Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
File: NHoE4awkx5d2NHg55RNMmqo4v1c.mft (raw, json)
Hash identifier: Xi4lq3RuZfMRULs3VfdfnCi2PXCDE/vNuzTf3efPxyU=
Subject key identifier: 2C:5F:A5:A9:A7:EB:80:84:94:35:C3:B3:69:72:43:67:2A:B5:56:94
Authority key identifier: 34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
Certificate issuer: /CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Certificate serial: 019D2771ECD67388133167002CEF78FC8061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
Manifest number: 13CB
Signing time: Thu 26 Mar 2026 00:01:10 +0000
Manifest this update: Thu 26 Mar 2026 00:01:10 +0000
Manifest next update: Fri 27 Mar 2026 00:01:10 +0000
Files and hashes: 1: NHoE4awkx5d2NHg55RNMmqo4v1c.crl (hash: 4plw5I9KqoG3zClqBmMg71lysM/rwmW+jdFXE6hhgEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ec:d6:73:88:13:31:67:00:2c:ef:78:fc:80:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Validity
Not Before: Mar 26 00:01:10 2026 GMT
Not After : Mar 27 00:01:10 2026 GMT
Subject: CN=2c5fa5a9a7eb80849435c3b3697243672ab55694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:45:24:b4:24:0f:8a:d0:2e:19:e5:e9:1d:
1c:3f:64:bb:06:63:1b:f7:ef:b9:f7:d0:f2:25:de:
c3:e8:1d:c3:75:bb:4e:39:e7:70:01:75:1d:a8:e9:
d4:4a:d9:46:31:44:c5:58:38:1f:b1:fc:75:5d:7b:
9c:55:b4:80:ac:9b:c8:59:f2:a1:26:0a:cb:9c:38:
10:d9:f6:27:d3:38:67:4a:e4:a3:32:fe:ca:30:c6:
b9:79:7c:06:12:e7:f2:bd:c9:73:39:29:47:36:34:
e6:19:95:2e:4d:f9:0c:a2:0b:9c:aa:19:9f:aa:65:
71:ce:a0:4a:84:81:4f:99:4f:e9:a2:f2:77:2f:c0:
79:22:bb:42:12:c2:0c:4d:1d:c0:70:70:cd:e8:f5:
33:1b:53:d5:c1:22:92:1f:b9:f7:89:5c:81:7d:e7:
db:19:91:4b:db:ac:7c:e9:87:e5:a6:14:a2:e0:4f:
7d:27:e4:a0:d1:7d:bf:55:28:6c:5d:98:d2:67:b2:
cd:eb:1e:f0:49:20:c7:46:1a:28:1b:92:19:6b:3d:
30:63:e4:d3:18:17:e6:40:78:76:05:56:60:03:86:
34:62:80:07:ce:8e:d9:f9:07:33:26:99:0a:9a:46:
6b:60:dc:e6:18:8b:b9:4d:d5:72:6c:39:9d:d8:93:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5F:A5:A9:A7:EB:80:84:94:35:C3:B3:69:72:43:67:2A:B5:56:94
X509v3 Authority Key Identifier:
keyid:34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fa:a8:4c:dd:ee:b8:7a:76:43:be:4c:93:11:56:59:80:f4:
4c:f4:8e:4d:22:6c:24:8e:52:03:9b:47:35:91:47:61:74:cb:
c8:3b:43:2e:d7:bb:00:86:20:70:50:b2:7b:8e:95:e6:63:22:
25:e0:93:5f:82:53:9b:b0:3d:91:58:2f:89:e3:2f:5a:a2:6b:
cf:42:b7:70:5e:e6:90:88:06:7f:7a:6d:a7:4e:7a:ff:c1:e8:
f7:82:5e:e0:25:1e:b3:49:03:67:48:45:10:f3:6e:48:0a:61:
89:0a:42:7e:9c:e3:fc:f4:8b:66:c9:92:93:6e:16:24:b4:a9:
16:71:90:ae:48:2f:b4:7f:47:d4:52:da:7f:5d:48:5f:96:73:
99:c6:11:26:8d:13:12:53:1a:93:9c:f0:35:eb:dc:db:63:48:
c3:9e:4d:c4:b4:bc:b5:99:47:6c:30:a1:d4:f3:fa:99:4e:6c:
ee:b0:7d:99:05:84:74:eb:c1:d4:c8:80:bf:b8:2e:2b:70:6c:
3a:3d:fd:e7:56:82:e5:27:8a:0e:ee:41:4a:6a:f1:64:ff:e1:
86:a3:75:69:1b:f6:7b:eb:4d:11:86:48:a5:a8:27:38:5a:c6:
9a:84:0a:75:16:45:c5:0d:63:e4:5b:71:87:0b:ab:07:0f:8a:
4a:78:96:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:16 2026 by rpki-client