Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
File: nEbB13YgBThO2FJs-hx0llZPUNM.mft (raw, json)
Hash identifier: iXO35lY8dN/+5p3bSUqD07BDWsSdgLXaiypQ/GW/go8=
Subject key identifier: 8A:50:74:7D:B5:FB:64:E2:81:B0:2F:CD:9F:11:26:FD:88:4B:4B:13
Authority key identifier: 9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
Certificate issuer: /CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Certificate serial: 019D97E1705422666841B8BD3281843A1BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
Manifest number: 0759
Signing time: Thu 16 Apr 2026 20:00:26 +0000
Manifest this update: Thu 16 Apr 2026 20:00:26 +0000
Manifest next update: Fri 17 Apr 2026 20:00:26 +0000
Files and hashes: 1: nEbB13YgBThO2FJs-hx0llZPUNM.crl (hash: 1NJ1W7nHMY7j+KvkXJaCXE5N5GXpSe+9Z3DjWEdmwgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:70:54:22:66:68:41:b8:bd:32:81:84:3a:1b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Validity
Not Before: Apr 16 20:00:26 2026 GMT
Not After : Apr 17 20:00:26 2026 GMT
Subject: CN=8a50747db5fb64e281b02fcd9f1126fd884b4b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:6e:e7:57:b4:54:e4:72:a7:8b:7a:bd:34:
63:81:a5:40:a2:fa:ff:bb:ac:3b:69:ad:94:9d:ef:
5d:9d:91:89:ac:38:1b:26:1e:3d:03:2a:e3:4b:f5:
63:dc:81:d0:24:e5:9c:55:b0:d0:7d:84:f6:63:85:
66:8f:11:7c:2c:67:09:93:6a:af:e7:87:2f:73:2b:
67:7c:46:3a:c5:51:e8:fa:d8:1d:8d:19:6a:fd:45:
5e:69:ca:74:8d:d1:a8:ad:8e:ad:ce:29:12:d8:77:
f5:3b:3d:89:76:72:8b:24:d2:0b:66:b8:15:29:c6:
42:7f:0e:a4:7a:bc:50:23:d7:81:48:60:6f:fb:8b:
5c:07:33:e1:dd:16:59:83:d1:01:fd:ea:92:6a:14:
e5:2d:20:7d:9e:3a:7e:e1:17:6e:00:7a:29:a4:d4:
00:72:06:ba:91:3c:2a:4c:a9:77:1d:b9:83:55:5b:
bc:b3:18:92:7c:3b:ad:d6:1a:76:52:3b:3a:03:d5:
01:3f:ca:7d:a8:b4:8b:cc:92:53:22:ae:96:c1:ae:
1d:e0:d8:1d:d3:7e:12:ed:8a:07:4d:f9:86:28:65:
67:7b:f2:c2:ef:cf:26:49:22:cb:94:a7:dd:0f:20:
15:31:d1:78:d6:72:e0:02:8e:67:9d:85:c6:14:8a:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:50:74:7D:B5:FB:64:E2:81:B0:2F:CD:9F:11:26:FD:88:4B:4B:13
X509v3 Authority Key Identifier:
keyid:9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e2:4e:89:bc:be:a0:6c:06:59:71:76:65:10:d3:c9:6d:b3:
bb:e2:a1:25:71:86:01:25:14:6a:fc:59:c0:99:ed:83:88:88:
d6:22:41:13:d4:ff:7f:1c:16:ae:74:ac:20:fc:81:66:9b:3b:
98:08:30:44:47:dc:24:a6:b2:62:9a:e1:6d:78:54:91:2f:b4:
04:5d:4a:bc:6b:4e:6c:6c:08:6b:13:77:99:5a:01:ec:9d:14:
66:89:00:7d:f2:e8:1f:07:02:6a:f6:73:da:03:61:d8:c4:53:
32:1d:a9:d2:49:a9:ae:7e:81:f3:4d:4d:78:11:36:05:bd:76:
c6:fc:cf:d3:22:3a:50:9a:ee:d2:67:e0:2c:f6:82:0f:fb:b2:
db:75:2a:37:50:ca:83:85:89:6d:76:d3:7a:22:c3:6c:d2:5a:
4f:81:00:6b:84:b7:4a:db:ce:eb:05:7a:9e:7e:3b:8c:16:97:
b3:8e:e0:aa:3b:6c:a2:40:3a:95:40:41:5c:8c:6b:ef:aa:d4:
26:d1:dc:d1:18:4e:8e:cb:c1:46:a5:e7:31:56:03:28:f4:59:
f0:c1:d9:26:09:77:f2:11:dd:13:fa:19:c1:01:17:cb:70:98:
25:b2:00:69:aa:f4:49:b0:14:cc:4b:e0:d4:9f:82:ea:93:c0:
73:61:ab:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:23 2026 by rpki-client