Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
File: nGCyJ8t1doofV4Vuw1M8loSCYZw.mft (raw, json)
Hash identifier: ueErrB1ecuMQnIzJydwwCHGOnUeQkareVCFFneXw45g=
Subject key identifier: 40:FD:9C:FC:12:59:B2:49:00:CC:82:4D:CE:10:55:0E:99:6D:ED:77
Authority key identifier: 9C:60:B2:27:CB:75:76:8A:1F:57:85:6E:C3:53:3C:96:84:82:61:9C
Certificate issuer: /CN=9c60b227cb75768a1f57856ec3533c968482619c
Certificate serial: 019CA9EAF099402A77867AFCD7DAADF37331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
Manifest number: 16F7
Signing time: Sun 01 Mar 2026 15:01:12 +0000
Manifest this update: Sun 01 Mar 2026 15:01:12 +0000
Manifest next update: Mon 02 Mar 2026 15:01:12 +0000
Files and hashes: 1: nGCyJ8t1doofV4Vuw1M8loSCYZw.crl (hash: KBaKwgja8sBGto3N/VZeQ67zS5b8xKtR5bpaRbBZcRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:f0:99:40:2a:77:86:7a:fc:d7:da:ad:f3:73:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c60b227cb75768a1f57856ec3533c968482619c
Validity
Not Before: Mar 1 15:01:12 2026 GMT
Not After : Mar 2 15:01:12 2026 GMT
Subject: CN=40fd9cfc1259b24900cc824dce10550e996ded77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:89:3f:0a:0d:90:d0:1b:10:60:bd:27:0a:
15:3c:2d:01:31:a2:af:d0:68:c6:27:bb:d0:6e:c3:
0e:e2:5b:c2:b3:d2:b4:9a:0e:4d:4e:ff:13:36:c6:
ea:b9:d0:d3:34:6e:54:32:11:6a:a1:1a:63:a8:7a:
fd:d0:c6:e1:b4:80:04:1d:a6:c0:28:15:94:97:a8:
ad:a4:28:6b:25:a8:3e:1f:e3:b2:da:62:8f:55:21:
a7:f4:ab:25:36:df:73:e6:ca:bb:08:0a:20:c1:de:
b3:54:71:4b:75:8d:5a:c5:7a:95:fd:5f:2d:f4:06:
0d:1f:cf:8a:bc:52:d7:99:17:aa:e5:90:4a:ea:cd:
55:23:51:cc:51:9c:4d:00:8e:6d:7e:ec:e3:f4:af:
e8:7c:46:6c:e1:81:d6:78:07:67:b6:f7:e4:09:a9:
87:22:66:d0:69:bb:d0:38:e2:35:79:34:fd:92:6c:
13:8c:be:85:42:a8:7e:bf:38:e3:b2:65:21:08:8e:
a2:08:b3:fc:4f:0d:64:4d:5f:22:9e:05:89:3c:56:
5f:bb:a9:9e:ef:5f:9b:71:3b:20:a2:a2:e1:f2:8e:
87:33:82:28:92:a2:ef:e2:14:d3:87:68:a0:c2:e3:
94:c2:45:cd:11:26:fd:f4:0c:8e:39:d6:ff:dd:9d:
3b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FD:9C:FC:12:59:B2:49:00:CC:82:4D:CE:10:55:0E:99:6D:ED:77
X509v3 Authority Key Identifier:
keyid:9C:60:B2:27:CB:75:76:8A:1F:57:85:6E:C3:53:3C:96:84:82:61:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cf:97:3a:7e:f0:b2:b2:d9:ca:d9:13:ce:09:e1:3c:ef:ab:
5f:a1:59:91:b6:0e:1a:de:bf:26:e9:87:56:89:82:be:18:be:
d7:7b:48:91:ef:0e:0b:f8:61:d6:a5:94:15:4c:78:2d:bc:91:
b0:f4:71:5d:ad:a4:d3:69:55:ae:ec:1a:3f:85:32:20:30:f5:
ab:7a:e0:ea:f5:36:f3:85:55:7d:63:03:33:71:cb:0d:b0:eb:
ca:ec:49:69:7b:f3:68:6d:b1:41:b7:cc:2d:4c:35:89:57:de:
8a:67:87:85:f3:d6:96:75:a6:f7:a7:25:5e:4f:9c:fe:49:79:
76:6f:b6:13:09:bc:5d:84:02:7e:2e:13:11:56:85:a7:3f:a0:
16:c3:82:da:38:46:41:d5:6d:6e:e2:6c:52:50:de:f3:c9:2d:
5a:8e:b4:48:15:fb:17:bf:6b:25:3e:ae:1e:f5:c2:f6:49:fc:
e7:10:e4:28:6f:d7:1c:b7:13:d3:e4:b5:af:2f:f4:72:c7:5c:
78:a3:a1:a5:c0:18:16:89:ec:86:fb:6a:a1:8e:77:73:19:ba:
af:d5:1a:d5:25:20:6e:d3:ff:ef:db:10:4a:9e:31:a1:6f:97:
94:f2:af:ef:80:b4:ce:1f:8c:aa:75:96:e6:c8:2d:ad:23:f1:
92:d4:7d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:54 2026 by rpki-client