Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
File: nR_TKOt-elrN5RmPDX6b4mhHbXE.mft (raw, json)
Hash identifier: TgfGGbRffKUz+GkdLZiSCqiSAzERjrUhLQIYbp2QBVg=
Subject key identifier: F2:21:06:9F:EB:96:5E:71:F3:55:46:2D:D3:7B:F4:F9:7E:EA:41:FA
Authority key identifier: 9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
Certificate issuer: /CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Certificate serial: 019CAFECB9BE7C0B2D724D56054073DF210E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
Manifest number: 12F0
Signing time: Mon 02 Mar 2026 19:00:52 +0000
Manifest this update: Mon 02 Mar 2026 19:00:52 +0000
Manifest next update: Tue 03 Mar 2026 19:00:52 +0000
Files and hashes: 1: nR_TKOt-elrN5RmPDX6b4mhHbXE.crl (hash: bjpf3qoDgf58r7Ee44yqeeSu6c9HQR6Rh/GBQOKpCIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:b9:be:7c:0b:2d:72:4d:56:05:40:73:df:21:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Validity
Not Before: Mar 2 19:00:52 2026 GMT
Not After : Mar 3 19:00:52 2026 GMT
Subject: CN=f221069feb965e71f355462dd37bf4f97eea41fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:be:52:f4:58:1f:49:a3:72:85:11:fc:08:
26:30:d2:fa:8a:e3:c9:94:0c:c0:f7:46:c2:45:9a:
a7:16:d7:e4:3a:7d:a2:db:0e:2f:52:14:a3:d2:91:
7d:e0:ab:4c:5c:85:f2:4c:82:02:60:7b:06:30:da:
eb:77:d4:d5:fc:0b:4e:1a:92:b2:1d:42:bb:9b:82:
3c:de:d6:17:a3:c9:f7:f9:57:5c:f2:a9:2e:54:c9:
34:c7:99:c5:6c:12:e6:f3:47:76:a7:3d:01:79:f8:
d3:0f:67:cb:1f:08:24:76:cc:fd:b2:a8:47:ed:43:
67:95:8d:e1:49:d4:39:2e:4e:79:7b:48:91:b2:a3:
0f:ba:40:d0:8d:3b:a6:dc:5f:e9:fa:dc:f3:70:4a:
b3:ab:40:b1:bc:d7:f6:65:9d:4c:59:72:fa:69:41:
61:f0:f1:aa:1d:fa:5c:56:68:03:95:76:ed:5a:04:
13:61:ee:f8:59:df:14:64:48:67:d5:4d:1b:69:6e:
17:58:e0:db:90:bc:f2:8e:12:0f:1b:bd:e9:cc:fb:
98:0d:b5:1b:3f:12:cd:57:9a:d7:83:e9:34:d0:c7:
b1:2f:6f:3c:71:cd:5d:41:80:ad:5c:3e:95:44:5d:
2a:85:1e:a3:3f:29:8f:61:22:48:b1:68:26:1e:79:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:21:06:9F:EB:96:5E:71:F3:55:46:2D:D3:7B:F4:F9:7E:EA:41:FA
X509v3 Authority Key Identifier:
keyid:9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f9:8d:32:e0:49:5b:d2:b4:49:2a:2d:c5:b4:69:23:d3:8e:
08:88:9b:f5:48:c9:4b:00:08:bf:f1:cd:93:b9:19:53:bf:b0:
61:03:ea:3b:cb:9a:49:e9:da:11:b7:9b:4d:c5:de:33:ff:e4:
9f:47:be:61:57:61:86:a5:9a:2b:c6:ad:a8:c8:63:bc:2f:c3:
14:fa:c9:ca:88:02:d8:72:12:47:5f:e3:87:21:f6:5a:75:07:
7e:83:dc:e4:dc:29:79:61:f0:e7:b7:00:19:92:a5:e5:db:9a:
d3:61:a4:8f:2e:d1:84:f6:9a:5c:f1:a7:6c:07:88:74:2d:a4:
5a:55:fd:1a:5b:f4:10:6d:03:bb:ad:d9:4b:f5:00:f7:6e:87:
94:6d:77:0d:da:68:c2:44:6e:38:47:6f:6e:96:02:77:29:b5:
c4:22:3e:e8:44:fc:66:73:4e:0e:3e:31:04:65:c8:96:d6:2d:
0a:9d:66:05:75:2c:83:47:a2:ae:99:0c:33:4a:61:84:80:46:
f6:3d:55:30:94:f8:d7:67:ce:08:26:25:83:ac:99:bc:73:44:
24:62:e4:11:bd:1a:86:cb:25:45:90:c3:ed:b2:48:32:d8:c5:
3f:65:8c:51:6a:2b:77:4d:7b:3c:8c:6e:0d:e6:e4:7a:06:c7:
4f:47:8a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:29 2026 by rpki-client