Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json)
Hash identifier: Bm0Zeju7Nry03KNbD/11hAsTLHMzCjF+NSGweDB18wI=
Subject key identifier: FA:84:61:34:A6:DB:FA:8E:F0:88:A7:53:14:F1:0F:1E:28:EF:AE:A3
Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Certificate serial: 019CAD909CA19F257C8B163F004A60B41816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
Manifest number: 05C0
Signing time: Mon 02 Mar 2026 08:01:01 +0000
Manifest this update: Mon 02 Mar 2026 08:01:01 +0000
Manifest next update: Tue 03 Mar 2026 08:01:01 +0000
Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: uz6+L19jaZBwtWgfYyFiF7m0NBVpImq3KnvuCyxHKTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:9c:a1:9f:25:7c:8b:16:3f:00:4a:60:b4:18:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Validity
Not Before: Mar 2 08:01:01 2026 GMT
Not After : Mar 3 08:01:01 2026 GMT
Subject: CN=fa846134a6dbfa8ef088a75314f10f1e28efaea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3c:00:71:70:5f:08:9d:94:79:84:49:8a:36:
00:c3:bc:63:43:79:1a:7e:d3:cd:ec:5a:66:c8:27:
ef:a0:cd:00:c2:77:ec:a9:30:1f:b9:63:fc:37:ad:
34:2b:58:90:5b:b3:3c:12:8f:d0:c3:79:4f:bf:1e:
3e:04:d8:be:7d:16:98:7c:83:7d:09:be:c2:d5:fb:
f0:d5:4e:20:82:cf:db:3f:fd:5e:95:6b:8c:ff:60:
a5:77:21:61:a5:29:ec:d7:1b:3a:82:be:f1:40:1a:
7a:27:d9:fa:b4:ab:7a:48:f8:7c:66:00:89:60:bd:
f0:d2:20:0a:d3:e6:5d:d1:f8:b1:36:51:33:a0:e9:
08:d0:65:52:33:03:e3:68:e5:fc:4f:33:89:e3:9e:
de:99:76:b3:44:6c:83:d4:03:22:12:b7:41:7b:24:
21:eb:fc:62:5f:76:ef:a8:78:fc:9a:84:9c:e6:79:
76:b6:ed:2a:09:aa:da:82:9c:35:2e:4f:40:36:4a:
fd:94:60:ca:87:93:ed:83:f6:ff:dd:13:f7:7f:fc:
f8:10:be:86:56:3f:5f:ea:70:b1:24:cc:4b:97:71:
59:76:c0:b0:8b:c7:82:ef:36:aa:7e:a0:b6:d9:4e:
6a:0e:ad:db:0a:91:9c:d9:55:2a:30:64:e5:45:e1:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:84:61:34:A6:DB:FA:8E:F0:88:A7:53:14:F1:0F:1E:28:EF:AE:A3
X509v3 Authority Key Identifier:
keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:34:66:b5:c5:12:2a:ea:f2:b9:93:ed:6a:4e:d1:4c:3a:07:
cf:9b:7e:0d:17:b9:46:e9:7c:6e:cb:49:46:24:2d:6f:34:3c:
d0:d2:f6:dc:7a:ab:e3:b4:d5:61:81:71:fa:65:bd:8f:79:7f:
98:4a:a2:23:72:0d:b3:6a:ce:67:6c:89:bc:2e:7b:76:64:0e:
20:52:94:7a:ae:91:6b:1c:2f:c8:fb:4d:85:93:d2:9d:3d:e1:
f9:9e:23:fc:af:5f:1b:67:55:d8:0c:04:89:23:2e:17:e9:0c:
7f:b2:d1:60:85:3c:43:23:ec:2b:4d:ae:80:ae:02:4d:37:05:
6e:e8:82:80:85:c4:71:89:65:57:c1:08:36:25:92:70:e0:82:
1c:0d:19:37:78:7e:49:70:0c:c0:42:a5:be:5a:5b:54:da:97:
a0:6a:a8:fe:49:00:2d:bd:9b:35:c3:33:c5:dd:fc:70:05:56:
a2:2e:cf:5c:ba:f9:e0:2d:c9:61:82:b9:d5:b2:4e:20:6d:7d:
fd:28:31:00:0f:c8:39:92:67:6d:56:ed:28:4b:fa:61:4f:b6:
52:55:9d:c7:ac:56:b4:a2:f4:f8:3c:36:97:fd:00:6b:b4:8c:
95:14:97:22:e1:82:9f:8d:68:fd:e9:dc:79:a7:b7:65:27:12:
84:be:8f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:29 2026 by rpki-client