2mfIjOq+7/lLYEr1Djr8TKTZRRVcJiN0SMjuhXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:d2:db:3f:22:1b:fe:f0:14:e1:58:4f:42:ec:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Validity
Not Before: Apr 17 07:01:41 2026 GMT
Not After : Apr 18 07:01:41 2026 GMT
Subject: CN=fc97aa25e07f3fe5b71198e01345f04f4277484e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:0b:ec:9f:be:07:80:ff:c9:30:15:4e:bf:
4a:4a:d5:b2:dd:63:4f:48:ff:96:30:fe:9d:2f:df:
f7:b1:c8:b5:aa:fa:b3:d7:dd:17:92:6f:d2:a5:79:
d2:79:2d:5e:9b:48:7c:fd:b4:1b:63:ca:6a:ee:28:
92:8b:03:96:7d:2e:69:2b:b8:49:24:aa:f9:62:0a:
f1:e8:d2:70:8a:c9:8f:3a:cf:f5:15:4b:68:6b:65:
09:e2:d0:73:37:3c:96:c0:8d:95:b4:91:3b:3a:1e:
5c:83:17:69:ac:3f:2b:fb:39:16:f6:32:3e:e6:9b:
2d:fd:71:01:6c:44:09:e4:90:d2:a4:94:98:7a:db:
23:c4:fa:98:66:cd:99:19:17:78:5c:aa:f1:6c:77:
00:2a:a1:fc:a5:ad:43:45:34:12:3a:07:69:78:f2:
6e:7c:ee:84:02:a0:a2:38:7c:db:5f:89:1d:c6:11:
41:6a:dd:47:a0:c8:9e:bd:bf:66:de:17:69:b9:36:
92:1c:89:28:59:b1:b4:14:16:18:fa:93:e6:1f:61:
36:d5:66:05:17:00:63:c7:18:2e:96:23:f1:7e:7b:
93:ed:fd:a8:82:fc:d1:7b:4e:4f:bd:90:3f:be:6b:
10:ba:5b:f7:81:13:66:29:67:a4:69:06:a3:e3:68:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:97:AA:25:E0:7F:3F:E5:B7:11:98:E0:13:45:F0:4F:42:77:48:4E
X509v3 Authority Key Identifier:
keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b3:c2:da:f3:00:4a:40:2f:ff:87:d2:f6:34:eb:5d:52:2f:
9c:d8:f4:ee:79:fe:dc:1b:58:8d:48:ed:5d:37:6b:fc:61:5c:
ac:9b:02:75:97:53:3d:5d:3c:a1:0d:ee:3a:74:6f:74:0f:6e:
42:b3:0d:77:08:cc:96:60:04:00:0f:ff:70:ef:8c:6f:a5:d9:
6a:43:c0:52:4c:0a:39:76:c3:1c:a2:6d:43:b3:38:82:b0:07:
49:4c:20:80:40:9a:fe:b6:0d:36:d2:e6:85:9e:df:65:e4:7a:
55:d6:e1:4a:96:e9:c6:13:66:45:33:05:e8:30:cb:3b:da:55:
cd:f2:cb:b8:8f:97:2e:86:b2:8d:e5:b8:09:99:38:04:f6:b5:
df:d1:ec:aa:60:41:95:1f:68:1e:73:f4:df:c1:56:f0:cf:2b:
79:1f:e4:10:cd:ff:e3:08:cc:3c:fc:51:ee:8c:2b:2a:4a:6e:
cc:3c:aa:a7:5c:44:83:39:20:ae:2d:ca:78:76:45:50:5f:dd:
6e:60:8e:0e:83:7b:bc:75:ea:5a:ae:ed:f9:24:c8:15:72:e3:
f5:d6:74:31:e9:e0:ac:f2:8e:0c:aa:b6:d0:a8:e8:80:da:0e:
cc:5c:0f:86:39:71:65:a1:75:4c:51:43:36:6a:a9:c1:ca:23:
05:92:46:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:21 2026 by rpki-client