Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
File: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft (raw, json)
Hash identifier: NCEW/KknZY3l0T2maMj1ViHc7hgwIeV/iaG6ZgkfafQ=
Subject key identifier: C1:4B:90:D8:46:6E:B2:B1:0A:34:A2:4B:B8:4C:1A:B6:EF:EB:AE:53
Authority key identifier: 35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA
Certificate issuer: /CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
Certificate serial: 019D9B87CB90F3539A74F41668D4B79B2E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
Manifest number: 14FA
Signing time: Fri 17 Apr 2026 13:01:01 +0000
Manifest this update: Fri 17 Apr 2026 13:01:01 +0000
Manifest next update: Sat 18 Apr 2026 13:01:01 +0000
Files and hashes: 1: NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl (hash: Lj34s60wueQlkREF05fEFiOQxwpWb0F2HLWXdq+MolA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:cb:90:f3:53:9a:74:f4:16:68:d4:b7:9b:2e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358ae580b2f7b45c3d2ae9f19f3c1be97e839aaa
Validity
Not Before: Apr 17 13:01:01 2026 GMT
Not After : Apr 18 13:01:01 2026 GMT
Subject: CN=c14b90d8466eb2b10a34a24bb84c1ab6efebae53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:66:37:de:af:42:10:98:9e:0c:39:8a:52:ee:
04:7f:de:d7:42:94:9c:54:ac:e8:be:5d:38:73:a1:
5d:93:41:50:6d:2f:3d:e1:9d:1c:c7:58:ad:1f:9a:
2f:91:b1:c3:06:92:8b:3d:b6:d6:be:44:90:a4:18:
8d:f7:99:f8:f0:b0:a5:c1:95:be:95:df:6d:23:a9:
01:a6:e1:9a:57:f3:07:f2:5b:e8:22:b9:3b:9c:62:
a8:6d:25:f5:f2:17:18:5a:a3:91:df:26:a8:fd:c5:
ef:3b:1c:72:ee:91:d6:56:ac:3a:28:aa:13:31:8e:
11:4f:d5:e1:f7:a6:f0:a9:65:47:74:5d:85:d2:81:
0e:7b:3e:c1:7a:db:8a:2f:c1:d1:78:51:15:59:4c:
73:f9:3d:ef:29:bd:cd:57:a6:63:eb:c0:22:d5:7d:
6d:69:0d:47:76:20:f4:fd:80:e9:0a:c0:c5:fe:15:
db:45:f5:7e:18:37:9e:20:e3:4f:db:c9:30:6f:e2:
af:d6:a2:06:88:4b:a7:8c:b3:f0:34:33:45:d3:18:
94:5b:f5:fd:73:d4:24:65:e2:8b:43:f4:35:0b:40:
f8:30:0f:4f:5c:bd:e0:14:10:61:01:5c:4b:a7:77:
67:75:6b:c5:c9:b1:0e:ed:83:ba:c6:06:70:92:dc:
54:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4B:90:D8:46:6E:B2:B1:0A:34:A2:4B:B8:4C:1A:B6:EF:EB:AE:53
X509v3 Authority Key Identifier:
keyid:35:8A:E5:80:B2:F7:B4:5C:3D:2A:E9:F1:9F:3C:1B:E9:7E:83:9A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9521f6-184e-430a-b667-524f3a2f68b3/1/NYrlgLL3tFw9Kunxnzwb6X6Dmqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:26:3b:ab:07:c0:6c:40:bf:c4:a5:8d:27:cf:2d:a2:23:90:
f2:5e:9c:cb:93:f4:90:1a:7b:1d:24:ba:70:bf:3d:66:b8:97:
74:ec:19:bb:59:65:c4:b8:f6:72:8a:bf:f0:44:d4:ae:99:5e:
0f:ba:1d:c0:57:17:59:48:60:a4:4f:53:30:47:c9:50:b2:39:
5c:a1:a8:c3:91:cf:c6:9c:22:2e:2c:94:80:d2:a9:8b:d0:7c:
44:1e:57:16:de:dc:1c:69:b7:a4:9f:c0:c9:c2:98:39:62:44:
6a:8e:a0:17:0e:27:a4:0c:df:84:7e:c2:4b:39:0f:bf:b1:99:
22:ea:45:90:60:4c:3b:6c:c7:4e:88:1c:0d:cb:88:cd:7d:98:
37:fe:a4:30:8b:09:40:f5:e4:fb:65:85:42:32:6e:46:51:1d:
ee:06:13:f9:af:76:fc:a2:0a:32:75:95:a6:92:1d:92:77:16:
b0:97:21:59:14:77:a3:99:b2:bc:c2:9c:dd:61:b5:20:af:74:
12:8f:5b:15:cf:54:94:8d:61:25:28:ac:9a:f7:db:c4:94:13:
c3:eb:a3:77:e8:9a:68:ec:79:d8:a6:97:44:4f:68:ad:d5:65:
72:63:e4:29:3f:75:5f:3d:8e:56:8e:33:64:16:73:b9:73:e4:
66:11:3b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:18:47 2026 by rpki-client