Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
File: nMHPS2otJ73LJqeD6Ddu5uspX9g.mft (raw, json)
Hash identifier: QhUWr3d0BIV2I+Y8FVfaunlX9ZOpZFui5ydCz70PPdk=
Subject key identifier: 32:D7:8F:CC:31:48:6B:BD:32:D2:29:8F:34:63:8F:71:39:ED:40:9C
Authority key identifier: 9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
Certificate issuer: /CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Certificate serial: 019CAB6B63170243B7E1994C31C2EF90369D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
Manifest number: 0E6F
Signing time: Sun 01 Mar 2026 22:01:07 +0000
Manifest this update: Sun 01 Mar 2026 22:01:07 +0000
Manifest next update: Mon 02 Mar 2026 22:01:07 +0000
Files and hashes: 1: nMHPS2otJ73LJqeD6Ddu5uspX9g.crl (hash: Zu1cDrY+gQzD7did5F9MyTi3jeelCy7E2wHOq14MeKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:63:17:02:43:b7:e1:99:4c:31:c2:ef:90:36:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Validity
Not Before: Mar 1 22:01:07 2026 GMT
Not After : Mar 2 22:01:07 2026 GMT
Subject: CN=32d78fcc31486bbd32d2298f34638f7139ed409c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:a8:ba:02:ea:28:5f:ed:0b:c6:47:ac:0a:
2c:bd:86:4a:29:7a:27:34:e3:11:02:31:cc:ae:e1:
cc:f9:57:a4:b9:85:f9:b5:25:a6:07:58:65:dc:28:
ac:0b:5c:a8:6d:18:72:9b:02:e0:24:4a:69:44:c4:
93:59:3e:d4:fc:c0:ff:f0:df:7f:eb:60:83:d0:56:
67:5f:a9:98:85:f2:59:71:3e:c2:20:e1:eb:15:48:
72:ac:40:08:7f:9c:b7:e9:78:fb:25:96:09:b9:00:
ec:5b:f9:f6:e1:fc:a1:36:95:a2:c2:50:8d:4d:70:
62:2e:64:f5:34:0f:f1:51:53:de:d3:9c:dd:10:e5:
f7:23:df:bc:6d:0f:18:38:6b:b3:9d:23:eb:56:ff:
02:8b:6d:55:1b:fc:10:6a:a2:d7:7e:06:f3:0a:9b:
49:a4:49:57:12:52:e0:3b:53:64:7b:6b:45:6e:ab:
93:33:54:e1:0a:b8:a5:04:8f:07:16:36:10:03:11:
f0:73:e8:24:37:80:00:bd:12:cf:a1:24:2c:b7:6c:
e6:1f:8b:e6:56:9c:af:7d:0a:58:32:9b:63:ba:02:
3f:3f:b1:d0:8f:a9:b5:9c:6d:39:9b:8b:7d:d9:be:
a3:16:14:c8:e6:63:e4:38:65:6c:ca:f5:f3:47:4d:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D7:8F:CC:31:48:6B:BD:32:D2:29:8F:34:63:8F:71:39:ED:40:9C
X509v3 Authority Key Identifier:
keyid:9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:56:b4:c7:53:28:de:3e:7c:1e:20:1b:0d:98:3a:38:99:f6:
2c:63:cc:09:0a:f6:40:06:a6:4e:b7:cb:65:13:0c:80:05:71:
46:c6:57:4c:72:a3:16:32:e4:66:d4:c8:9a:a4:c1:b0:c6:68:
09:58:d0:f8:17:fe:3b:a5:e6:10:b9:e8:85:aa:cf:8c:0f:be:
4d:5d:76:d3:40:10:8b:d3:a2:7a:ed:c7:80:e8:bc:48:94:df:
96:da:fc:f6:f5:47:92:0b:ae:71:7f:87:4d:cc:ed:af:65:e6:
0d:01:b5:87:9d:3d:d1:c8:0d:7d:db:cc:ba:83:80:d0:0b:dc:
f5:33:af:78:14:db:ed:be:0c:04:da:68:94:2e:e8:b9:b7:14:
f2:e9:f1:40:ff:bd:83:45:f1:27:1a:2e:a7:ba:6c:c8:9e:53:
fb:c2:85:3e:d1:0f:20:a4:cc:74:e2:c5:fc:5f:ad:84:ac:77:
7a:a9:51:57:d0:96:08:b1:2b:f5:48:6e:27:a0:1d:7b:d1:86:
61:12:a6:25:8c:02:53:f3:1e:2f:8e:09:fa:1b:3e:bb:a7:db:
4c:0c:6e:c2:58:8e:c9:11:34:ff:5c:4b:91:c9:91:8c:f4:69:
ae:bf:53:9d:70:6d:43:5a:1b:44:0b:d2:59:7f:dc:7a:c9:e8:
c8:57:6c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:31 2026 by rpki-client