Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
File: nGCyJ8t1doofV4Vuw1M8loSCYZw.mft (raw, json)
Hash identifier: /26b/Yqew5LSXnTWou9VLxzcd4TvbYvOAI6HfXJZUNs=
Subject key identifier: 7B:2C:D0:66:18:18:FA:11:24:AF:14:35:3A:7D:EE:A7:1B:92:B0:DD
Authority key identifier: 9C:60:B2:27:CB:75:76:8A:1F:57:85:6E:C3:53:3C:96:84:82:61:9C
Certificate issuer: /CN=9c60b227cb75768a1f57856ec3533c968482619c
Certificate serial: 019D9B5041F00D60C35381EA7A7A087F02C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
Manifest number: 1774
Signing time: Fri 17 Apr 2026 12:00:21 +0000
Manifest this update: Fri 17 Apr 2026 12:00:21 +0000
Manifest next update: Sat 18 Apr 2026 12:00:21 +0000
Files and hashes: 1: nGCyJ8t1doofV4Vuw1M8loSCYZw.crl (hash: dswQS4NUo5ZV2nwCcb/IItB+2r8OYpQXQf1/7kDXOtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:41:f0:0d:60:c3:53:81:ea:7a:7a:08:7f:02:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c60b227cb75768a1f57856ec3533c968482619c
Validity
Not Before: Apr 17 12:00:21 2026 GMT
Not After : Apr 18 12:00:21 2026 GMT
Subject: CN=7b2cd0661818fa1124af14353a7deea71b92b0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:05:e4:fe:58:59:b6:20:37:7e:46:c4:bf:
9d:9b:9b:a0:a6:3a:35:cd:77:ab:47:1b:2d:1c:73:
27:c8:b0:ee:bc:e4:5b:38:c2:c1:75:d5:15:a5:57:
97:81:0d:d1:a4:59:f4:d6:54:a3:21:ed:12:57:f5:
49:b0:ef:86:2a:4e:91:27:ca:87:43:a2:83:f1:4c:
63:51:74:a1:d0:d9:26:c0:c4:43:82:22:35:c7:1f:
c9:fc:86:a8:7e:a8:54:16:f8:87:03:d6:fa:56:79:
a5:1e:01:40:12:89:6b:f8:d9:3e:88:fd:04:04:4d:
2a:3d:18:89:8f:e6:11:97:38:30:9b:96:d1:c7:a2:
e7:6c:44:1c:27:c8:97:0b:cb:4e:b3:72:ad:dc:55:
36:74:6c:48:ed:19:97:b5:35:c6:31:7a:39:9a:b8:
a6:da:f3:98:18:e5:79:04:5b:19:7c:a3:4c:39:23:
d4:97:d2:a1:9d:66:cb:b5:56:cc:9f:8f:14:cd:b9:
70:08:eb:0d:f8:df:27:66:e2:11:ee:63:10:87:a6:
6f:0e:fb:c0:5e:09:d9:e9:00:cf:8d:d9:20:58:ab:
c6:b7:e9:b3:20:bc:1f:26:e6:c1:e0:60:40:a6:97:
90:44:97:ee:f0:15:b9:a3:27:75:09:95:3e:e1:5c:
c8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2C:D0:66:18:18:FA:11:24:AF:14:35:3A:7D:EE:A7:1B:92:B0:DD
X509v3 Authority Key Identifier:
keyid:9C:60:B2:27:CB:75:76:8A:1F:57:85:6E:C3:53:3C:96:84:82:61:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:91:f3:ae:ab:90:b8:49:4a:36:ed:6f:88:1f:08:e7:bf:25:
b3:d3:7a:f0:36:48:d3:15:7b:80:a4:d3:4f:50:fc:5d:33:76:
c3:08:9c:60:6e:91:06:12:b2:fa:7c:9d:81:84:51:5a:3a:c4:
26:09:2e:77:32:ed:47:1c:b8:93:79:10:77:94:8c:7e:6f:0f:
52:c2:17:fb:c2:16:69:42:f7:1e:97:21:ec:20:e6:27:69:19:
f5:93:18:52:94:de:31:88:ed:17:3c:ba:32:56:53:24:5b:4d:
19:77:aa:04:19:08:48:06:91:17:ca:f9:25:68:20:c6:32:eb:
94:36:a5:2c:c0:9b:d9:5b:7d:d2:e3:cd:38:45:dc:92:6a:b9:
36:bd:2f:8c:21:be:1e:74:d1:dd:40:18:0b:c8:70:5b:06:73:
f8:66:5a:0f:66:90:0d:cb:59:1d:c6:9c:20:52:48:ab:61:61:
34:59:30:89:bd:53:0e:5a:a3:f3:cc:80:ed:2e:22:12:2a:6e:
25:0d:6d:17:ce:9b:87:48:7b:1a:75:87:3a:5f:ba:a1:47:97:
47:7e:6e:5b:31:66:0f:1e:b7:47:15:67:79:13:c2:79:ac:02:
1d:8d:74:ad:f0:a6:d5:2a:f4:bf:dc:c9:2d:58:38:86:9a:d3:
39:a6:04:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:31:58 2026 by rpki-client