Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json)
Hash identifier: cS2kxGH5/TZm6SAQi+w4e9cZPhhaBDR9PywfMCrMDNw=
Subject key identifier: 17:61:B3:32:95:97:0D:AD:B9:BC:F1:91:62:DC:72:1F:2F:12:BA:83
Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Certificate serial: 019CABD938FC0C53E445D685E745EDBB4CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
Manifest number: 0898
Signing time: Mon 02 Mar 2026 00:01:05 +0000
Manifest this update: Mon 02 Mar 2026 00:01:05 +0000
Manifest next update: Tue 03 Mar 2026 00:01:05 +0000
Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: Y7Gz+b6gHvG6tNgmZ7PDaDVcrxDQe/rjR8+wrvHcz+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:38:fc:0c:53:e4:45:d6:85:e7:45:ed:bb:4c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Validity
Not Before: Mar 2 00:01:05 2026 GMT
Not After : Mar 3 00:01:05 2026 GMT
Subject: CN=1761b33295970dadb9bcf19162dc721f2f12ba83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1d:ed:26:5d:b2:58:7c:e9:17:1f:36:00:94:
28:1c:a9:13:66:04:87:53:f6:7a:ea:63:00:de:aa:
34:9d:65:00:bb:aa:45:84:bb:22:d0:44:06:af:80:
bc:9b:e1:a7:61:86:04:fb:c4:14:e6:d2:b0:c1:8c:
dd:87:d9:51:be:9a:86:ce:46:91:d1:62:ba:27:94:
4e:b1:60:34:94:b2:69:a8:f8:2a:f2:35:4e:1d:8f:
fe:73:e6:73:84:01:cf:4b:19:4a:d4:91:70:0f:6c:
5b:db:ea:9d:ba:6b:be:32:b5:fd:62:9a:07:ff:57:
de:4b:e3:b4:10:49:cd:24:bc:4b:0e:5f:ba:aa:cb:
0c:8e:9e:00:4f:0e:ef:6b:03:da:79:de:a7:c6:df:
69:6a:d4:6b:94:10:76:a9:fb:31:c1:93:55:01:6d:
39:37:8a:51:7c:18:45:7d:cb:7d:92:81:2a:4d:2c:
9d:9c:2f:ec:e9:e1:94:46:8d:be:c8:5b:94:50:cc:
67:92:a3:d6:e7:b4:d1:38:8a:bf:4f:72:fc:15:7b:
c4:a5:df:60:96:af:02:59:9f:67:c0:19:8d:14:ca:
db:1f:7c:b5:1b:4e:a1:d1:ef:07:2d:5d:92:91:07:
c2:39:5c:68:86:bc:d5:c6:b7:7c:8a:44:c7:f3:5a:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:61:B3:32:95:97:0D:AD:B9:BC:F1:91:62:DC:72:1F:2F:12:BA:83
X509v3 Authority Key Identifier:
keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ec:87:24:16:f7:5a:07:e6:f6:f9:bf:ee:99:69:85:97:63:
ea:46:5d:94:81:90:08:56:11:c1:c7:32:ee:69:25:30:6a:96:
75:1c:f1:f6:81:70:bc:0d:bf:30:76:2b:2f:1f:cd:8b:fd:ec:
b3:44:45:5f:95:ab:56:7e:7c:23:93:9a:ff:03:01:67:ba:c7:
71:13:72:0d:a0:c9:29:5c:64:29:f3:ab:06:ee:11:e3:ba:7f:
a1:9b:3a:5c:4e:27:51:fe:f3:40:9b:25:dd:36:b1:e5:84:97:
42:6c:3d:e4:85:80:57:0e:42:9e:54:fd:31:14:17:5d:8b:8b:
54:2a:81:d0:6b:06:ff:a0:7f:7a:8a:d6:5a:a1:c2:21:9b:d2:
cd:56:1b:81:c0:59:89:9e:5c:af:56:9d:1b:5d:dc:78:7b:9b:
b5:7e:ee:1f:24:97:14:48:72:75:b5:24:7f:88:b4:51:f8:82:
c4:e2:1b:4d:91:01:ee:2c:98:7d:dc:e4:75:29:59:e0:79:b6:
fa:6c:32:20:90:a5:04:de:5e:2b:a3:f0:05:23:b7:be:b2:0e:
d7:b6:20:12:1a:e9:e3:89:b4:b0:ad:78:06:1b:6e:8c:17:c3:
bc:72:ab:7e:01:8e:12:44:bf:6a:47:c0:c4:b8:07:e7:e6:ea:
f3:78:5c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:33 2026 by rpki-client