Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File: NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier: EI1KcaVPbzmHAKEWVe/kEipYlDRg6Bv0KIL4JISR9Z4=
Subject key identifier: E2:E3:00:4D:D9:C0:B4:A6:E6:DF:10:F1:2B:62:EF:4D:37:C4:B2:A9
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer: /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial: 019CAD59514C4DF5DB11A3565E11CA416514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number: 0E88
Signing time: Mon 02 Mar 2026 07:00:37 +0000
Manifest this update: Mon 02 Mar 2026 07:00:37 +0000
Manifest next update: Tue 03 Mar 2026 07:00:37 +0000
Files and hashes: 1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: JXxK4LA1RX4tDUALO5HST7gvlJH+GfvDtuPgXunwPE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:51:4c:4d:f5:db:11:a3:56:5e:11:ca:41:65:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Validity
Not Before: Mar 2 07:00:37 2026 GMT
Not After : Mar 3 07:00:37 2026 GMT
Subject: CN=e2e3004dd9c0b4a6e6df10f12b62ef4d37c4b2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fa:2e:57:7d:d6:9a:aa:eb:9f:fe:0a:00:f4:
b6:46:b8:29:22:52:06:1a:68:f6:13:72:e6:1c:cb:
94:57:db:7a:5b:1f:e9:14:fe:49:eb:66:54:97:ba:
25:45:a2:29:48:2d:7e:e0:eb:c7:e9:e1:39:59:8e:
24:9e:f0:ca:0f:bd:2e:50:1d:7f:23:75:03:c4:5e:
ad:0e:f7:ce:7e:f4:0e:6b:01:fa:36:9b:e6:7e:32:
de:0a:a4:71:e5:2f:7b:0a:fb:ce:15:37:55:38:65:
cc:b7:68:58:d4:fb:86:af:2d:61:0f:b8:52:3d:e0:
a9:d5:da:56:e9:38:e0:da:b9:ee:20:28:f6:e4:f9:
c1:f1:31:94:04:78:81:5e:39:81:7c:57:af:1d:20:
44:39:bf:18:e4:cf:e6:21:6e:8d:53:ad:bb:8a:3c:
5d:c7:96:e6:6f:df:1a:1d:f6:31:9e:f9:b3:82:0d:
d3:e2:ce:5f:c1:8f:94:29:b0:96:ba:6d:3b:b6:8a:
4e:73:66:57:2d:39:2f:0d:e2:e8:54:09:96:65:42:
81:5a:f2:c4:b3:cb:6a:1a:aa:c4:c6:bf:74:ad:11:
2b:70:7a:d8:0b:ac:87:7f:99:35:8d:da:de:f5:6e:
77:25:85:6d:a8:c7:4b:cd:58:58:b4:e9:56:a6:3f:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E3:00:4D:D9:C0:B4:A6:E6:DF:10:F1:2B:62:EF:4D:37:C4:B2:A9
X509v3 Authority Key Identifier:
keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f8:6b:47:97:94:62:05:18:82:09:2d:2c:d4:d6:45:09:e7:
b8:e5:5b:12:78:b7:6e:c6:c1:e3:07:d1:2f:eb:ab:11:75:d5:
44:d7:8d:7a:f9:ba:a0:32:0b:18:c0:6e:ff:48:b5:13:23:53:
e6:87:ba:86:8e:29:7f:b7:49:91:1a:c2:f1:b1:23:e7:46:1d:
ea:d3:4c:7e:df:05:6d:e0:0b:44:ec:8b:c2:86:8f:8e:21:5f:
20:4b:f8:15:e0:18:41:c2:c6:14:89:0e:2c:64:8e:9a:13:fe:
27:91:db:ab:36:89:ef:1b:a5:c4:62:5e:45:a0:b6:2c:f5:94:
0a:9e:7d:b6:3e:ed:13:af:f2:b1:78:45:88:2b:35:56:38:a4:
29:ee:c9:78:fe:6d:02:9d:99:05:89:60:3e:94:61:37:f4:6b:
0a:2f:b2:8d:b5:87:a5:bc:11:66:ad:b5:46:21:39:48:30:61:
9b:7e:dd:d7:c5:97:20:40:75:2c:15:a9:0a:cf:17:f0:c5:76:
54:c1:c1:7a:af:80:fc:af:91:b3:c9:61:cd:5b:9f:29:a9:c2:
69:1e:bf:b8:e8:36:3e:14:a9:3f:01:91:72:87:a3:dc:2e:6e:
af:cd:71:68:34:c8:fb:89:a1:fc:56:3f:c1:e1:c7:ba:a9:ff:
38:21:11:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:19 2026 by rpki-client