Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
File: NZ5FeU8Bkp_awnLCYms-guvJxd8.mft (raw, json)
Hash identifier: G2MGXDnFH6L5A27INY7xY03ka+IzMZyXZDuWl/CEhwY=
Subject key identifier: D7:D5:BE:0E:B0:66:4A:E6:0C:CA:97:2D:37:78:79:B1:59:90:74:CF
Authority key identifier: 35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
Certificate issuer: /CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Certificate serial: 019CAD5A24A587F191658B853365F11BD804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 07:01:31 +0000
Manifest this update: Mon 02 Mar 2026 07:01:31 +0000
Manifest next update: Tue 03 Mar 2026 07:01:31 +0000
Files and hashes: 1: NZ5FeU8Bkp_awnLCYms-guvJxd8.crl (hash: Ewgj71ybzo0dXX4ZtVUsQqDDg+1lXDo/gvnc0C0x/V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:24:a5:87:f1:91:65:8b:85:33:65:f1:1b:d8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Validity
Not Before: Mar 2 07:01:31 2026 GMT
Not After : Mar 3 07:01:31 2026 GMT
Subject: CN=d7d5be0eb0664ae60cca972d377879b1599074cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:0c:da:0e:cb:12:01:fd:b3:f4:6f:24:b7:
c7:48:07:aa:a3:bd:e6:ea:8e:ee:c0:eb:1b:95:63:
9a:bf:c0:88:7d:48:83:99:50:08:a1:f5:52:3a:9b:
dc:a2:c4:4e:11:30:bd:b1:b9:38:f7:87:0a:78:e0:
b9:dd:24:40:b4:cf:4e:9c:5f:9a:97:ed:e9:d8:8d:
b2:80:10:f7:7a:51:a0:55:f2:b0:47:51:29:8a:61:
e2:9e:8d:ae:73:df:b8:e5:83:3d:2d:9b:11:da:2b:
58:9e:97:0c:43:af:99:58:40:8c:00:e1:9e:df:52:
ae:9f:7b:91:e1:f1:4c:23:aa:db:b7:b4:88:62:bc:
d3:98:e0:66:04:aa:38:83:58:25:d2:59:02:c0:75:
9e:ac:3e:52:46:a2:60:7f:69:f0:38:41:e1:3f:d8:
11:d7:23:0b:16:7a:dd:0b:07:a5:1d:ba:4b:79:3d:
8d:55:5c:5c:7e:db:20:21:22:30:93:b9:d9:c2:39:
40:2d:6a:4b:e3:cb:c8:5d:ea:dc:eb:da:4f:e8:09:
4c:8c:24:6d:4a:3d:42:07:cd:9e:8c:83:c0:bd:f9:
de:ca:ae:91:73:28:50:27:c7:f6:d5:75:24:7e:00:
fb:2c:15:67:23:da:97:bd:a9:fc:58:8e:8a:30:66:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D5:BE:0E:B0:66:4A:E6:0C:CA:97:2D:37:78:79:B1:59:90:74:CF
X509v3 Authority Key Identifier:
keyid:35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7a:f3:3a:76:b2:5c:58:bd:f3:ab:c3:1f:42:b2:d1:b4:2a:
e4:00:2b:4c:cc:e3:2f:12:19:77:70:47:18:93:bb:f6:03:c0:
37:e3:eb:4c:91:76:5a:9b:c9:62:d6:3b:e8:0e:ea:95:70:da:
a7:fd:35:ff:f0:02:4c:2b:17:0a:13:c9:e0:7d:45:7e:57:d5:
21:12:89:47:df:00:37:9d:d4:c5:d9:93:01:cf:a6:1a:23:7e:
ea:07:21:ec:df:3d:fc:8c:2e:16:d3:eb:56:d6:26:f5:4e:5c:
9c:aa:ef:f2:4d:8a:03:81:9a:50:a1:fa:18:93:18:ba:a8:c4:
86:47:18:88:35:e1:5a:a7:09:db:42:5d:af:6d:55:4a:7e:12:
9c:92:09:6c:b7:36:a0:c2:a1:dd:a9:28:39:b1:74:ce:a9:4e:
ea:82:42:56:20:bf:e8:a4:98:b7:49:75:2d:a9:26:04:a3:da:
3a:82:aa:10:ec:37:0f:f1:e5:51:ae:00:65:2a:54:d9:6a:e9:
95:9e:a7:d7:f7:47:e0:1c:e8:48:c8:72:af:d5:e9:a8:70:ac:
43:e5:e2:ad:08:42:82:b7:86:e5:03:1e:a2:bd:e0:3c:a1:b8:
c3:07:9b:f4:f7:0c:2e:39:fc:84:0a:35:e3:b4:5c:70:a7:ba:
a6:6d:d8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:06 2026 by rpki-client