Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
File: nAK6r7b7qr_o-oTdJp9bopIPFYM.mft (raw, json)
Hash identifier: t9JI/odW7vzudscooPpOseLdb7w9m1IgAERp/tKqImI=
Subject key identifier: 46:72:60:E1:37:5D:BA:6D:EA:D7:C4:E1:46:54:BF:17:60:4A:18:8B
Authority key identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
Certificate issuer: /CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Certificate serial: 019CA9EB05F73D6BA36A85F32BC009C2E937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
Manifest number: 1840
Signing time: Sun 01 Mar 2026 15:01:17 +0000
Manifest this update: Sun 01 Mar 2026 15:01:17 +0000
Manifest next update: Mon 02 Mar 2026 15:01:17 +0000
Files and hashes: 1: nAK6r7b7qr_o-oTdJp9bopIPFYM.crl (hash: 5AlmC3IXYP0+t/y6AC58LQI/dxApXg2OL+tuLO4f/aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:05:f7:3d:6b:a3:6a:85:f3:2b:c0:09:c2:e9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Validity
Not Before: Mar 1 15:01:17 2026 GMT
Not After : Mar 2 15:01:17 2026 GMT
Subject: CN=467260e1375dba6dead7c4e14654bf17604a188b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:aa:2a:e7:ab:d1:70:48:69:cf:ff:1c:18:
b8:80:43:ab:f0:c8:eb:d5:43:f4:20:ce:69:65:b8:
c6:b6:f1:77:77:3a:15:25:ec:da:b5:a2:19:4a:e5:
e1:f7:00:d8:e9:8a:99:58:3d:9b:80:64:fb:33:ad:
de:ee:50:bb:a8:1e:7a:98:75:cc:d5:a2:93:91:43:
bc:91:9e:df:16:80:87:ee:f7:5e:71:e0:2c:57:9a:
4d:24:14:09:89:1e:e0:be:47:a5:87:d9:71:bf:45:
73:76:0d:67:64:5a:5c:7d:64:7a:5a:b2:e0:6d:f2:
f2:b7:63:9f:b4:c5:84:85:66:eb:1e:22:a4:2e:6e:
93:ef:85:2a:1c:6f:5e:43:91:9e:4a:32:70:57:d5:
6c:9e:8b:8a:0b:ad:d3:95:ee:3f:a6:76:e4:6c:01:
f6:bc:37:aa:dc:06:13:81:e7:ea:1c:91:6a:0c:dc:
94:88:4a:c2:8b:95:14:c6:34:0c:6c:84:a6:3c:b5:
bb:de:84:4d:57:57:4a:36:62:e0:05:46:11:6e:66:
b6:f5:7f:97:15:4c:f1:11:f2:cd:39:1e:5f:f6:39:
ea:00:9f:aa:7e:00:e0:54:2b:86:98:99:bd:b5:bb:
f7:f8:b4:79:47:70:bd:79:bd:d1:23:05:c8:4a:46:
56:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:72:60:E1:37:5D:BA:6D:EA:D7:C4:E1:46:54:BF:17:60:4A:18:8B
X509v3 Authority Key Identifier:
keyid:9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:7a:29:a1:41:0f:b8:5a:dd:94:09:d1:3e:b3:22:2a:30:7e:
b7:e3:c4:00:5d:9e:42:90:23:ee:9c:8f:ed:96:4a:3a:9e:97:
c3:22:5d:7f:c9:31:08:06:c2:7b:68:60:43:4f:d1:d8:30:dd:
b0:e7:1e:d1:a1:f0:c0:78:62:28:14:78:71:85:e4:73:0b:d2:
e8:99:f4:1f:c4:71:98:7c:5a:02:47:22:c0:cd:55:9a:69:ef:
5e:0c:f0:ee:f0:3b:14:13:45:b6:a2:c4:87:0c:b9:49:c8:6b:
0a:dd:06:c1:ce:55:07:51:a3:66:3b:3e:f4:5e:8e:8f:32:08:
f2:76:6c:63:96:e0:33:10:bb:46:a7:5b:5e:0c:a2:09:88:fa:
90:f9:6a:45:a5:e4:7d:db:95:ad:7a:78:fe:f8:18:89:3b:e0:
46:49:06:26:2a:8e:4f:91:69:7a:43:17:22:6e:3f:0c:14:d9:
30:73:9b:2d:fe:aa:b0:f8:1c:f5:f7:2c:80:5e:db:21:8e:53:
8a:e5:4b:59:15:9d:16:b6:6a:ee:e7:ea:6d:ab:c7:d1:04:9a:
3e:1f:5a:01:6e:2f:69:b8:8b:1f:a3:b5:5e:04:3c:dc:28:5e:
c4:14:3f:90:20:a7:75:55:39:4d:8c:5b:b6:33:4d:c6:8c:b0:
6b:6e:56:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:32 2026 by rpki-client