Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
File: NM-cB0OwPV4EX0bprPToAKnxio4.mft (raw, json)
Hash identifier: qiNZpI5t50sZ84MZvFHPAqiXvTPlD89iIFOrHdXO57c=
Subject key identifier: 5A:F4:07:93:76:96:EF:7E:C1:6C:85:56:D6:AF:CB:CF:6B:12:65:EA
Authority key identifier: 34:CF:9C:07:43:B0:3D:5E:04:5F:46:E9:AC:F4:E8:00:A9:F1:8A:8E
Certificate issuer: /CN=34cf9c0743b03d5e045f46e9acf4e800a9f18a8e
Certificate serial: 019D99620F968101ED1F939C1099DCF30139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
Manifest number: 0DCD
Signing time: Fri 17 Apr 2026 03:00:33 +0000
Manifest this update: Fri 17 Apr 2026 03:00:33 +0000
Manifest next update: Sat 18 Apr 2026 03:00:33 +0000
Files and hashes: 1: NM-cB0OwPV4EX0bprPToAKnxio4.crl (hash: EgGxmaX2iyUXkcK8xCbIIHMg49UMmpqeYJWK+1y35/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:0f:96:81:01:ed:1f:93:9c:10:99:dc:f3:01:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34cf9c0743b03d5e045f46e9acf4e800a9f18a8e
Validity
Not Before: Apr 17 03:00:33 2026 GMT
Not After : Apr 18 03:00:33 2026 GMT
Subject: CN=5af407937696ef7ec16c8556d6afcbcf6b1265ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:96:b0:4b:cf:81:df:ea:e1:4c:c1:50:26:
74:1c:1a:65:bf:d1:d7:d3:64:5f:21:ec:12:17:7f:
b7:3e:6b:85:21:16:d0:fb:38:ef:f4:74:7a:71:52:
33:56:f0:38:83:99:cb:ff:e2:6b:ef:11:bd:8c:61:
0e:04:f5:08:6c:aa:41:7a:c6:af:dd:5e:7c:f1:eb:
0a:f0:85:4f:55:08:db:b6:58:b8:fa:f2:aa:18:53:
98:f2:52:eb:ed:eb:fe:13:f9:c7:92:f8:12:3d:92:
9d:a0:f3:43:51:b4:90:79:95:87:1f:69:27:ed:3b:
14:67:39:d2:de:29:f8:2f:9f:ae:11:18:1f:b1:22:
21:44:94:5c:33:e6:f6:1b:37:76:94:8c:90:f3:43:
54:5f:5e:14:c2:f1:bf:bc:78:7b:f9:1f:ea:e8:2a:
6d:11:fe:93:9b:e7:1a:f6:00:08:29:a8:b3:ee:47:
7e:b2:dc:83:e7:fd:a5:aa:50:58:96:9c:9b:62:01:
c2:3d:9a:07:93:b3:8c:fc:91:f3:d6:81:74:61:bb:
a5:45:13:c3:8a:1f:9a:25:7a:6e:89:08:ef:d9:94:
d0:aa:49:8e:0f:cd:1e:d3:2f:c8:d7:1c:f3:c0:7e:
93:a3:f8:94:e1:0e:b2:23:f5:46:ad:30:df:01:b5:
23:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F4:07:93:76:96:EF:7E:C1:6C:85:56:D6:AF:CB:CF:6B:12:65:EA
X509v3 Authority Key Identifier:
keyid:34:CF:9C:07:43:B0:3D:5E:04:5F:46:E9:AC:F4:E8:00:A9:F1:8A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NM-cB0OwPV4EX0bprPToAKnxio4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/45e4e0-da19-4cb9-8c8c-ee8035bbb4c1/1/NM-cB0OwPV4EX0bprPToAKnxio4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:df:fe:ce:e2:f3:b3:ba:e2:ee:d9:78:f0:85:7f:38:18:d4:
41:ec:55:21:3d:d7:ea:d4:63:af:02:5f:9b:03:8c:8d:c1:50:
47:3c:f1:89:41:52:b0:0c:66:0a:31:4c:83:c1:c9:ed:c5:75:
76:6c:3d:3a:8a:53:fd:31:9d:7d:e5:78:2b:33:23:5b:cc:8f:
38:fe:dd:d6:bd:77:5f:a9:f1:6b:70:fb:8c:2b:13:87:2a:27:
23:aa:00:af:0e:47:84:61:1e:d9:dd:66:74:23:19:ac:d7:ea:
bf:44:45:d8:bb:fc:6d:c7:93:cf:b0:01:92:30:e3:82:c3:29:
21:1b:ba:fb:f2:25:cc:e1:b3:3b:a7:91:d1:12:b8:e2:99:27:
28:8a:b4:3c:c4:e0:ad:b0:4c:42:c5:ae:1d:30:56:3d:35:75:
02:83:19:ed:16:5d:d6:7a:3c:ca:17:bd:4e:17:6b:1f:a7:99:
0f:d1:86:89:69:0b:e7:f7:cf:77:b7:86:60:17:4f:b7:79:82:
34:a6:ef:ee:99:e1:f4:2b:d7:0e:19:2d:c7:d6:6a:e5:67:c5:
9a:e2:b4:88:14:65:e2:fc:db:40:ec:a9:f8:87:c2:28:13:6c:
ec:82:dc:ee:f9:df:32:1e:03:2a:0f:03:d9:34:e9:af:f1:94:
b8:88:e9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:58:55 2026 by rpki-client