Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
File: nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json)
Hash identifier: nZBvstAvkf5u3EalXLFHJbThQ0IULQ5HToV7bfVEuCI=
Subject key identifier: A0:78:64:E9:7B:96:74:D4:E7:8B:49:9E:26:BF:DC:5C:E4:5E:4E:87
Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
Certificate issuer: /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Certificate serial: 019D284E4BC6FD70A9972347A81B1E738240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
Manifest number: 12D1
Signing time: Thu 26 Mar 2026 04:01:52 +0000
Manifest this update: Thu 26 Mar 2026 04:01:52 +0000
Manifest next update: Fri 27 Mar 2026 04:01:52 +0000
Files and hashes: 1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: tHWKoaUQhzdvrMVU/KsZt2J0z6Gxv/fz+xBDUBvldeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4b:c6:fd:70:a9:97:23:47:a8:1b:1e:73:82:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Validity
Not Before: Mar 26 04:01:52 2026 GMT
Not After : Mar 27 04:01:52 2026 GMT
Subject: CN=a07864e97b9674d4e78b499e26bfdc5ce45e4e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:43:e0:be:26:81:28:d5:ca:b7:ed:f0:fe:db:
81:b0:bd:86:af:32:27:2e:5c:98:65:fa:88:45:48:
27:ef:4b:75:dd:4c:83:d1:bb:63:1c:8e:ab:3c:13:
dc:36:8e:ca:97:d3:fb:1e:19:49:c4:9b:6d:61:0e:
ea:f3:e6:04:4c:aa:c7:cc:60:2b:de:79:75:ee:91:
d1:18:a6:25:19:d2:19:6d:fe:fb:75:5d:de:08:95:
f6:bf:8f:08:b6:33:d3:a8:28:44:b0:2c:49:1c:bf:
02:e3:77:b2:13:6e:a4:bf:e0:76:55:cc:3a:1f:9c:
10:66:ca:d0:77:5b:a1:70:65:4b:e9:1e:d3:89:e8:
24:95:f8:bc:6c:da:6a:44:d1:84:9b:03:37:60:28:
0e:9a:f2:2d:6e:a6:2b:3d:41:0d:59:fe:3d:c5:04:
68:4c:f5:cb:43:e3:d4:f8:6f:6a:98:bd:75:74:6b:
9f:54:89:a3:66:a3:8e:25:9a:05:2c:ed:39:f3:34:
f5:7e:e1:bb:89:85:0a:0b:90:c8:7d:fe:4d:e3:4b:
28:23:9b:21:77:24:b1:65:e0:54:9f:db:93:4f:b4:
2e:f2:85:8e:c0:48:f9:c5:12:8e:21:d8:37:ca:cd:
c0:83:29:44:c9:87:5d:0e:53:03:01:96:f6:ba:27:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:78:64:E9:7B:96:74:D4:E7:8B:49:9E:26:BF:DC:5C:E4:5E:4E:87
X509v3 Authority Key Identifier:
keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:91:47:c3:fa:d4:2c:48:e0:7e:ff:b0:7c:88:3c:f1:18:48:
21:ee:cd:e9:c7:c4:c6:79:c1:b5:da:55:cb:61:de:9e:96:2a:
93:0e:a2:66:43:3e:22:20:0c:b5:e2:b7:12:5a:63:8f:1a:f3:
65:64:7d:2e:93:9f:8e:20:c8:e8:48:1f:9e:93:f5:e7:bd:9f:
73:c0:57:f7:0b:4b:c0:e3:a2:e6:45:a3:20:f3:91:40:58:8e:
42:c7:55:4e:68:3c:67:14:2b:63:05:d2:c5:75:31:a8:89:d1:
f2:06:06:59:52:19:d7:d2:76:20:6b:c9:32:be:e8:55:21:2e:
d6:c4:1a:74:a6:0d:90:d5:85:2e:7e:e3:88:bb:d8:39:4a:98:
89:66:86:f7:aa:0b:a3:79:b6:c3:42:12:d1:37:b6:f0:c6:c9:
9a:18:f0:e8:e7:ec:c2:50:ca:bd:08:0c:9d:cb:4c:58:d5:8d:
39:72:0d:69:6a:c6:1c:c2:c8:62:9d:01:49:0f:01:e1:3f:28:
22:d1:dc:6a:ac:f6:ce:1d:b7:3c:59:26:fb:35:d5:ec:77:6c:
e8:b3:5a:c4:71:a4:8e:b8:2d:b7:e4:8b:8f:6c:72:c9:3e:3c:
28:3b:47:9e:1c:60:c2:4d:90:9e:cb:38:4f:72:02:2e:9e:c1:
d4:0e:e5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:52 2026 by rpki-client