Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
File: nzeBglGggdHMfzAVMg62NSZwm5E.mft (raw, json)
Hash identifier: EW+XGzWgtxu/+pCdcLNeCU6Pyxm1Q1Kw6icE1DL83wc=
Subject key identifier: E3:E2:DF:78:6A:F8:0C:DC:B6:02:9D:02:A5:C0:D7:96:A1:A7:DB:AE
Authority key identifier: 9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91
Certificate issuer: /CN=9f37818251a081d1cc7f3015320eb63526709b91
Certificate serial: 019D28F2F9809C9BDFAB22C9EB183E6AEBFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
Manifest number: 08F0
Signing time: Thu 26 Mar 2026 07:01:45 +0000
Manifest this update: Thu 26 Mar 2026 07:01:45 +0000
Manifest next update: Fri 27 Mar 2026 07:01:45 +0000
Files and hashes: 1: nzeBglGggdHMfzAVMg62NSZwm5E.crl (hash: H2jjhZuTYaxHF3FzNaPg6gq8WSCWemTtz+z/zYufB5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:f9:80:9c:9b:df:ab:22:c9:eb:18:3e:6a:eb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f37818251a081d1cc7f3015320eb63526709b91
Validity
Not Before: Mar 26 07:01:45 2026 GMT
Not After : Mar 27 07:01:45 2026 GMT
Subject: CN=e3e2df786af80cdcb6029d02a5c0d796a1a7dbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:c2:a5:9a:d8:4c:c5:1b:ec:9c:6d:a7:05:
98:8b:92:ef:aa:13:0a:9a:95:ec:0d:b3:3f:9f:a0:
78:d5:02:53:f5:40:c1:cc:c8:61:37:56:7c:0d:d7:
99:db:64:4e:21:75:5e:6f:ee:64:4d:6a:72:4b:5e:
70:d5:5b:31:9b:bd:9a:0f:49:c4:32:ac:39:a1:27:
34:1c:19:0a:d1:4f:d0:b5:30:2f:1d:08:d2:32:d6:
b3:25:14:ec:5a:fd:05:06:a3:58:36:f0:26:34:62:
ee:a6:f7:8d:57:93:54:33:af:a8:a8:82:08:da:6a:
46:b1:91:a4:24:52:d5:b5:ec:5b:ca:32:f8:e3:ab:
2d:5c:1c:55:52:c6:f0:63:de:f2:7f:17:17:90:6a:
fc:40:21:55:b7:b9:08:2c:a4:f9:c8:8f:20:83:b5:
70:d4:12:43:0f:0b:c2:62:e2:87:22:fb:e6:73:c0:
a2:f7:36:ff:67:ca:23:28:6a:c5:a1:f4:84:b4:fd:
fc:b8:f8:b6:c7:52:13:65:ea:d4:7b:d4:49:0a:69:
1c:51:7b:5a:ee:11:ce:c7:57:8e:c5:b8:90:a1:76:
2c:73:c4:93:f2:8b:45:3c:aa:5c:40:bc:22:40:6b:
de:15:08:cc:8a:b3:25:4d:dd:f9:0f:a5:46:3f:09:
15:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E2:DF:78:6A:F8:0C:DC:B6:02:9D:02:A5:C0:D7:96:A1:A7:DB:AE
X509v3 Authority Key Identifier:
keyid:9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1e:f8:37:f5:02:51:51:95:26:36:71:c3:7c:d6:f4:dc:9b:
c7:84:d6:19:b8:fd:a6:6a:04:68:2a:9c:0f:79:a5:0d:ca:c1:
58:9b:74:06:8d:98:53:13:61:9e:d0:9f:ed:92:7f:fd:18:05:
92:74:06:7f:d2:ff:ff:fb:89:55:d5:0d:72:f9:91:4c:06:20:
4b:57:71:4e:43:b1:a0:81:93:22:25:b0:8f:a0:42:dd:73:8e:
ef:56:ba:7a:a6:f6:c5:1f:ef:78:ab:d2:b0:2f:e3:01:b8:17:
2b:3e:6d:9a:32:93:6f:e9:02:36:4f:62:2a:f0:5d:b5:0c:2f:
3e:05:c0:df:f7:74:35:42:0f:09:76:85:c7:d3:4d:00:cd:62:
99:31:26:3c:4d:d5:2d:09:fa:99:36:7a:09:83:51:78:c7:76:
21:35:1c:06:54:e1:44:83:a5:43:00:43:d3:34:af:8c:f9:ef:
5c:8a:41:d4:e0:1a:cd:0b:ff:8b:ad:78:63:4d:d1:9d:75:ee:
13:7b:19:38:0e:78:14:66:6b:09:0d:a6:68:6a:a7:e6:f6:81:
03:fe:3f:f3:70:31:79:3d:88:c1:88:e5:90:15:95:6a:ea:31:
cf:de:a0:cb:33:de:03:3e:4b:ed:1b:0e:b2:39:2c:c5:5d:5e:
e6:1e:f1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:32 2026 by rpki-client