Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
File: nEbB13YgBThO2FJs-hx0llZPUNM.mft (raw, json)
Hash identifier: +aWuri9I3hLyrhM2k3SaFmDiXwnSh8L1LGdcrFavKGk=
Subject key identifier: 9D:D0:70:45:DF:7D:0A:04:69:5D:CB:29:A1:35:FB:DD:C1:A5:A3:5C
Authority key identifier: 9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
Certificate issuer: /CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Certificate serial: 019CAC475BB3B106FE5C03CE27CC18811D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
Manifest number: 06DF
Signing time: Mon 02 Mar 2026 02:01:23 +0000
Manifest this update: Mon 02 Mar 2026 02:01:23 +0000
Manifest next update: Tue 03 Mar 2026 02:01:23 +0000
Files and hashes: 1: nEbB13YgBThO2FJs-hx0llZPUNM.crl (hash: sGaKClt8CwjaUvdDRmhldLJcFeWKLGJ/ZxiQnbg0r9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:5b:b3:b1:06:fe:5c:03:ce:27:cc:18:81:1d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Validity
Not Before: Mar 2 02:01:23 2026 GMT
Not After : Mar 3 02:01:23 2026 GMT
Subject: CN=9dd07045df7d0a04695dcb29a135fbddc1a5a35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:e4:5e:0e:32:02:ce:8d:bb:c6:66:7d:4c:
5a:82:c1:b2:41:dd:94:09:04:9c:1b:3e:b8:fa:10:
96:e8:f6:79:c6:28:c2:93:55:73:08:35:70:2c:33:
d4:3e:76:f7:d3:a5:5b:fd:8d:14:f9:5f:6c:e5:35:
a4:50:60:19:c6:06:ad:7e:08:63:cf:7c:42:98:85:
30:d5:0a:c5:24:8b:d1:32:b9:1a:5c:f4:83:ad:bd:
2f:dc:4b:42:71:da:99:ae:b1:72:1b:5a:15:c3:7f:
9d:24:b7:99:07:33:85:e9:d0:56:d7:12:14:77:f3:
a7:83:93:a2:ae:a9:30:bb:62:09:9d:69:56:82:3c:
02:cb:7e:b9:ed:50:2c:7e:29:b5:66:91:3e:69:7e:
89:67:59:59:91:23:d1:77:69:c6:c2:e2:71:ec:bd:
97:19:96:90:41:d0:cf:69:a8:ab:f7:b4:f7:83:0d:
0c:bb:8a:3d:31:eb:2d:e2:0d:aa:67:0b:76:f7:2f:
c0:78:9e:23:73:3f:b4:6a:79:d5:fd:97:8c:fd:56:
a0:7c:40:5b:91:5f:23:16:67:11:71:28:e1:9a:7b:
18:25:1a:0e:66:84:df:30:1b:08:ea:10:1c:c6:24:
36:81:4a:13:4a:d1:a7:31:52:bc:09:4c:f5:94:cb:
91:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D0:70:45:DF:7D:0A:04:69:5D:CB:29:A1:35:FB:DD:C1:A5:A3:5C
X509v3 Authority Key Identifier:
keyid:9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:80:8f:f3:b5:71:40:96:c1:b3:82:3f:4e:af:00:fa:ab:90:
b4:c7:ab:be:fb:79:3b:61:81:e3:e7:3e:16:0d:7e:6a:c5:87:
6b:90:29:71:d6:9b:cf:97:8c:08:5f:af:83:d0:8d:2d:cd:19:
65:04:d4:2b:fa:23:a5:d1:8c:80:e6:73:31:33:de:95:a2:55:
00:e7:49:04:fa:7e:f7:01:0d:49:5c:0e:9c:21:f5:79:67:51:
4e:90:7a:e7:84:6a:83:94:6e:83:66:68:8f:c7:b5:d9:e6:8a:
26:4a:f7:61:e5:74:ce:94:00:64:7f:b3:69:28:fc:09:52:70:
0f:75:bd:46:1a:ea:8c:6f:f7:ba:b7:55:b2:d5:b5:b6:04:37:
d0:81:e0:57:a5:78:b6:13:a7:2b:11:cf:df:41:8a:8e:e0:03:
76:49:41:7f:d4:52:7c:ba:21:4a:bf:ea:01:d6:99:d9:bd:a7:
e5:c9:16:07:5c:f1:06:9e:0c:8a:6d:bf:6d:ab:94:9b:68:42:
43:8f:d6:6c:93:8f:42:0d:0c:96:c1:1e:f0:1d:b1:6d:0c:17:
ae:f5:da:a2:1a:95:62:66:ce:1d:29:37:06:c7:84:80:56:e6:
dc:39:da:e4:a3:81:4a:05:ce:e5:f7:0f:47:ba:07:90:80:67:
a8:c2:22:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:38:06 2026 by rpki-client