Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
File: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft (raw, json)
Hash identifier: 2blrmE4vxPFbhQDAFklaUrRhHisKlmvtjZMG4BmtUaU=
Subject key identifier: 33:AB:06:0E:E8:25:79:49:BC:26:C8:5F:19:CB:96:E4:4C:4B:44:4F
Authority key identifier: 9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A
Certificate issuer: /CN=9cc32711ed68fba0584992943f9add1b1e0e873a
Certificate serial: 019D28842D2E47966625E957A1C46AAAFE61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 05:00:44 +0000
Manifest this update: Thu 26 Mar 2026 05:00:44 +0000
Manifest next update: Fri 27 Mar 2026 05:00:44 +0000
Files and hashes: 1: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl (hash: Snv5C/EKQXgxw2fF8U0ze+ciCidymWU/KQlpT2RE16k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:2d:2e:47:96:66:25:e9:57:a1:c4:6a:aa:fe:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc32711ed68fba0584992943f9add1b1e0e873a
Validity
Not Before: Mar 26 05:00:44 2026 GMT
Not After : Mar 27 05:00:44 2026 GMT
Subject: CN=33ab060ee8257949bc26c85f19cb96e44c4b444f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:ce:be:93:a7:70:c8:e2:b2:8a:f5:3b:b0:
06:6c:65:a9:d7:ea:85:5c:c1:d2:13:41:c6:e0:27:
98:ce:72:9b:a7:1e:70:67:50:cb:bc:84:b1:08:b1:
7a:f6:68:be:5c:76:6a:5a:ac:06:56:b6:7b:f5:44:
9b:6a:08:31:a9:d3:e8:1a:4f:d9:65:7b:f8:df:52:
89:61:37:2f:4b:dd:b5:cf:2c:09:56:50:c8:93:f9:
78:5d:26:49:be:51:0d:63:f0:a4:40:ab:6d:e9:55:
b3:5a:19:dd:bb:0d:92:d7:f7:fd:12:81:d3:54:66:
36:24:87:57:35:47:43:63:a8:ac:b7:7f:c6:25:3d:
f8:da:58:68:ff:a9:36:0d:b8:de:7b:47:e8:f7:dd:
16:a3:41:0e:97:31:ba:50:c3:38:fe:8e:54:24:c0:
4f:fc:db:38:c2:03:f1:a9:4d:1b:04:22:f9:33:06:
45:74:36:ca:0f:a0:26:44:d2:f2:d7:e2:32:d9:eb:
6e:75:22:3c:fd:97:ce:de:39:12:e1:4b:43:37:42:
69:0a:ea:67:9a:f4:b2:6c:c8:61:44:cb:fb:d2:18:
f9:8d:45:d7:d6:cc:97:01:2d:ac:a4:1c:0f:55:69:
62:93:13:1a:77:2e:e1:ec:76:a2:50:50:1d:f8:a0:
8e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AB:06:0E:E8:25:79:49:BC:26:C8:5F:19:CB:96:E4:4C:4B:44:4F
X509v3 Authority Key Identifier:
keyid:9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f7:b9:e5:74:fa:df:54:57:fb:a3:aa:34:6e:2d:88:6f:22:
b9:4a:2a:62:c7:f9:29:06:79:39:c7:e7:02:74:f6:35:40:11:
4b:46:d4:3f:9a:84:f0:e1:1c:dd:c1:5a:0b:5b:c4:a1:65:14:
ee:2b:ac:09:3e:14:9d:b2:b2:4c:87:07:ef:57:55:93:12:c4:
b5:50:90:30:c0:15:2b:d1:86:2b:75:84:90:12:9d:51:f6:90:
6f:60:a8:53:8e:4e:de:f4:0f:80:f8:27:fc:17:7d:20:a1:1f:
22:fc:0d:1c:2b:65:81:1a:67:0e:f7:45:bd:77:9d:ce:ea:69:
19:32:52:c4:12:c8:a2:9a:95:bb:8f:cc:41:4c:e6:2f:bb:c2:
1e:4d:0f:d1:cf:e5:70:41:90:5f:7e:7f:02:2f:91:14:8d:d3:
4a:c1:58:67:50:2b:98:a4:12:76:ba:41:80:52:2f:b9:49:5b:
4b:18:43:58:19:2b:63:bb:26:39:07:0c:46:e2:55:98:d0:9e:
48:f6:b6:f0:23:43:db:1c:fb:1e:66:3a:4c:8c:37:f6:5f:f2:
1f:68:cb:5c:60:12:20:a8:eb:db:b2:b3:6b:f1:c6:45:67:8c:
09:a3:ba:95:d6:04:26:82:c3:18:76:30:b4:c9:80:e6:a3:d2:
fd:c0:07:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:19 2026 by rpki-client