Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File: Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier: YybGwNKxlLRSVzhOYEj2SUgmSSvu/+dG6GZbrzFF2c8=
Subject key identifier: 4B:FA:E6:21:05:0C:AC:E6:D8:54:42:BE:D8:9A:3F:5F:32:1F:B5:EF
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer: /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial: 019CABD918AD0DE3C904E99D6B8065FFF04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 00:00:57 +0000
Manifest this update: Mon 02 Mar 2026 00:00:57 +0000
Manifest next update: Tue 03 Mar 2026 00:00:57 +0000
Files and hashes: 1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: 3gCHOtgrIqM6KiIc+ksqnIKe5Kmf5GV9cXX8AxLjyE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:18:ad:0d:e3:c9:04:e9:9d:6b:80:65:ff:f0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Validity
Not Before: Mar 2 00:00:57 2026 GMT
Not After : Mar 3 00:00:57 2026 GMT
Subject: CN=4bfae621050cace6d85442bed89a3f5f321fb5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:14:14:99:9d:2d:c2:f1:96:b8:88:1b:40:df:
92:aa:da:15:36:31:32:8c:c1:b4:2a:f0:a0:8e:e3:
47:9b:d1:c8:e4:ee:e1:a7:58:ab:2f:6f:9e:46:e4:
69:36:fc:84:39:51:56:2e:3d:79:3b:14:10:bf:d8:
fc:b6:70:71:ba:db:31:6b:bc:a6:23:9e:bb:98:69:
3e:20:0b:c5:b9:98:7d:0e:a0:a7:d1:6d:96:4e:56:
46:fc:78:e1:0e:ae:0b:b8:74:ad:f4:c8:0a:d1:94:
11:70:b9:fb:0c:ab:2b:93:af:ec:ce:ff:0f:f3:f1:
32:57:c8:0b:e5:56:d7:e0:d4:f0:87:79:3d:0a:2b:
b5:0b:f2:bb:ff:75:18:96:06:42:97:77:00:93:45:
29:31:56:9c:25:64:73:7a:a1:7d:af:57:85:ee:96:
13:76:9c:c2:ca:87:fa:3e:ea:d0:75:dd:10:dd:36:
ef:18:b8:32:a0:75:5a:60:d7:67:a1:b2:1e:73:df:
c6:2d:2f:30:3c:fb:05:3c:05:5e:f4:4c:65:e9:a3:
57:7e:5b:36:6a:a1:5b:03:60:b4:39:a6:27:57:dd:
fa:df:8b:8b:03:50:26:e5:0d:33:fc:5b:62:09:a7:
bd:9b:0f:ae:37:66:58:6a:2b:4e:62:af:b6:60:bc:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FA:E6:21:05:0C:AC:E6:D8:54:42:BE:D8:9A:3F:5F:32:1F:B5:EF
X509v3 Authority Key Identifier:
keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:32:7a:76:84:3c:2b:41:d8:6c:bd:52:6d:86:e6:d7:21:1e:
6f:dc:aa:4f:8b:fe:a8:6e:e4:fc:5c:7f:1a:5a:9a:8c:f2:56:
33:c5:ee:42:cd:6f:39:b7:e3:c1:a5:46:d3:f8:9c:3f:e1:54:
f7:b8:d1:61:c5:74:dc:21:b9:36:d6:0e:dd:7c:bc:de:69:59:
55:d9:5a:d8:b7:f7:8e:a3:8c:6d:f9:be:16:f4:3e:c0:99:3a:
b8:67:98:90:32:ad:29:67:a1:59:93:ba:5f:f5:2d:b1:5b:69:
ef:cf:d6:2e:d7:89:25:99:f7:00:d4:a4:b1:cc:da:c6:41:cd:
08:92:e6:77:7b:42:07:95:10:53:0a:9e:e7:e5:a3:16:e3:86:
6e:ac:21:9b:fc:b2:42:18:bd:a2:1a:5f:5a:6d:2d:f6:e1:53:
af:a0:30:22:ac:d3:07:ec:d0:1d:ba:63:bd:22:ea:c6:58:25:
25:bf:e1:1f:1b:e9:6e:e4:3f:bf:97:c7:df:6d:1b:eb:ed:46:
d5:2a:5f:f0:f5:49:39:b9:e9:f8:c1:29:03:15:a0:ca:fe:d7:
71:a7:10:a1:e2:76:9d:a5:67:d4:4e:5d:fb:0d:24:6d:f5:03:
c9:de:20:d1:4f:7f:c0:86:af:9b:9d:66:c3:e6:98:eb:10:db:
c4:d6:5e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:03 2026 by rpki-client