Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
File: nD_Ua11gbBzKtVixc24mIaS8BAM.mft (raw, json)
Hash identifier: 0RfwcW8oYW1yxdJ2eVJJOAjBjUia4L35GreWlvilkSo=
Subject key identifier: E3:1B:07:77:C6:48:9B:B4:34:6F:25:45:D2:1D:E6:EC:E6:13:54:EE
Authority key identifier: 9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03
Certificate issuer: /CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403
Certificate serial: 019D9B19813D292E5D3E873346DE8F3F6837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
Manifest number: 0B4F
Signing time: Fri 17 Apr 2026 11:00:33 +0000
Manifest this update: Fri 17 Apr 2026 11:00:33 +0000
Manifest next update: Sat 18 Apr 2026 11:00:33 +0000
Files and hashes: 1: nD_Ua11gbBzKtVixc24mIaS8BAM.crl (hash: 26Kpe0TEHaIzR6mKA3EdkpPK1PIUiGpF+2t6jGdASAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:81:3d:29:2e:5d:3e:87:33:46:de:8f:3f:68:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403
Validity
Not Before: Apr 17 11:00:33 2026 GMT
Not After : Apr 18 11:00:33 2026 GMT
Subject: CN=e31b0777c6489bb4346f2545d21de6ece61354ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9a:5c:31:4b:8a:19:d0:97:85:7a:af:33:1b:
c1:49:4f:04:f7:a4:2d:45:1c:19:98:b8:b1:71:6f:
56:eb:cf:9e:2b:38:63:25:21:f1:da:fc:0e:ed:d0:
b8:26:8e:5e:b7:35:a1:51:9f:62:8b:79:eb:98:c5:
32:79:37:68:6f:f5:83:32:61:31:5e:a1:fb:fc:16:
24:22:17:7c:c9:e5:3e:99:29:1c:14:5c:ad:ba:77:
69:21:7e:c0:67:1d:e8:3d:35:38:83:1e:76:03:7d:
51:8c:9d:85:7c:8b:93:97:d3:09:13:5a:40:47:3f:
d5:02:49:16:5f:85:5a:88:41:ff:c1:11:6f:9f:15:
53:d3:0f:46:b3:f4:5d:da:ca:e6:0e:5d:db:d0:7e:
d1:0b:e9:0f:6f:d8:0f:15:ee:21:9a:dc:66:35:e2:
f3:ab:c0:ab:db:d4:68:02:b8:05:37:96:04:a7:e9:
85:e0:8c:92:9d:2e:c4:e8:0f:b2:7c:d1:43:7f:36:
89:d4:e1:e7:d9:4c:6c:ac:8d:05:97:b1:d0:f1:24:
5d:64:a9:44:85:58:58:0b:40:f7:4f:12:8c:bf:c7:
4f:f2:83:eb:a2:04:af:5c:ad:19:c5:c1:cd:02:ca:
70:f0:40:10:52:6a:06:e5:68:9f:6d:ff:c8:da:bc:
02:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1B:07:77:C6:48:9B:B4:34:6F:25:45:D2:1D:E6:EC:E6:13:54:EE
X509v3 Authority Key Identifier:
keyid:9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a6:58:03:c1:13:b6:11:79:a6:37:89:d6:d1:ab:55:a9:68:
c9:cb:d5:7d:f9:38:38:65:f4:39:2a:db:e7:98:b0:e3:0d:56:
00:53:ae:eb:5c:a7:29:da:31:45:16:aa:e0:4f:6a:c0:6c:3b:
01:bd:94:a1:51:f9:aa:52:b7:37:1e:52:54:d3:ab:74:dd:92:
f2:bb:d3:f3:9f:2b:9c:e2:10:45:01:59:d1:77:ee:af:f7:b0:
6f:2a:06:27:8d:67:f5:83:dc:20:87:d7:ae:49:23:34:97:62:
38:95:83:53:6b:0a:b7:9c:6a:da:a0:75:5c:8e:c9:87:25:98:
5f:df:4c:d8:f4:34:95:95:1a:52:0c:85:62:e6:4b:1d:cb:ae:
96:04:48:95:b4:c6:bb:b5:8c:d6:52:e3:be:f3:6a:99:0b:a9:
30:cb:f1:a0:c9:13:b5:1e:ef:ab:10:82:b8:56:69:7d:40:2c:
86:5b:e4:40:cd:d2:2a:c2:12:00:08:70:af:1d:01:98:5a:08:
46:86:ee:f0:e9:b3:30:bd:8f:89:f7:5e:42:b0:77:18:29:1d:
35:29:00:69:89:bf:7c:74:3b:de:fa:48:ad:ef:2f:3e:09:fa:
a3:b3:a5:d0:4f:42:13:a8:90:29:22:87:98:38:05:6c:43:1f:
39:5b:6a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:47:36 2026 by rpki-client