Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
File: Nq6kWA8QexEmjJbqMYko1O11_5M.mft (raw, json)
Hash identifier: ZUl0SzD1/o5WHakp12PFugoBEsaDDUqFFceZYn7In1w=
Subject key identifier: A9:F0:B0:D5:56:17:B9:D7:81:6E:03:D8:B5:F2:DD:91:48:62:BD:A2
Authority key identifier: 36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
Certificate issuer: /CN=36aea4580f107b11268c96ea318928d4ed75ff93
Certificate serial: 019CAAC6A4655B641F4DA928E1293766C33A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
Manifest number: 06FD
Signing time: Sun 01 Mar 2026 19:01:10 +0000
Manifest this update: Sun 01 Mar 2026 19:01:10 +0000
Manifest next update: Mon 02 Mar 2026 19:01:10 +0000
Files and hashes: 1: Nq6kWA8QexEmjJbqMYko1O11_5M.crl (hash: ICeb7nXEAA76pMqQeaTN001qhs83EN7osCjBYRp9TxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a4:65:5b:64:1f:4d:a9:28:e1:29:37:66:c3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aea4580f107b11268c96ea318928d4ed75ff93
Validity
Not Before: Mar 1 19:01:10 2026 GMT
Not After : Mar 2 19:01:10 2026 GMT
Subject: CN=a9f0b0d55617b9d7816e03d8b5f2dd914862bda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:6a:34:28:e8:e1:c1:20:40:ca:5d:07:70:
65:29:64:b0:c8:3a:5b:49:1c:3f:2f:cc:be:c8:07:
08:27:62:93:bf:79:80:df:ed:cb:0d:6a:e8:dd:24:
57:87:df:6c:64:99:52:41:b0:6d:26:a3:5d:72:9f:
31:bb:95:63:26:9d:2c:80:ec:ea:3b:ed:9d:cf:54:
54:c0:f5:24:96:47:b8:09:80:46:98:b9:2d:56:79:
c0:f7:98:a3:c6:96:c5:d6:8b:0f:15:08:d5:ff:0d:
28:2b:87:4d:8a:a9:9e:fc:a3:5a:2d:de:ec:72:74:
06:da:9b:72:d0:31:b5:15:81:13:f3:79:c3:68:4c:
ff:a2:48:58:b3:75:5f:5c:7a:a9:0e:cd:2e:d4:9a:
a9:bd:00:27:b3:96:fd:4e:74:53:82:6c:48:fb:09:
da:d9:28:5a:17:07:04:d8:f7:ab:42:9c:2e:cb:ea:
5a:7f:3b:3a:66:4e:43:b9:73:b3:8e:a1:6e:c6:a3:
0c:b0:de:7c:ea:c8:5d:5b:bb:88:7a:f5:7d:67:0d:
c2:68:02:56:4c:bb:a7:68:25:06:3d:8c:03:ed:07:
4d:63:b2:e8:4b:9d:91:89:06:37:90:86:17:3f:f3:
09:ca:77:cd:6d:3d:2e:2c:fc:b1:6b:12:32:74:ff:
6a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F0:B0:D5:56:17:B9:D7:81:6E:03:D8:B5:F2:DD:91:48:62:BD:A2
X509v3 Authority Key Identifier:
keyid:36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:32:3c:5e:41:7c:f8:3f:7f:6e:1c:b8:64:9c:91:71:da:d2:
c5:a6:5d:32:ea:51:40:46:68:68:fb:21:43:01:cc:c3:48:4f:
f2:a1:f2:4f:d4:f3:30:50:5c:76:04:db:6e:45:3b:0c:cf:f9:
ee:2f:64:56:09:73:1d:f2:c9:d0:14:bc:88:51:b3:02:07:99:
ee:5e:57:d1:2f:18:cd:1e:a5:ad:d4:5f:1b:45:ce:32:ca:6c:
c4:bd:20:4d:5d:da:f8:84:b2:65:d9:5e:89:61:58:fa:30:ba:
6b:d5:4a:7a:14:6e:65:48:0b:bd:28:d0:fa:b2:f4:8e:81:ba:
96:15:2a:8e:b0:0c:73:c6:b3:18:3d:f4:17:27:0a:00:8c:da:
c6:ba:27:c4:d6:1c:4e:2b:1d:b8:12:a0:b8:9e:d8:29:02:e5:
61:7c:e6:40:b4:ac:90:09:bc:be:22:64:0e:57:af:b3:62:ff:
e7:a7:7b:40:97:73:b0:cb:0b:a4:5c:da:f0:dc:ff:cc:cf:ca:
68:4c:61:7a:c8:e5:bf:19:8b:96:73:c8:aa:74:e9:48:e9:19:
45:ba:70:3b:ea:53:a7:47:05:0c:f5:14:7c:74:28:9a:7d:1e:
ed:b5:e0:ad:ea:86:ed:12:08:dc:4d:24:94:9a:28:07:c2:19:
f4:cf:44:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:29 2026 by rpki-client