Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
File: nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json)
Hash identifier: 2Ak8rR7ut4GOvW/Zjs/2YPuKAlR65zgT6Egt12JCbtY=
Subject key identifier: EB:57:3E:BA:FC:94:E3:54:D8:9F:9F:63:2F:5A:07:48:C7:D3:70:66
Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
Certificate issuer: /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Certificate serial: 019D270491EB7C764A984D460B0E0E9805B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
Manifest number: 0984
Signing time: Wed 25 Mar 2026 22:01:43 +0000
Manifest this update: Wed 25 Mar 2026 22:01:43 +0000
Manifest next update: Thu 26 Mar 2026 22:01:43 +0000
Files and hashes: 1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: JTg2Bq7Kcbo5ouwrzWHj4P/P6ZZwGgMqMM0/kT8KG5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:91:eb:7c:76:4a:98:4d:46:0b:0e:0e:98:05:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Validity
Not Before: Mar 25 22:01:43 2026 GMT
Not After : Mar 26 22:01:43 2026 GMT
Subject: CN=eb573ebafc94e354d89f9f632f5a0748c7d37066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:af:ff:4a:30:4f:54:fd:67:02:aa:c9:44:50:
b9:08:80:da:e8:80:64:26:71:1b:34:32:53:c1:a5:
03:8d:18:07:ca:4d:d0:1a:b4:ea:1b:b9:69:fa:b8:
bd:de:6c:62:57:da:7b:23:53:f6:98:86:91:e8:39:
49:5a:0e:d6:cb:35:70:85:69:f7:3f:84:29:d4:9f:
0e:e6:be:51:39:fe:d0:a1:d3:3b:cb:5c:eb:ca:5b:
ed:42:80:1c:ae:66:ee:ab:19:1d:44:60:1c:29:b4:
7e:60:88:6d:a9:af:6e:c2:c8:33:66:af:f0:0f:e5:
27:67:09:3f:c4:a4:e7:30:4f:42:1f:8f:0b:2d:74:
e4:7a:5a:f2:05:3d:32:a4:e0:c9:5c:4e:6c:f7:e8:
ea:60:42:6e:30:b6:47:71:cb:74:b4:7e:f2:59:30:
91:1c:f6:62:33:c1:6a:0a:0d:4b:a7:ee:1e:43:17:
66:b4:ba:a1:53:14:d4:c5:d0:81:88:e8:ee:a2:d6:
b9:04:0f:15:61:bd:c7:c0:a3:5d:fc:56:66:99:5f:
24:59:54:58:96:13:58:70:68:0f:5e:1a:e0:a3:25:
20:b9:7a:7e:45:82:d0:8f:e4:ba:8d:c1:1f:e2:2d:
31:45:a9:7d:10:36:99:67:9b:d9:17:4b:a9:6b:a8:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:57:3E:BA:FC:94:E3:54:D8:9F:9F:63:2F:5A:07:48:C7:D3:70:66
X509v3 Authority Key Identifier:
keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4e:b5:5b:d1:fd:4a:fa:fc:7f:68:00:b7:a9:87:7d:0e:6a:
05:8c:e1:cb:b1:19:c1:16:4a:05:11:fa:e3:2d:21:a0:dc:e7:
19:b1:19:6d:d2:68:05:f8:c4:2e:b9:c0:cf:d8:82:9d:c6:90:
fe:5d:1c:46:40:1e:0b:cc:c4:9a:78:26:6e:78:10:42:d8:b3:
fd:19:fe:4e:75:6c:c0:49:44:ef:24:54:fb:93:38:83:6e:3d:
2d:73:d4:2b:5b:70:72:ae:8e:5a:19:c1:21:48:55:44:cb:c3:
b0:75:1c:3c:76:41:60:dd:e5:92:bc:97:ae:56:e1:1e:d4:03:
12:00:71:92:a8:7e:b2:68:0a:9c:7b:85:85:1f:af:4b:ce:41:
97:4d:ba:0a:ad:2a:5a:8a:b8:19:30:9f:b4:37:a8:da:59:9d:
48:91:d9:f8:73:02:6a:a6:d2:9b:54:5e:4c:68:5e:10:ad:b8:
22:c2:8c:9c:23:1a:64:92:31:05:1d:e4:c2:d0:71:ae:49:64:
b9:d7:cb:84:1e:b8:e3:fc:9e:ac:39:86:07:f5:7b:05:5a:7e:
d6:e2:b9:71:73:5f:15:08:1e:26:9c:06:71:d2:a7:5f:28:ce:
77:15:78:13:fa:b5:d4:cf:01:54:53:f6:17:81:82:44:84:39:
18:d9:8d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:31 2026 by rpki-client