Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
File: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft (raw, json)
Hash identifier: 75+CHsOwehhT9plTFwMIVdFuXq7ONGaUgEb+AfdIYqY=
Subject key identifier: BE:9F:6A:37:A7:CE:CE:30:CF:55:8B:C2:F5:DC:8B:8E:26:2D:CF:A8
Authority key identifier: 35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA
Certificate issuer: /CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
Certificate serial: 019CADFED1455B66A4314AC4F21F6B84FC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
Manifest number: 147F
Signing time: Mon 02 Mar 2026 10:01:23 +0000
Manifest this update: Mon 02 Mar 2026 10:01:23 +0000
Manifest next update: Tue 03 Mar 2026 10:01:23 +0000
Files and hashes: 1: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl (hash: BOEsmnd9BqIhemEDrysExx4BuCW7IM9Qeck6mG2OTvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:d1:45:5b:66:a4:31:4a:c4:f2:1f:6b:84:fc:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
Validity
Not Before: Mar 2 10:01:23 2026 GMT
Not After : Mar 3 10:01:23 2026 GMT
Subject: CN=be9f6a37a7cece30cf558bc2f5dc8b8e262dcfa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:53:37:66:20:38:7b:11:02:3e:6e:d7:c2:
95:89:08:52:e9:c6:62:67:66:6f:34:c6:97:69:43:
da:6c:bf:d8:68:31:99:2d:e2:35:fa:21:89:b6:00:
5f:92:6b:0f:b6:25:bb:a3:bf:c6:11:15:8e:69:c2:
91:89:38:99:11:c8:3e:67:75:4d:17:dd:93:e2:29:
ae:3d:9e:39:01:74:3e:7f:cf:30:3b:f3:aa:ba:1d:
6a:01:20:e6:b0:a0:23:97:c8:20:20:ac:c0:9f:f4:
89:d9:4a:30:19:f4:1b:9a:0b:63:7e:02:05:e6:10:
11:f7:b4:9d:bb:58:eb:77:5e:87:f7:1b:8a:ca:34:
e9:9f:50:72:a3:75:80:92:0b:ee:bc:eb:be:e6:69:
d5:1d:b6:7c:46:fb:2d:67:cd:e5:eb:e0:1a:25:ad:
51:63:f8:26:b9:f7:8b:44:1e:79:d2:03:cb:d5:11:
89:a0:eb:9b:c0:f9:00:0c:62:47:72:36:c5:76:2a:
6d:f3:36:5e:9e:79:fe:64:73:ee:49:ed:89:3f:e9:
7a:03:dd:96:89:0d:10:bf:03:54:f5:12:9e:08:7f:
c2:85:82:b7:0a:e5:95:34:13:07:0e:13:8b:a9:85:
56:87:df:65:bf:25:bb:e1:08:ca:99:08:f9:fb:56:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9F:6A:37:A7:CE:CE:30:CF:55:8B:C2:F5:DC:8B:8E:26:2D:CF:A8
X509v3 Authority Key Identifier:
keyid:35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cf:5b:a6:ef:d5:45:ba:f9:38:c1:40:33:4f:bc:92:47:26:
7b:53:38:6b:91:9c:ee:28:6d:b6:4a:5e:ce:fe:74:d3:67:1e:
c8:d4:86:55:60:b2:65:14:b1:15:e8:1c:08:ac:54:e7:26:5f:
4e:8d:f8:fb:4c:f1:b5:1b:a6:26:0d:9e:27:f2:c7:99:7d:c6:
b9:30:50:ac:21:a3:f6:1e:53:3a:5a:0a:09:81:60:ab:ed:f0:
6f:22:3a:c6:dd:82:52:0a:56:5f:40:17:69:57:3c:09:65:d0:
8a:ed:d4:5a:2c:7d:e2:b2:68:e4:de:cb:66:ea:af:22:b9:5d:
0e:04:33:a5:a8:69:22:b6:b5:de:14:d7:30:2f:3c:77:ba:a1:
7d:a9:99:5e:c4:05:fc:e5:48:ba:45:d9:94:8c:4a:19:08:bd:
db:5f:37:2c:be:0b:10:80:12:0d:1c:ee:14:23:8c:20:c2:c5:
3f:fe:67:81:ab:3f:1a:7f:80:2b:32:b4:6f:6a:b7:3d:a8:43:
80:0f:4a:1a:10:41:ba:7e:d3:1b:d2:f9:92:6a:97:8a:ed:3e:
ed:d9:1d:6b:c8:19:ef:90:73:1d:53:11:b8:6d:45:7d:f9:3c:
38:b2:d4:9d:4d:a3:c8:34:f3:88:21:06:54:34:e6:37:2d:dd:
34:86:44:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:05 2026 by rpki-client