Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json)
Hash identifier: 4mrzndb4xp6mAzY6JK2KAqHjUxD+hYgwxzjteC8QoOo=
Subject key identifier: E7:B8:55:0A:DD:C3:5E:14:77:CD:1D:EC:71:C5:F9:8C:BD:1E:29:F9
Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Certificate serial: 019CABA26578D8E51DC06A613C54CC4FA0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:01:12 +0000
Manifest this update: Sun 01 Mar 2026 23:01:12 +0000
Manifest next update: Mon 02 Mar 2026 23:01:12 +0000
Files and hashes: 1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: RQaBZdobQuqkXZOILLmGX7N0Cccd/fdZqvDEC2dXlQM=)
2: TM1bxUMPDPyCHRavcIw7WxQjRbU.roa (hash: UaG8J2YnGAjViEmyxsyTzCRJYYoHOIo0htvybh8voBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:65:78:d8:e5:1d:c0:6a:61:3c:54:cc:4f:a0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Validity
Not Before: Mar 1 23:01:12 2026 GMT
Not After : Mar 2 23:01:12 2026 GMT
Subject: CN=e7b8550addc35e1477cd1dec71c5f98cbd1e29f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:a9:7a:e7:96:4e:b7:3e:49:65:89:d4:27:
22:82:d6:d7:95:02:a6:17:d7:26:88:a8:b5:20:00:
e7:c2:8a:76:f8:5c:3d:57:6c:f8:72:0b:f2:f1:b2:
24:83:61:74:22:29:9f:86:94:7f:18:25:b5:3f:3f:
ea:29:d8:15:73:86:88:ad:c6:c4:95:63:b3:f4:e4:
45:f1:79:07:92:1e:50:c8:fa:e3:26:d1:e0:7e:34:
e2:48:25:4a:21:b1:15:68:64:10:c7:ac:be:d4:cd:
d7:19:5a:6c:bf:6b:ae:0a:60:ec:fe:0b:bc:ac:29:
c0:fb:c0:05:b0:6f:88:74:76:70:03:84:70:06:ff:
b5:fc:a0:84:6e:7b:2a:f0:60:c8:ef:5b:3d:34:a5:
ad:fa:80:ba:b3:f1:d9:29:31:9a:46:5f:f7:43:ea:
ed:31:3a:fc:38:04:b6:5a:d0:d8:e9:63:f7:db:0b:
c8:e0:b0:a3:58:a4:e8:eb:46:2c:f7:aa:2c:eb:1a:
5c:bc:1f:c5:b1:ac:29:3d:05:6c:c0:10:04:74:83:
e4:55:ca:a3:fd:96:23:06:5e:d6:8d:e9:7a:2b:fc:
7e:ce:d7:d6:2a:ec:0c:88:4d:47:27:57:52:01:c8:
1b:81:ba:f7:53:73:53:bd:5a:ed:fb:64:fe:2b:15:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B8:55:0A:DD:C3:5E:14:77:CD:1D:EC:71:C5:F9:8C:BD:1E:29:F9
X509v3 Authority Key Identifier:
keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:52:ff:23:08:0d:ce:1f:67:08:8e:64:f6:41:f4:2c:58:ff:
78:a6:21:b1:aa:44:dc:68:d6:ec:6c:49:b7:3d:96:cb:78:dc:
b0:90:59:e4:56:77:a2:45:35:50:24:37:6e:54:9a:62:38:a9:
5c:be:00:33:7c:70:8b:ab:95:c9:53:a2:61:4c:2f:11:3f:58:
f0:23:21:ab:f4:8c:f0:bc:61:29:0b:49:de:1b:30:e4:8e:e8:
c2:0e:de:6e:01:73:81:e3:a9:0e:57:d9:0b:09:f2:fa:6b:f5:
58:1d:78:74:93:67:63:16:58:11:4b:97:4f:17:98:7c:89:69:
c4:ec:19:e1:e4:f6:9b:e8:86:5e:a7:6b:9b:a4:9b:a8:79:b0:
5a:4b:fe:9d:37:fa:63:01:0e:b6:66:97:a2:93:42:00:68:d7:
b7:ba:44:60:c4:7e:b6:27:dd:0f:47:ca:a1:32:a4:cf:97:cb:
ca:a0:41:59:97:7e:fc:17:ef:e3:8c:31:30:e9:74:7a:48:9e:
cc:f4:c1:21:17:71:1a:97:65:57:b8:e1:1d:66:61:8b:4b:83:
85:e5:11:22:36:ed:5a:7a:29:11:5b:8b:56:a4:2d:9e:5e:ae:
f0:33:cf:d8:b3:ee:7e:a8:c6:c3:d8:4b:a7:67:71:d2:4d:f9:
90:6e:38:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:14 2026 by rpki-client