Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
File: nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft (raw, json)
Hash identifier: /6qbBOGQBVxhz3KQpuRgZmbiwq9yzXqBwocvg2Hn1W8=
Subject key identifier: 29:92:B8:77:35:B6:F6:FA:E8:C2:1B:5E:B2:99:A9:74:AF:65:BD:42
Authority key identifier: 9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
Certificate issuer: /CN=9e3f1579ae176662d663a3834c0fef824cee033c
Certificate serial: 019D28166F49B6034F9BAC4D14A351F6721B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
Manifest number: 05B5
Signing time: Thu 26 Mar 2026 03:00:52 +0000
Manifest this update: Thu 26 Mar 2026 03:00:52 +0000
Manifest next update: Fri 27 Mar 2026 03:00:52 +0000
Files and hashes: 1: nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl (hash: JqFGen4mWASLVVGjK+F/aLrIG2ASimQlgvEVope25PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:6f:49:b6:03:4f:9b:ac:4d:14:a3:51:f6:72:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3f1579ae176662d663a3834c0fef824cee033c
Validity
Not Before: Mar 26 03:00:52 2026 GMT
Not After : Mar 27 03:00:52 2026 GMT
Subject: CN=2992b87735b6f6fae8c21b5eb299a974af65bd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:56:f3:37:8e:01:24:68:95:75:88:01:8f:7f:
27:0e:d1:46:b9:4b:b8:1a:04:1c:5b:9c:bc:0a:38:
e7:d8:0f:42:54:62:ab:cb:8d:cf:a3:21:5d:36:bb:
79:41:b1:e5:5f:d9:fb:65:79:9c:95:3c:85:39:48:
43:56:13:7c:07:e8:fc:8c:49:d1:1c:e2:a5:5f:9f:
7b:9a:4e:61:04:72:2e:ed:ba:78:dc:90:0e:fc:dc:
39:41:56:ca:e0:3a:ab:a0:31:df:92:de:91:15:34:
66:1c:f4:82:69:7b:12:f8:98:e3:34:e0:96:ea:14:
ab:10:dd:02:91:ea:de:a1:18:b4:d2:8d:b2:76:f0:
81:d3:0f:a0:d6:77:ea:b4:90:ef:60:b3:12:2f:09:
73:e7:54:4f:0e:73:3c:c4:92:43:37:07:a0:dd:fb:
25:47:ed:f7:1f:1a:ca:64:07:cc:57:42:e1:10:33:
45:d9:ef:86:88:05:5c:fc:3b:8d:f4:bd:63:a5:63:
cc:ca:01:94:c8:2e:ae:2d:ed:12:0b:50:64:ab:88:
41:ef:74:c6:49:bd:88:bc:47:f5:2f:07:b3:48:a5:
f2:03:27:d4:bf:64:6c:e9:eb:8e:f6:39:83:d7:1c:
3f:12:61:db:07:93:74:cd:31:2c:11:7e:e9:c6:40:
11:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:92:B8:77:35:B6:F6:FA:E8:C2:1B:5E:B2:99:A9:74:AF:65:BD:42
X509v3 Authority Key Identifier:
keyid:9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:52:8a:71:f4:40:6b:ea:07:b9:bf:2d:14:67:3a:8d:c6:11:
f3:30:c8:90:64:f8:6f:3e:3e:f4:d2:0a:64:07:d2:ae:9d:08:
c3:78:30:b0:fc:40:42:3d:e6:0e:46:c0:9e:70:08:1c:61:45:
cf:79:56:e2:96:9e:17:43:53:22:c3:e3:a1:25:ef:9b:2f:91:
a6:6d:21:86:e3:a4:32:67:ac:0c:95:ce:fb:69:de:35:12:f6:
a4:e8:43:5a:0f:1b:7c:0c:2d:11:81:09:14:b6:1b:ff:ee:75:
c5:2b:96:af:09:0f:bd:94:a5:39:77:ef:6a:30:f6:68:69:6f:
15:04:4c:1a:32:83:01:d0:1b:0d:c4:d7:ba:89:cd:13:ba:a6:
fc:76:c5:bf:3f:11:4d:ab:42:cd:74:8f:f0:f8:56:0d:28:3e:
fd:b6:ac:68:81:88:be:28:87:59:17:ac:84:d1:47:a8:78:40:
d1:69:0b:f0:ff:61:27:95:42:f6:a2:14:cc:81:f7:3b:a7:0a:
2f:97:05:0d:5c:c0:68:77:08:c5:df:c8:ec:08:08:4e:50:bb:
e6:15:2d:72:02:6b:a0:08:9f:ee:d5:ba:52:a0:40:8d:cd:d7:
e9:79:46:5f:fb:b4:a2:ca:fd:68:65:af:32:bf:c1:df:25:a5:
14:a6:c4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:30:03 2026 by rpki-client