Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
File: nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft (raw, json)
Hash identifier: nXy8ZLTpckGp75JefISlmQa9fqYvwtOjW/ACbexmZqk=
Subject key identifier: 4B:F7:A3:42:88:3E:C8:6D:16:14:C6:A3:71:20:13:02:4B:1E:DE:7F
Authority key identifier: 9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
Certificate issuer: /CN=9e3f1579ae176662d663a3834c0fef824cee033c
Certificate serial: 019D9A06DF2F7DD6483BF77FE786B4BFB3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
Manifest number: 05F0
Signing time: Fri 17 Apr 2026 06:00:34 +0000
Manifest this update: Fri 17 Apr 2026 06:00:34 +0000
Manifest next update: Sat 18 Apr 2026 06:00:34 +0000
Files and hashes: 1: nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl (hash: w5KOchIcslkP+JJL/NFG+v4VUiA1L1KlU3tdLV1N7xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:df:2f:7d:d6:48:3b:f7:7f:e7:86:b4:bf:b3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3f1579ae176662d663a3834c0fef824cee033c
Validity
Not Before: Apr 17 06:00:34 2026 GMT
Not After : Apr 18 06:00:34 2026 GMT
Subject: CN=4bf7a342883ec86d1614c6a3712013024b1ede7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:82:ff:67:fb:90:22:60:55:6c:4d:6f:52:
70:83:4c:8a:7a:c2:3d:6a:45:dd:83:3c:66:dc:e3:
8f:15:e9:67:4d:61:53:40:69:61:c2:81:21:8e:72:
59:fb:8f:74:c4:3e:f1:04:f8:3a:9a:ec:06:a8:22:
29:d2:15:7e:5d:b6:6e:2b:5d:f7:21:96:db:92:0d:
ca:11:cc:5f:16:a4:ec:ab:ac:8d:33:f6:c5:09:a9:
50:a3:98:9a:57:03:4c:18:a4:01:c7:20:18:e9:23:
82:65:6c:74:b4:3a:89:5a:aa:4b:4b:a7:42:88:0f:
89:eb:80:2a:c2:42:de:96:71:65:19:ff:3b:31:09:
fb:7b:80:55:fa:29:1e:54:e1:11:f1:30:11:a4:8b:
11:7e:1e:e5:c6:fb:cb:b4:87:76:24:ef:6b:b3:05:
df:84:9e:53:9c:8a:fb:0d:44:3f:dd:f5:17:2e:01:
c4:f9:35:c1:4c:8c:b7:1a:bb:7d:15:cb:3f:ac:7b:
40:6d:af:b7:ae:65:d2:d1:6d:4f:ff:d7:14:03:45:
7e:5a:7d:ba:0a:01:85:99:cb:48:46:cb:7a:ba:8b:
54:a5:76:c8:b2:2a:3a:08:59:45:1e:70:0d:71:2b:
ea:26:ca:78:a3:1c:c5:b9:7e:26:32:0a:38:63:bd:
7e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F7:A3:42:88:3E:C8:6D:16:14:C6:A3:71:20:13:02:4B:1E:DE:7F
X509v3 Authority Key Identifier:
keyid:9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a6:82:1b:32:63:69:28:df:71:1d:57:b7:32:b3:a6:53:b4:
f2:c9:cc:32:c1:ea:c0:50:67:bd:9f:06:a0:9f:22:53:d2:9d:
84:12:02:b7:16:01:da:e5:26:d6:90:bd:f3:20:c9:d5:0a:8f:
db:a1:a4:57:f9:1e:fe:41:c7:41:53:1b:91:19:3f:47:ad:4c:
30:f0:60:7d:57:68:1a:b6:78:62:35:bd:3e:44:67:a0:54:ea:
01:10:e2:3d:78:3a:a8:12:df:6e:d9:84:32:d2:e4:70:5a:41:
5c:7d:2d:76:2f:13:41:d8:95:4a:f6:82:f3:07:5c:af:72:9a:
4e:69:ff:83:40:61:a6:c0:4c:0a:c5:da:dc:72:aa:7c:2c:83:
9f:ef:dc:0a:4b:87:33:87:65:ca:59:30:55:04:e1:41:53:16:
2c:ad:d8:f7:aa:0d:86:83:e2:be:a9:b5:e3:52:70:91:7c:21:
51:ba:9f:6d:d7:42:cc:97:8b:2a:4e:99:c4:0e:e2:7c:a2:90:
09:3f:9c:50:df:97:0d:50:a3:1c:f0:b5:13:61:d4:52:59:a5:
25:f9:48:63:21:e2:f6:56:cf:a6:b3:4d:fe:8d:ad:e9:75:7f:
8e:00:31:00:9d:97:d4:39:a0:f8:45:c7:14:61:02:5a:8b:f2:
7b:d8:04:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:02 2026 by rpki-client