Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
File: nD_Ua11gbBzKtVixc24mIaS8BAM.mft (raw, json)
Hash identifier: pQFQg6vBg70rR6wFjN/VPcHy3iU5qSwE15INdyWd65U=
Subject key identifier: 06:16:C7:48:2E:F2:CA:D6:16:0C:63:59:D8:70:78:2A:DC:60:7A:C8
Authority key identifier: 9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03
Certificate issuer: /CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403
Certificate serial: 019D273AEC89F1E199319FD6B597A43EFBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
Manifest number: 0B13
Signing time: Wed 25 Mar 2026 23:01:06 +0000
Manifest this update: Wed 25 Mar 2026 23:01:06 +0000
Manifest next update: Thu 26 Mar 2026 23:01:06 +0000
Files and hashes: 1: nD_Ua11gbBzKtVixc24mIaS8BAM.crl (hash: MMmD0xZXAfQwKUN/Uo1dhNxQJ2WZRde6gBdP7fKuKaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ec:89:f1:e1:99:31:9f:d6:b5:97:a4:3e:fb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403
Validity
Not Before: Mar 25 23:01:06 2026 GMT
Not After : Mar 26 23:01:06 2026 GMT
Subject: CN=0616c7482ef2cad6160c6359d870782adc607ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:15:cb:99:29:69:38:7c:8b:f8:0a:c5:d9:b7:
62:e1:2f:c0:2a:42:0d:ba:4e:2a:cd:4b:be:7c:36:
18:4d:d9:85:8f:b4:03:7b:dc:bd:8e:a5:d0:6b:17:
1e:53:1e:2f:23:28:d6:b1:c0:b7:07:1b:ff:e8:ce:
57:20:8b:3f:70:e8:01:19:59:56:1e:3c:77:78:f7:
09:f5:a3:40:cd:43:c8:cc:79:34:ba:61:56:30:73:
9b:2d:07:9f:47:b5:30:95:b3:5a:7d:23:8a:32:f8:
e5:ba:ee:76:cd:42:74:8a:0b:65:5b:66:56:8d:1c:
2d:12:be:8d:4d:49:73:77:12:08:d2:9b:9e:f0:3c:
fd:aa:26:9b:3f:37:6d:cc:0a:c3:c6:4e:3a:79:73:
10:08:66:ee:1a:d2:b8:7e:51:69:d2:a3:b5:da:71:
9b:af:bd:05:93:64:6a:68:8f:dd:18:bd:78:b2:17:
49:41:ec:91:cd:8b:82:de:e9:24:f8:8c:db:6b:5d:
f2:07:87:39:29:6b:71:93:5a:91:a8:20:13:46:75:
ee:3c:5d:fc:f7:70:48:5e:32:73:a6:bd:37:08:a9:
ca:86:ef:43:b4:11:4d:96:3f:18:b5:30:74:95:97:
f7:5b:46:ab:b8:2b:2c:f6:43:7e:e0:50:77:71:a3:
3f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:16:C7:48:2E:F2:CA:D6:16:0C:63:59:D8:70:78:2A:DC:60:7A:C8
X509v3 Authority Key Identifier:
keyid:9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6e:11:87:b7:77:c3:e3:34:7d:f9:df:c7:cf:62:8e:ea:60:
bf:e6:ab:0d:99:8c:f2:35:f9:4d:1e:08:0e:8d:6a:e7:35:c7:
0f:bf:f2:3e:4e:e3:27:27:b1:f6:40:d2:ee:23:4c:5d:4b:53:
15:f9:fb:b8:09:64:70:1a:fe:77:a4:11:2a:c0:0b:50:f8:d9:
cd:c7:af:ba:f3:99:59:c7:3a:4e:94:fc:a3:6e:ca:1b:d1:dc:
f2:5c:1f:25:68:fe:1c:c4:0f:c3:ba:31:3f:77:0c:08:1e:53:
61:73:a0:06:9f:31:45:f6:27:09:a9:4a:f6:cd:1b:0e:22:df:
db:60:6c:9e:72:06:97:a3:83:e8:b4:79:66:37:a7:97:f2:fe:
51:06:c0:b3:01:a2:d4:4d:7d:00:98:66:d4:af:eb:4b:19:35:
ab:64:d2:b8:e8:ef:70:be:b9:56:1b:42:1c:a5:08:18:a8:fb:
27:0d:3c:b7:a0:13:70:22:61:16:80:3e:a9:6a:24:a0:26:87:
53:f7:38:8c:3a:53:e8:b6:38:61:cf:6a:ac:26:38:af:65:f9:
06:ae:30:ee:17:f8:ef:f0:ab:57:ec:ef:f7:36:84:49:3b:49:
42:1e:e2:76:05:ac:ed:15:00:e7:3a:fb:0e:3f:ba:40:0c:0e:
44:18:8e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:53 2026 by rpki-client