Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
File: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft (raw, json)
Hash identifier: 2oIFLZPsHQihwWGDcN3U+vNex62WAK+SbuA0I9xVP6E=
Subject key identifier: 36:AB:45:3E:14:B6:39:2A:8F:A6:78:4A:6D:CA:56:FD:7A:93:68:95
Authority key identifier: 36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
Certificate issuer: /CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Certificate serial: 019CAC4742586B2086CD76518E4F68A2296F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
Manifest number: 1252
Signing time: Mon 02 Mar 2026 02:01:16 +0000
Manifest this update: Mon 02 Mar 2026 02:01:16 +0000
Manifest next update: Tue 03 Mar 2026 02:01:16 +0000
Files and hashes: 1: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl (hash: wzCIS0BC68XZW4tQGUh81ChYdhH7xcWz7MhF+a7md7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:42:58:6b:20:86:cd:76:51:8e:4f:68:a2:29:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Validity
Not Before: Mar 2 02:01:16 2026 GMT
Not After : Mar 3 02:01:16 2026 GMT
Subject: CN=36ab453e14b6392a8fa6784a6dca56fd7a936895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:29:38:25:b5:31:ee:b8:4e:c0:9b:34:46:
ce:7c:f3:a2:d0:0f:2a:67:63:a6:d4:03:b5:4f:b3:
60:fb:f8:cc:69:86:71:d8:04:a2:f8:e9:d8:0a:e9:
a9:bd:a2:0b:4d:14:70:6a:d6:f4:c2:6a:76:f9:00:
15:6f:c1:7f:e8:a0:51:c8:0b:5f:eb:6c:31:19:5d:
6a:c0:e0:9b:48:a1:a5:04:95:1b:13:d8:e6:69:c5:
8e:18:65:31:d1:d1:3e:76:9d:e5:c9:72:95:35:4d:
a3:28:be:f0:1f:7d:e4:41:cf:8f:0f:4e:d0:03:f2:
a3:fa:ca:b1:d3:0b:35:f5:ba:e4:68:e6:38:73:a7:
e3:a8:e6:10:70:57:b3:db:0a:5b:96:b8:e8:a3:b6:
65:3f:71:9d:a6:10:c7:d6:4f:d1:bc:6c:59:ec:12:
8a:02:c9:dc:0c:b2:66:63:31:8e:6c:11:7d:73:5e:
0b:4b:7d:ef:12:2f:8d:90:5b:c1:47:d3:b2:a9:70:
a3:66:37:cb:e4:6a:55:ac:60:12:24:25:2f:ea:cc:
f1:19:aa:19:94:cc:0d:f9:bc:a6:39:b0:b7:73:e8:
c1:a2:9d:2d:63:37:4b:42:87:4a:fa:cf:99:c3:a6:
5d:66:f6:a1:1f:08:00:b0:ac:24:39:77:c5:e9:95:
c9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AB:45:3E:14:B6:39:2A:8F:A6:78:4A:6D:CA:56:FD:7A:93:68:95
X509v3 Authority Key Identifier:
keyid:36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c6:0b:4a:0c:bc:c2:11:8d:35:ec:3b:bd:58:24:0e:97:37:
28:d4:1b:de:05:7b:2c:d5:60:2e:6a:90:ac:36:c2:fe:ba:08:
5f:ac:c6:87:dc:ed:67:da:b1:b1:65:29:04:50:3f:5a:a3:c7:
bf:04:98:ac:f9:53:30:58:62:99:6c:95:5d:02:fb:5c:35:bd:
1a:58:62:fd:bb:b6:e7:c4:19:e6:dd:cb:da:8b:bb:fa:d8:a8:
01:40:3b:af:60:10:f7:9f:0a:35:78:1e:46:43:ad:74:19:11:
57:be:13:e4:62:6b:da:75:a3:e1:1d:0c:b9:ce:50:53:36:a5:
39:2c:96:c7:d9:68:72:c9:0a:c6:81:a7:b9:04:75:79:4b:8b:
c6:5f:13:64:35:5f:2a:9b:59:70:0e:05:eb:11:36:1b:b0:eb:
35:df:9f:38:0a:c4:aa:75:47:2b:04:63:eb:02:eb:c9:02:86:
7e:e5:2f:98:c3:72:3d:0c:80:ee:d2:20:7a:86:e7:d4:f8:3f:
8c:2c:3f:77:28:c1:ff:e8:0e:29:5b:dd:09:48:8e:c1:af:0e:
96:81:91:15:f9:a3:68:44:c6:77:1d:82:fd:08:1d:fd:13:ff:
ff:ac:4d:04:31:48:cd:2f:3b:9e:1d:88:5a:c2:4b:0a:fe:f6:
d4:23:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:43 2026 by rpki-client