Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File: Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier: vU4cSWFgXIv4GddWCzxD/46sy5FraqdgpyBM4zzPPx8=
Subject key identifier: 0D:9B:A6:3B:6F:79:E1:48:43:81:24:B4:6C:38:79:4E:2D:05:EC:7A
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer: /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial: 019DA30AABA0B24F18330743536782122AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number: 18C4
Signing time: Sun 19 Apr 2026 00:01:18 +0000
Manifest this update: Sun 19 Apr 2026 00:01:18 +0000
Manifest next update: Mon 20 Apr 2026 00:01:18 +0000
Files and hashes: 1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: JblDrfimilCYdpgzXJrxANRUqZBWsB6PEbGN1/H2PyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:ab:a0:b2:4f:18:33:07:43:53:67:82:12:2a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Validity
Not Before: Apr 19 00:01:18 2026 GMT
Not After : Apr 20 00:01:18 2026 GMT
Subject: CN=0d9ba63b6f79e148438124b46c38794e2d05ec7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:2f:e2:3f:aa:7a:98:99:fd:02:d3:15:35:
b7:9c:a4:e4:7f:fd:4f:d0:40:e0:66:fe:33:c5:8b:
36:aa:0f:40:4a:f2:c7:f5:d3:7e:d7:6e:27:0b:83:
e6:6f:da:cb:05:2b:4e:17:be:c8:75:ac:69:c8:02:
d6:91:9e:37:f3:0a:24:aa:35:0d:7a:cb:1d:56:33:
d5:e3:28:48:f8:08:74:51:0f:d9:cb:6d:82:fd:aa:
40:19:6b:ad:b7:d6:f3:77:eb:ee:74:d5:78:9a:d9:
dd:9a:f1:01:cd:dd:39:f7:af:87:a3:ff:b9:c5:cd:
2c:09:32:d3:27:22:43:5b:bd:09:8e:17:d4:a0:ea:
a7:8e:d8:15:bd:6c:80:85:dd:4a:89:1e:a0:e4:49:
48:12:cc:b0:1a:a4:75:7b:3c:40:77:d7:0d:a0:57:
c4:b7:09:6b:37:93:d7:57:d3:9a:4d:22:57:6f:3f:
e6:6b:f0:a9:71:19:06:2f:e9:05:41:0e:f5:17:9b:
02:15:02:2a:77:1c:a5:72:46:19:d6:18:28:40:25:
3b:f7:2a:66:fc:43:bb:78:46:af:a2:63:3f:44:8c:
fe:ea:7a:ca:4b:d8:8e:e9:a4:b8:1e:26:11:58:dd:
59:3a:06:d2:75:5d:d3:da:b6:9f:57:9d:a6:c1:86:
d9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9B:A6:3B:6F:79:E1:48:43:81:24:B4:6C:38:79:4E:2D:05:EC:7A
X509v3 Authority Key Identifier:
keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b5:54:64:b0:f2:b6:7c:84:6b:33:2f:7e:9a:ec:c1:2d:f5:
7f:e5:57:42:6b:1a:66:7a:4f:14:fa:87:9a:16:7a:50:7b:ce:
ab:a1:d7:6f:41:60:fd:16:4d:47:56:e1:06:42:eb:11:1a:03:
59:1d:07:da:ec:45:38:b6:6a:65:6c:83:68:8b:27:fb:1f:2c:
7c:eb:db:b5:f5:cd:56:25:9d:77:91:48:3b:e8:e6:c3:0a:4a:
ac:63:6e:f3:64:dc:6e:92:ba:88:0a:52:a2:d0:c9:f2:36:fc:
24:6d:6f:af:05:8a:ca:61:7b:9d:69:3d:4f:07:5f:c1:e5:6c:
14:3f:28:66:6c:12:ee:c9:e9:51:88:b4:4d:37:98:74:59:73:
1e:33:7c:50:02:f9:da:dc:e5:58:30:b1:85:9c:ce:7c:a2:10:
d9:88:8c:1b:62:b5:f0:ca:33:30:d3:91:c8:6c:c3:df:1c:a9:
d6:3b:1a:21:de:4d:9a:81:e3:53:96:ee:cf:23:8d:5d:fd:a4:
6f:b4:95:58:2c:50:41:f0:32:dc:21:78:fc:b6:f6:0c:c7:19:
44:f0:83:9d:66:ec:f9:bb:da:b6:f4:d5:16:61:99:9f:4d:a5:
59:99:6c:9e:c3:28:76:ec:ea:84:d6:3f:ff:6d:6a:24:f6:3c:
0d:04:69:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:25:56 2026 by rpki-client