
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft
File: nlY8Qm0ark7R5_WVNnSQIgiehHk.mft (raw, json)
Hash identifier: 6+nV0Uq3vZHmfXikXwu2AnnV92VzgVeKiy0un/viOoo=
Subject key identifier: C7:FF:DA:F2:E4:54:0F:99:43:58:1B:2B:67:AA:04:10:E5:9F:31:5E
Authority key identifier: 9E:56:3C:42:6D:1A:AE:4E:D1:E7:F5:95:36:74:90:22:08:9E:84:79
Certificate issuer: /CN=9e563c426d1aae4ed1e7f59536749022089e8479
Certificate serial: 019D2695CE7C33A50C748444CF659E80394C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft
Manifest number: 0D48
Signing time: Wed 25 Mar 2026 20:00:44 +0000
Manifest this update: Wed 25 Mar 2026 20:00:44 +0000
Manifest next update: Thu 26 Mar 2026 20:00:44 +0000
Files and hashes: 1: nlY8Qm0ark7R5_WVNnSQIgiehHk.crl (hash: utG7rN3a3g4B3H43vOMrVtiKsOuaUuXHnVMfwiJgZWc=)
2: uoPZT_uIWtt1y75pLuVRiaAOCA8.roa (hash: 9YrNpBfyPkS8WM22E6fKQ7KTx+jlfiKDKpzF0Ults2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ce:7c:33:a5:0c:74:84:44:cf:65:9e:80:39:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e563c426d1aae4ed1e7f59536749022089e8479
Validity
Not Before: Mar 25 20:00:44 2026 GMT
Not After : Mar 26 20:00:44 2026 GMT
Subject: CN=c7ffdaf2e4540f9943581b2b67aa0410e59f315e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:b4:a3:30:18:cf:e7:d9:c6:f7:00:3d:05:
ac:10:bc:c4:f6:0c:3c:36:1b:fe:17:e9:f5:a7:be:
fd:bc:1a:10:dd:01:2d:2a:b6:62:85:ac:4d:3b:5b:
ad:04:3e:ed:f5:7a:ab:25:d6:06:2b:a2:53:76:98:
ec:10:be:f2:41:9e:ab:86:de:98:8d:3b:82:d8:ce:
4e:a2:93:84:b4:06:a2:a8:ff:9e:ec:40:d4:8a:dc:
45:b5:c1:89:55:d7:bf:5f:18:44:5f:eb:14:a4:61:
70:75:b1:f8:89:b8:b2:3c:7f:31:b2:a5:8d:f6:84:
d6:20:72:f7:c8:10:fd:4d:90:59:7e:60:62:55:06:
00:f5:0d:99:8c:ac:ea:c9:39:6c:2b:2d:18:e0:7a:
2f:7e:a7:6f:0d:c4:79:54:d7:29:9c:19:ad:2b:ec:
fa:43:64:16:7b:99:e6:eb:ea:aa:34:0f:f5:d4:7c:
30:f3:cb:c8:c9:99:57:3f:bc:30:9e:96:56:67:93:
02:f4:11:e7:2d:18:73:8b:65:83:9b:c8:3f:11:15:
13:1c:d9:c0:bd:15:52:ec:45:d3:8a:a7:02:aa:e9:
a0:13:60:b9:da:f6:e2:31:f4:8b:89:7d:4d:8c:b0:
a1:98:fd:aa:47:0c:cb:f2:6f:0a:7f:a5:c8:02:b7:
cf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FF:DA:F2:E4:54:0F:99:43:58:1B:2B:67:AA:04:10:E5:9F:31:5E
X509v3 Authority Key Identifier:
keyid:9E:56:3C:42:6D:1A:AE:4E:D1:E7:F5:95:36:74:90:22:08:9E:84:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:91:4f:3d:3b:47:76:93:20:b5:04:44:af:50:74:57:c8:86:
7c:88:ec:d3:b6:5c:ad:2c:54:8b:50:12:60:3b:33:a5:1b:dc:
4c:74:9a:a1:80:71:f2:ba:4c:69:ee:eb:7b:05:e7:14:1b:0a:
5c:9a:a6:38:b1:0a:2d:7d:e3:ab:0c:a8:be:1e:43:f6:b0:c3:
8c:7e:45:31:7e:7f:a3:b3:9a:4b:a1:a3:a5:5f:d2:3e:73:92:
ca:2f:71:cb:be:24:d2:89:7b:59:69:9c:47:5a:5d:03:76:40:
8d:39:61:6f:73:53:e4:eb:15:b3:d4:c2:7e:13:92:fe:8a:a4:
3e:ab:0e:d9:43:9c:b9:d0:d5:f9:03:5e:3c:38:2e:de:02:a4:
e4:63:67:fa:4b:20:8b:bf:95:6b:4e:9c:7a:a1:78:09:84:e1:
87:3b:c6:a0:5a:af:c7:70:98:fb:75:6d:b1:bc:85:74:6a:9c:
53:9a:e7:ba:31:13:77:00:8c:65:f6:a0:42:0d:ff:f9:ec:47:
55:47:2b:e4:e8:f9:e7:b9:4e:13:ed:cd:f7:fc:aa:11:69:c8:
5b:65:8b:4d:87:59:c4:3e:b7:1f:6a:da:b3:21:a1:7d:b3:27:
9b:01:e9:0a:21:e7:ce:36:38:50:70:99:8f:92:d1:d1:2a:b6:
52:5f:cc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:12 2026 by rpki-client