Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
File: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft (raw, json)
Hash identifier: RXK6XFgGktB3/0PjD3cJkPo/qRskXV0/h1yfBnIWHIk=
Subject key identifier: 5B:E3:5D:24:44:BA:82:6B:2B:53:99:46:1E:6E:9D:59:A3:16:DA:57
Authority key identifier: 35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
Certificate issuer: /CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Certificate serial: 019DA309FDE534E902D15C8DA6808B19411C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
Manifest number: 0691
Signing time: Sun 19 Apr 2026 00:00:34 +0000
Manifest this update: Sun 19 Apr 2026 00:00:34 +0000
Manifest next update: Mon 20 Apr 2026 00:00:34 +0000
Files and hashes: 1: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl (hash: iIw04AiYyQ4mITosh6c6UVoqVwpny/kFERqrukdch5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:fd:e5:34:e9:02:d1:5c:8d:a6:80:8b:19:41:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Validity
Not Before: Apr 19 00:00:34 2026 GMT
Not After : Apr 20 00:00:34 2026 GMT
Subject: CN=5be35d2444ba826b2b5399461e6e9d59a316da57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:9b:34:b4:0a:34:c2:dd:48:5c:36:f4:e8:
ed:0e:b9:db:99:a7:33:95:fc:79:54:d3:a1:be:99:
b2:d5:f1:8b:cc:44:27:42:39:df:cc:28:50:ab:82:
4c:d3:d3:56:82:0f:db:70:fb:e8:9e:c7:04:6a:e0:
98:ee:1c:f9:70:d6:17:97:50:c0:f3:4c:c8:43:92:
fc:b6:1d:ef:5a:b5:20:fa:7d:48:93:8a:d7:e3:f2:
29:10:3a:0b:01:bf:c3:92:ee:88:04:97:ae:20:6c:
f6:3e:17:9f:b1:26:98:c9:77:40:1d:cd:e6:bb:38:
24:8a:4f:c0:a1:13:7a:99:ae:b3:0f:c9:d9:cd:65:
34:a6:98:96:cb:b0:26:1c:90:66:b0:8d:f5:3a:3b:
5e:5a:cd:6e:13:40:fc:aa:4d:2c:f5:26:31:5d:ac:
3a:fc:d1:2a:32:ce:37:5b:f1:95:a4:c8:d2:f9:26:
26:2f:b2:08:74:bc:67:a3:02:66:e7:7e:bc:c0:70:
e6:c8:8b:98:dc:2e:bc:ff:83:ba:e3:e2:69:b5:ac:
90:90:24:eb:5f:1c:c1:e0:4f:7f:e7:86:82:6f:b8:
b9:2e:ce:7a:ad:2b:b7:63:0f:eb:5d:13:9a:5a:2d:
3e:71:6a:fb:35:57:4b:9c:b4:78:82:e1:b4:9b:99:
89:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E3:5D:24:44:BA:82:6B:2B:53:99:46:1E:6E:9D:59:A3:16:DA:57
X509v3 Authority Key Identifier:
keyid:35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ab:cf:1b:9a:2d:5d:5c:e9:15:f0:0f:8b:33:21:5b:ee:8b:
fa:c3:06:b3:35:2f:c1:fa:ed:15:18:61:b7:4f:83:eb:4e:c4:
e9:62:5a:84:38:c5:85:ba:e1:c8:2d:19:da:33:03:d8:4b:31:
9a:1b:c4:51:18:27:d5:0b:45:96:45:5c:5d:e7:94:b3:24:2c:
c7:7d:04:00:25:e6:13:25:e0:2c:05:93:85:31:d8:16:41:6d:
17:25:5d:5b:76:4b:19:7e:04:3b:4f:1f:cd:56:c6:d8:62:2e:
04:92:44:03:5e:9f:26:e0:28:16:6c:a6:1f:ba:e5:43:67:1a:
a5:7f:b0:42:c6:ef:3f:c8:9d:e8:36:bc:f0:39:10:80:0c:87:
cc:dc:8a:01:3a:5e:13:fd:77:9e:e3:f8:49:b6:5f:fa:75:f7:
40:ef:a8:c7:66:07:a8:4c:08:94:a1:fa:c3:55:83:62:3a:75:
77:58:d1:51:a2:23:53:7e:df:b7:2c:a0:3f:38:16:05:4b:56:
51:8a:8d:90:7a:3c:12:7c:f0:75:e8:0d:b0:f2:b2:45:41:8b:
32:e2:01:66:e8:2e:6e:f2:5b:5d:a9:7c:75:e4:5b:f9:85:20:
44:fb:76:63:67:e7:db:f7:63:b2:a8:32:6f:e8:ac:6b:3c:b3:
eb:76:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:18:58 2026 by rpki-client