Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
File: NZ5FeU8Bkp_awnLCYms-guvJxd8.mft (raw, json)
Hash identifier: WH97NsVnPkKY8JebWmpe8ZKV0yLh79QA12lLHaYL2UE=
Subject key identifier: 50:80:EA:7B:8D:A8:CA:E1:2D:24:70:4C:20:3B:DA:2B:BE:E9:82:6D
Authority key identifier: 35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
Certificate issuer: /CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Certificate serial: 019D9AE346B5591E99EFDA04D980017A4C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 10:01:19 +0000
Manifest this update: Fri 17 Apr 2026 10:01:19 +0000
Manifest next update: Sat 18 Apr 2026 10:01:19 +0000
Files and hashes: 1: NZ5FeU8Bkp_awnLCYms-guvJxd8.crl (hash: oIQO+h6/lt6z87JV/SIdCQ6JfQidJyc0L5Y5a08R7OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:46:b5:59:1e:99:ef:da:04:d9:80:01:7a:4c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Validity
Not Before: Apr 17 10:01:19 2026 GMT
Not After : Apr 18 10:01:19 2026 GMT
Subject: CN=5080ea7b8da8cae12d24704c203bda2bbee9826d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:bd:79:aa:6b:e5:bf:fd:ca:a0:03:ec:d3:
dc:ea:4f:f7:0b:f4:c4:ab:cd:55:f3:bd:87:70:9e:
1c:3b:17:a8:6f:3f:42:ec:d2:68:12:4d:82:85:19:
f3:66:f7:63:b5:63:2c:36:4f:99:ab:ec:b6:97:22:
31:61:b3:fd:04:d1:80:f2:22:f6:2d:d8:43:75:70:
9e:c5:37:03:c2:11:da:c9:d4:06:74:5b:f0:46:8a:
11:8f:3f:91:b5:30:eb:c5:11:65:ec:9d:c6:74:85:
f2:b4:d7:ac:28:c0:db:e8:f0:30:72:b7:53:fe:0e:
91:a4:f4:ab:be:e5:ad:a4:5a:e0:d6:87:cc:29:74:
55:6c:63:9d:fc:d9:32:c4:5d:82:a8:98:31:a1:2f:
98:b5:6b:a9:5f:68:73:cd:c1:b3:02:59:ff:80:a8:
91:a1:42:97:ca:6a:33:41:3f:a3:d9:71:53:b5:04:
06:bc:af:ae:50:15:28:ee:94:b5:cc:bc:37:b3:69:
70:39:50:11:71:9b:84:3a:b2:ce:9f:46:77:ad:dc:
1a:72:2a:50:b9:ca:c8:e7:e3:ed:ba:eb:32:5a:11:
38:f8:b0:31:08:83:95:53:34:a0:c2:80:d1:42:a0:
66:6a:98:ca:67:e4:e6:d4:cf:0d:5e:82:f7:76:4b:
dc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:80:EA:7B:8D:A8:CA:E1:2D:24:70:4C:20:3B:DA:2B:BE:E9:82:6D
X509v3 Authority Key Identifier:
keyid:35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c8:cd:80:85:aa:f3:f2:b9:39:f1:0e:0b:2e:f4:46:6a:68:
e1:0a:6e:1d:b3:d0:42:c6:69:90:4c:3b:0b:9c:11:92:4b:1b:
34:bf:d2:bd:a0:4b:18:15:f1:43:da:10:51:e8:b9:3d:9d:d6:
2d:98:f7:04:ac:30:91:4d:ac:94:ef:3a:6a:8a:ad:5b:1f:63:
73:69:0a:8c:5e:90:a5:ab:27:58:46:ea:d2:1b:3e:d3:6b:d2:
f5:eb:74:ff:07:f9:53:91:50:cb:db:93:1b:74:a9:ef:59:4c:
63:45:4c:f8:a6:cb:5c:79:59:e7:75:9a:89:08:08:fc:1c:f0:
21:cf:28:20:95:13:cb:d6:81:2a:67:ae:15:4b:31:b4:42:58:
03:93:eb:60:19:c1:a5:5e:fa:dd:1f:63:6a:1b:e7:fc:5b:75:
07:25:71:d0:2d:81:7b:af:1f:f8:46:55:38:a9:8e:37:5a:e6:
1f:4a:53:04:e2:de:3e:87:67:1e:1b:17:77:d0:cf:dc:e8:6a:
f8:dd:87:54:b0:36:af:56:a1:87:e2:97:dc:3d:c6:63:b1:1f:
68:a1:b7:f7:e0:5f:5d:1a:bb:92:4a:2c:cf:75:56:3f:06:39:
30:7a:b7:7f:94:bb:4e:bf:dd:a3:61:81:03:a9:48:c7:63:18:
9c:a2:4c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:59:15 2026 by rpki-client