Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
File: Nq6kWA8QexEmjJbqMYko1O11_5M.mft (raw, json)
Hash identifier: 9OCJddtCHzyXcrEpxkZRGwDK86AGPRoolWDH1ntA6yw=
Subject key identifier: 11:DC:AB:31:BE:36:38:D6:69:D8:AE:2C:0C:C9:54:F2:B9:E7:E2:C0
Authority key identifier: 36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
Certificate issuer: /CN=36aea4580f107b11268c96ea318928d4ed75ff93
Certificate serial: 019D284E432171D3326F3BC8EF8023517CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
Manifest number: 073E
Signing time: Thu 26 Mar 2026 04:01:50 +0000
Manifest this update: Thu 26 Mar 2026 04:01:50 +0000
Manifest next update: Fri 27 Mar 2026 04:01:50 +0000
Files and hashes: 1: Nq6kWA8QexEmjJbqMYko1O11_5M.crl (hash: e85NF8FlMlfCWdsGp37iiSKe15Dvpi1TgXzTLLmX/DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:43:21:71:d3:32:6f:3b:c8:ef:80:23:51:7c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aea4580f107b11268c96ea318928d4ed75ff93
Validity
Not Before: Mar 26 04:01:50 2026 GMT
Not After : Mar 27 04:01:50 2026 GMT
Subject: CN=11dcab31be3638d669d8ae2c0cc954f2b9e7e2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:52:c1:85:c6:55:20:d6:28:e6:b6:46:da:e1:
d7:d1:3d:b5:64:de:f3:f6:0b:25:1f:b8:26:51:89:
b0:33:92:52:44:6e:a4:a5:4f:95:8d:64:f3:a4:99:
65:15:db:35:02:59:d3:96:01:2f:1d:ef:74:d8:42:
5c:5f:e1:fd:ae:fa:35:b1:98:97:1b:29:96:fe:68:
72:01:a9:00:c0:ed:2c:ef:37:20:08:e6:1b:87:f6:
1d:30:a8:c0:41:dd:61:24:5c:66:b8:f1:a1:81:ad:
ab:89:2f:1d:9a:f4:00:85:2f:e8:cd:8e:31:97:a8:
4b:a1:c4:66:bd:7e:8e:31:5f:f2:01:57:b7:f8:29:
39:fe:23:b9:ae:2b:f4:f6:8c:eb:1a:24:ad:70:0e:
40:f6:bd:c4:78:0d:a7:a9:12:0e:91:4e:c5:1e:ef:
c6:39:93:be:bb:73:2c:28:df:ab:80:be:87:d6:40:
58:2b:88:dd:e6:d3:1a:39:cd:8e:7a:f9:c7:3f:e2:
37:e3:66:46:60:70:6e:30:fb:60:fc:41:11:07:b8:
17:23:4f:e1:78:dc:19:5d:9e:37:67:81:2c:6a:79:
76:4e:4a:88:77:c4:ef:f1:1b:b0:27:af:51:51:e1:
26:92:e6:83:0c:7c:69:3c:00:b3:9c:2e:85:1a:a9:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DC:AB:31:BE:36:38:D6:69:D8:AE:2C:0C:C9:54:F2:B9:E7:E2:C0
X509v3 Authority Key Identifier:
keyid:36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:81:c7:fb:0a:d3:37:7c:6c:cd:7e:3f:a3:63:b2:fa:85:52:
23:8d:c4:96:c6:ce:47:26:c7:96:5e:81:46:fb:4f:8a:b0:e4:
0b:3e:1b:09:01:43:96:d9:a5:6a:69:d3:e7:ff:89:a0:41:ac:
57:3f:03:52:0c:57:b6:ec:87:22:63:d7:ee:90:79:dd:6d:43:
c4:0d:c0:91:c7:89:93:4d:35:6e:63:25:2a:39:fe:e3:6a:1e:
d3:63:a3:e8:10:5b:78:eb:b7:f0:88:3d:c5:bf:22:25:74:a1:
b0:ee:46:0f:2b:85:6a:7b:a4:7f:99:88:fc:f5:57:37:50:25:
9e:17:d4:85:d3:0d:12:a0:38:b7:ac:5d:41:ca:36:96:9e:c9:
82:ae:87:ea:76:1a:ec:4c:c2:2a:23:a3:b2:66:79:2e:c4:8c:
32:50:c0:f1:33:b6:8e:f8:b8:92:65:7d:ff:37:28:71:bf:5b:
0c:ae:be:81:26:27:0b:20:50:be:aa:85:7e:7a:66:77:ce:bc:
91:74:e8:48:b6:79:3c:df:11:05:a0:79:00:87:f0:c7:fe:70:
93:75:53:c0:26:87:8d:46:9a:b5:01:f1:74:08:f3:e5:9c:f7:
2a:97:6e:be:72:cd:ab:02:3b:03:8e:db:ab:5c:0b:82:c8:3e:
1c:5a:2d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:03:08 2026 by rpki-client