Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
File: niAdSREFvoeXxfKjhatFb18K8Fs.mft (raw, json)
Hash identifier: DZTdzk5v+jXPFbfzWVcMESI0Gmk2hJvd2R30tJ4MkTo=
Subject key identifier: 4F:FB:32:6C:D7:98:99:7D:FE:1D:25:7C:02:A5:B2:F9:E8:03:7F:3D
Authority key identifier: 9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B
Certificate issuer: /CN=9e201d491105be8797c5f2a385ab456f5f0af05b
Certificate serial: 019D265FAA1147ED3BDECDFCEC7619D131EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
Manifest number: 095A
Signing time: Wed 25 Mar 2026 19:01:36 +0000
Manifest this update: Wed 25 Mar 2026 19:01:36 +0000
Manifest next update: Thu 26 Mar 2026 19:01:36 +0000
Files and hashes: 1: niAdSREFvoeXxfKjhatFb18K8Fs.crl (hash: 1Qh2I2WBuJxNpXxJi1ELwdGoCA3pvMQrFPlQR1bnLz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:aa:11:47:ed:3b:de:cd:fc:ec:76:19:d1:31:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e201d491105be8797c5f2a385ab456f5f0af05b
Validity
Not Before: Mar 25 19:01:36 2026 GMT
Not After : Mar 26 19:01:36 2026 GMT
Subject: CN=4ffb326cd798997dfe1d257c02a5b2f9e8037f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6b:79:32:b5:d9:a3:26:6e:ae:5e:82:ef:80:
37:9e:9e:7a:20:cb:61:32:3b:78:8c:f2:b6:31:cf:
61:dd:20:e1:9b:6e:a2:5b:09:85:ba:ee:9d:0f:07:
ab:97:ba:18:89:c9:55:41:f0:60:6d:57:8a:64:6f:
4d:6f:0a:7e:f2:be:11:9b:0f:37:c7:fe:f7:c4:f5:
09:85:b7:49:a8:bd:a6:ff:c8:fb:cf:32:e6:d5:05:
0e:cb:bc:69:3b:c4:3e:b7:81:a2:e3:b7:42:1d:4e:
f0:5d:d1:93:78:3b:50:1a:5c:4f:28:bd:51:4e:9b:
9f:71:7c:de:b8:ba:3e:92:08:c0:3f:31:2b:90:69:
e6:fa:db:e4:a7:01:75:c9:bf:ec:f9:6f:62:bb:0e:
62:bd:d8:f9:88:6a:f6:6f:18:de:d1:de:73:d6:85:
dc:7c:5e:fe:c0:eb:3f:81:6d:fd:6b:1b:17:6b:b3:
4a:50:ab:18:16:92:4d:21:3a:f9:b1:41:42:34:5d:
bd:26:6d:b9:52:0e:2f:44:d2:db:30:8e:b4:3d:5d:
0b:e2:c7:d7:77:4f:89:a5:60:af:b8:6b:a3:a6:4a:
1f:a9:b8:48:4f:ff:71:7a:68:26:66:c8:2a:3f:95:
da:e7:d2:af:0c:d1:af:df:50:65:18:00:31:74:6d:
d2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FB:32:6C:D7:98:99:7D:FE:1D:25:7C:02:A5:B2:F9:E8:03:7F:3D
X509v3 Authority Key Identifier:
keyid:9E:20:1D:49:11:05:BE:87:97:C5:F2:A3:85:AB:45:6F:5F:0A:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niAdSREFvoeXxfKjhatFb18K8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c1ddeb-2e9b-42bb-9251-df491bd0374e/1/niAdSREFvoeXxfKjhatFb18K8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:28:54:c3:09:ea:ca:11:9e:75:5c:d6:75:71:c2:70:d1:7e:
6c:90:36:f4:68:a6:4b:d4:80:03:64:0e:ad:34:cc:0e:2d:bc:
3e:49:f6:fb:6d:9c:05:7a:d6:e2:49:ed:4e:8d:15:b6:af:a5:
e2:bd:a6:4f:3e:c1:28:63:bf:8b:05:bf:5e:f9:02:b1:2e:3a:
a9:23:a9:a8:92:3a:5f:ce:78:fc:ba:8f:f3:d6:cd:c7:3c:e7:
42:07:c3:74:7c:8e:21:1a:3a:9f:48:ec:34:88:83:76:7c:60:
d2:b7:b5:10:cb:99:23:d6:0f:07:81:cf:c1:c2:ef:aa:5a:3d:
18:eb:e9:22:ea:b3:d5:29:fd:18:8e:97:5e:54:c3:2e:d4:5a:
8e:d1:4b:8a:0e:cc:af:13:9e:45:19:5f:dd:1d:d9:28:1f:c4:
87:87:c5:b7:ca:12:21:32:c6:27:b8:0e:11:e4:49:cc:49:a5:
78:b4:7c:3e:c8:dd:68:2a:ff:09:e5:e8:3a:c3:c4:4e:be:1a:
e8:34:8c:96:aa:1d:78:4c:2d:27:b9:1e:8b:24:c5:bd:95:74:
51:fe:9d:9e:79:a2:7f:0d:b3:d7:56:53:d1:39:92:8e:df:3f:
2f:d9:fc:47:63:94:4b:a0:7a:a9:34:7b:a5:61:fe:2a:d3:68:
db:ea:86:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:44:11 2026 by rpki-client