Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
File: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft (raw, json)
Hash identifier: ENPMtdiQUj/uJem/FG4bmtf5HIbC27xsL8Cj3ctO06I=
Subject key identifier: B2:33:AE:41:01:E5:66:47:DA:4F:2A:46:B9:EA:37:EF:D2:AB:61:34
Authority key identifier: 35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
Certificate issuer: /CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Certificate serial: 019CABD96C589E4D18CE73AB93B398AB3063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
Manifest number: 0611
Signing time: Mon 02 Mar 2026 00:01:18 +0000
Manifest this update: Mon 02 Mar 2026 00:01:18 +0000
Manifest next update: Tue 03 Mar 2026 00:01:18 +0000
Files and hashes: 1: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl (hash: ujYsVHae4WqgKdWi1vQ649txfYssAvpqvkMM1FEKJ9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6c:58:9e:4d:18:ce:73:ab:93:b3:98:ab:30:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Validity
Not Before: Mar 2 00:01:18 2026 GMT
Not After : Mar 3 00:01:18 2026 GMT
Subject: CN=b233ae4101e56647da4f2a46b9ea37efd2ab6134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:65:4c:bb:ad:e1:2f:61:9b:28:67:a5:64:
42:d8:f0:2c:70:af:80:b9:ec:92:98:a9:f7:f4:84:
27:4a:5a:09:2d:be:30:b6:ff:a9:06:d0:80:13:19:
af:d2:f7:13:8c:b0:4c:c4:2b:a7:3b:d8:59:b1:ec:
60:9b:42:58:54:23:d7:ce:49:f2:a1:05:b4:0a:fe:
ab:2d:cf:91:9b:2e:14:55:ca:27:ce:a5:9e:08:b5:
b7:4a:c3:7c:26:df:65:f3:f9:4b:5b:e2:7a:b2:8b:
a8:92:b0:bc:13:67:82:a8:0d:ce:01:6d:db:87:58:
f6:5e:d8:39:08:14:91:8d:7e:68:e2:5b:4e:c8:2a:
f9:63:77:72:d7:a4:ab:74:8d:53:f5:63:27:a0:93:
8b:68:b9:5b:e6:da:f0:d6:07:d0:95:f1:b3:ea:0e:
f2:2b:66:dd:e6:64:56:df:09:91:93:7e:ec:3f:4d:
20:f9:65:eb:24:50:40:f1:e6:76:6d:64:9d:16:90:
d1:77:87:aa:ab:f4:37:3c:59:bc:16:7e:91:e7:bd:
22:52:cc:62:df:83:41:a1:76:40:16:20:9b:38:36:
a6:15:82:99:42:53:fe:96:52:07:26:7a:71:85:ce:
98:7f:43:9e:bf:e3:08:93:99:95:2c:2f:83:b1:57:
d6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:33:AE:41:01:E5:66:47:DA:4F:2A:46:B9:EA:37:EF:D2:AB:61:34
X509v3 Authority Key Identifier:
keyid:35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2c:5a:e0:80:34:68:d6:45:37:48:49:41:07:a2:c8:9f:68:
a4:74:50:68:90:1e:16:83:c1:0e:e9:b7:e1:08:20:20:d9:1d:
74:ef:86:c4:ff:1f:eb:1e:64:8b:00:ec:43:6f:2d:8c:25:fa:
b8:97:37:ab:55:49:93:ef:f4:b8:f6:bf:4b:cc:33:49:5b:0b:
23:e1:16:23:86:4c:66:0c:09:e9:3b:0c:9c:62:32:d7:59:f9:
a2:09:e6:a7:6c:23:a7:49:e2:6e:aa:93:24:c8:73:a5:48:5c:
1f:4a:d2:83:db:25:61:06:a5:ab:ff:55:c7:1c:66:cb:64:b6:
8e:6d:6b:b7:1e:e4:bd:87:6a:1c:d4:76:1f:dd:03:a8:f2:d1:
0d:9e:42:cd:59:7d:26:23:b2:bd:8a:a3:3e:e2:5e:51:eb:97:
79:2c:71:96:4d:d7:7b:ca:19:9d:68:e5:8b:b1:0e:31:b5:b2:
5d:7c:fd:cc:63:d8:db:bf:24:3d:27:f9:cd:87:88:c7:52:3c:
28:a9:17:83:29:a6:50:a4:d9:7b:52:64:16:79:08:f4:0e:1f:
e3:d1:00:17:3a:23:1c:af:ee:41:46:06:8a:81:a2:90:f9:19:
f4:bc:ce:8a:cc:8f:79:e8:5e:f1:36:86:e9:b7:a8:74:ff:9b:
ea:ab:be:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:21 2026 by rpki-client