Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
File: nuC9T-woxBx9-CFI8JHsPzkb23A.mft (raw, json)
Hash identifier: kpRUWUgAUKhf4ceBA+n9dxVY94qjtLynjaBGGIpacp0=
Subject key identifier: 03:52:22:02:F0:E4:09:7C:15:C2:A5:B2:D3:5A:A7:BE:3A:B8:58:5C
Authority key identifier: 9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70
Certificate issuer: /CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70
Certificate serial: 019D28F229BDA9842F16B2D3021C8B3C9B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
Manifest number: 0A35
Signing time: Thu 26 Mar 2026 07:00:52 +0000
Manifest this update: Thu 26 Mar 2026 07:00:52 +0000
Manifest next update: Fri 27 Mar 2026 07:00:52 +0000
Files and hashes: 1: nuC9T-woxBx9-CFI8JHsPzkb23A.crl (hash: Uw2wAh5xMX6zRThKDqE07MtLnBF3pCC+aLTo/7jO41U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:29:bd:a9:84:2f:16:b2:d3:02:1c:8b:3c:9b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ee0bd4fec28c41c7df82148f091ec3f391bdb70
Validity
Not Before: Mar 26 07:00:52 2026 GMT
Not After : Mar 27 07:00:52 2026 GMT
Subject: CN=03522202f0e4097c15c2a5b2d35aa7be3ab8585c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:f8:de:75:7f:91:dd:59:8a:75:de:c4:87:
71:cc:87:93:4f:86:95:bd:bd:22:2b:12:00:17:0b:
69:48:89:06:ed:62:f3:c5:0d:46:ac:ae:0c:86:e4:
72:8c:9c:72:9b:11:60:1d:d6:fa:51:36:f0:9a:c9:
88:ac:c9:44:84:c7:5f:2a:1c:d9:f5:e5:21:02:01:
ac:25:1f:c5:1e:43:dd:43:d5:98:fc:15:c1:3b:a0:
df:d8:97:39:3a:2d:9e:37:a3:a2:97:a0:17:1a:62:
5b:94:df:2b:8a:49:2a:28:a2:59:cb:60:15:87:8f:
d3:b7:f9:db:d3:07:b4:33:02:04:e4:0d:1f:4e:47:
db:1e:15:71:e9:54:65:ff:11:73:b2:95:98:e5:49:
0f:6e:d3:8b:fa:e1:29:85:f9:82:91:9e:47:2a:d9:
74:e1:d4:92:a7:5f:9a:40:6c:af:5a:ba:69:eb:ba:
f8:f5:7f:9f:8c:eb:de:c2:9c:2a:9d:31:f2:b0:52:
20:bb:6e:3d:b5:9c:29:98:6a:16:dc:6b:26:0b:12:
21:f0:55:41:68:3a:cf:d2:44:02:a5:32:dd:d5:1e:
80:a5:b0:b7:56:01:f0:33:dd:21:87:a9:89:b1:7f:
33:10:30:90:f0:71:42:4f:e8:6d:0e:60:11:9a:51:
c0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:52:22:02:F0:E4:09:7C:15:C2:A5:B2:D3:5A:A7:BE:3A:B8:58:5C
X509v3 Authority Key Identifier:
keyid:9E:E0:BD:4F:EC:28:C4:1C:7D:F8:21:48:F0:91:EC:3F:39:1B:DB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuC9T-woxBx9-CFI8JHsPzkb23A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bdd17a-fad4-4249-ac0f-edfbab3361bb/1/nuC9T-woxBx9-CFI8JHsPzkb23A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4f:3b:69:9b:04:9a:80:a2:f9:71:64:bc:5b:f7:40:f8:f6:
50:af:2c:16:a8:39:6a:ea:d3:4c:84:ff:b4:dc:bc:cc:94:44:
99:17:ca:29:c5:b5:bb:c5:54:60:ea:7c:75:a7:2d:cc:c4:3f:
33:a6:9c:60:d4:d4:bf:52:bf:5b:f4:0b:a1:ae:04:66:f3:f5:
5c:53:de:50:ed:f7:2f:e4:82:9c:b4:ae:67:f4:66:0e:de:02:
8c:66:7b:e9:46:d0:8a:3c:9f:12:3a:4e:fb:e4:53:4a:7c:e1:
db:4c:48:27:c1:e8:1e:58:68:8f:70:42:a0:06:f2:18:49:4f:
72:4b:06:c4:28:6b:db:1f:eb:4a:ef:2f:d5:1a:41:9e:b2:1d:
47:bc:45:82:9c:20:26:e0:6d:a6:c4:5c:64:fb:b4:57:c5:b7:
c2:f8:87:fb:ef:90:be:17:b1:4a:57:20:c3:1b:6f:ef:da:ca:
15:e8:55:48:db:ba:37:14:99:19:42:6f:a7:c2:bc:53:69:de:
5c:3d:9d:0e:55:6f:ce:09:89:0b:96:cd:ab:8b:42:cb:21:67:
df:4f:5a:b0:5f:5e:c2:11:29:b9:a6:fc:8d:0a:47:8f:9e:a2:
2f:72:20:43:84:99:51:c9:b0:e8:f7:af:74:b1:32:8a:b7:b2:
15:8a:1b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:19 2026 by rpki-client