Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
File: NhF6aBWpGEeNP4wA1nGlcWa_7so.mft (raw, json)
Hash identifier: lsj4LidZJS3hrRiSgCVf2PocGFzN6x1HDOHowqMzAWc=
Subject key identifier: 3A:53:D7:F0:94:68:3C:32:66:79:FF:14:04:39:98:1D:FD:85:8D:B5
Authority key identifier: 36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
Certificate issuer: /CN=36117a6815a918478d3f8c00d671a57166bfeeca
Certificate serial: 019D28846E0E4E2AD7290A80FB5FCECB5FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
Manifest number: 0920
Signing time: Thu 26 Mar 2026 05:01:00 +0000
Manifest this update: Thu 26 Mar 2026 05:01:00 +0000
Manifest next update: Fri 27 Mar 2026 05:01:00 +0000
Files and hashes: 1: NhF6aBWpGEeNP4wA1nGlcWa_7so.crl (hash: Ve2huIiQczTkqLHi19v+Ca9D0qOFPnLNgGFBk72zJ9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6e:0e:4e:2a:d7:29:0a:80:fb:5f:ce:cb:5f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36117a6815a918478d3f8c00d671a57166bfeeca
Validity
Not Before: Mar 26 05:01:00 2026 GMT
Not After : Mar 27 05:01:00 2026 GMT
Subject: CN=3a53d7f094683c326679ff140439981dfd858db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:21:7c:15:cb:01:33:c7:ff:92:88:33:eb:
d7:20:d2:ac:23:48:3c:b8:7d:58:39:fe:1f:aa:49:
77:d6:24:9b:10:28:e1:bd:c8:52:c8:37:10:db:14:
7b:3c:37:e8:4c:b2:5f:4e:3e:7a:e9:42:a8:bc:78:
80:41:0c:05:03:87:28:ab:8b:75:0f:7d:4b:b4:94:
bd:bc:21:4a:96:07:5b:35:57:1b:9f:75:70:c1:c5:
93:de:41:4a:07:03:66:2d:62:91:dc:60:25:05:3b:
79:10:c0:d4:95:c3:8f:3a:39:3c:15:21:d5:be:ff:
fd:d6:69:f2:8f:20:b8:14:57:a7:ae:68:92:98:b6:
3b:09:96:5d:e6:ac:d5:aa:1a:be:b0:c7:93:17:f4:
93:35:2d:3d:c0:e5:6c:6e:91:d3:aa:e9:d2:ed:bc:
c4:4f:6f:de:39:67:fa:4f:c1:ae:96:58:74:f5:5b:
db:d2:c5:5f:ac:9b:79:53:32:60:58:e1:f2:72:e8:
fb:5a:71:b6:6d:aa:17:ff:3e:13:00:07:50:a5:8f:
d9:a7:c6:31:76:eb:07:a1:de:0b:81:e5:e0:8c:2a:
9a:ab:cd:68:83:88:eb:26:20:5c:ab:c8:89:5b:b3:
39:7a:93:4c:0e:10:4c:4d:d2:2d:68:b8:4b:13:fa:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:53:D7:F0:94:68:3C:32:66:79:FF:14:04:39:98:1D:FD:85:8D:B5
X509v3 Authority Key Identifier:
keyid:36:11:7A:68:15:A9:18:47:8D:3F:8C:00:D6:71:A5:71:66:BF:EE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhF6aBWpGEeNP4wA1nGlcWa_7so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbb741-b692-4f09-8cba-c6aec68ab364/1/NhF6aBWpGEeNP4wA1nGlcWa_7so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:15:e7:b3:e5:d9:bc:ff:26:bc:fe:9b:eb:a0:6a:10:ef:07:
e8:a5:15:a0:2a:c9:13:cc:0b:93:4c:5d:74:f7:e1:74:77:f7:
ff:d0:34:61:e5:6b:1f:1d:01:06:f9:59:83:38:c1:62:21:e0:
2f:fe:f4:bb:73:1a:fb:94:ae:4c:9c:0f:8a:21:67:be:24:5f:
0d:0a:33:b5:c7:c5:b8:eb:a2:45:d0:dd:06:9f:25:fe:b9:53:
2e:d7:48:82:e3:c4:21:85:14:dc:45:87:5e:29:ce:e5:e5:94:
e1:f2:4f:e0:a0:ae:6a:5e:55:c0:c0:9f:66:fb:cf:db:82:10:
58:e4:82:b1:10:98:23:68:a2:73:6e:0f:ac:00:40:f9:49:72:
86:91:98:13:65:a8:68:83:b9:fd:d8:cf:f8:09:06:89:ac:0f:
19:3d:8a:35:e0:6a:22:6a:ca:03:5c:17:6b:ec:87:ff:84:7e:
73:a6:c7:c8:f2:33:f6:ff:3e:53:a8:69:bb:e1:96:62:6f:83:
ce:da:00:ae:b6:99:67:5e:83:1e:43:a7:d6:fd:ce:71:48:6f:
e3:ca:52:1f:49:41:47:11:d1:41:45:c2:b9:3b:86:26:a2:f9:
b5:0c:20:10:c0:f9:6c:a8:cf:80:89:5b:b1:f8:fb:4b:4b:37:
6d:2f:19:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:43 2026 by rpki-client