Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json)
Hash identifier: Oe4sN5GGyCzwXJm1bWsEkOPo3Fs4x+D2Z1sASroETSo=
Subject key identifier: 01:5E:53:61:02:D6:58:96:DE:B0:CB:D4:69:28:92:7C:F0:51:6F:8F
Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Certificate serial: 019D258401C45F8EF19CB4FF1DE161E17B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
Manifest number: 08D7
Signing time: Wed 25 Mar 2026 15:01:41 +0000
Manifest this update: Wed 25 Mar 2026 15:01:41 +0000
Manifest next update: Thu 26 Mar 2026 15:01:41 +0000
Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: S/8VDHFdpyB+yo4uRYdbVyul7CS+EdeyYjEh70qYOV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:01:c4:5f:8e:f1:9c:b4:ff:1d:e1:61:e1:7b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Validity
Not Before: Mar 25 15:01:41 2026 GMT
Not After : Mar 26 15:01:41 2026 GMT
Subject: CN=015e536102d65896deb0cbd46928927cf0516f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:32:82:60:66:37:b7:a5:30:ff:e7:ce:56:09:
ef:61:5b:d9:f0:e5:da:a8:37:7b:16:dc:9e:59:31:
3f:36:e3:c3:46:4a:1c:05:95:01:e3:ea:1b:fc:b9:
8f:fd:0a:bb:93:5d:78:9d:a7:d0:66:f3:83:ff:e3:
fd:85:6a:78:42:d0:24:cb:c2:26:45:14:57:34:91:
b9:2a:34:37:45:70:4b:d7:3e:bf:6b:d2:bd:3b:b1:
c4:ea:13:d7:4c:2c:71:1d:04:ca:88:50:06:dc:76:
43:d8:47:c1:51:89:6a:c3:05:ac:f6:79:76:83:03:
1e:28:52:13:5e:78:13:51:eb:1f:e6:fd:a1:81:9f:
8d:a5:d1:52:f2:5e:e7:02:15:df:19:df:f5:68:fc:
73:3b:e4:e2:9d:50:a2:2a:b3:eb:cd:1e:0e:49:91:
95:c5:ad:af:df:07:c8:64:4a:20:c0:b1:49:31:20:
00:e7:b4:05:1d:ff:44:15:59:d4:9b:c4:87:9d:8b:
2d:a5:51:69:c6:ea:ee:6a:19:c3:7b:15:16:5d:b5:
cf:fb:1f:e7:28:d9:88:a9:47:20:92:00:e1:ef:b5:
27:85:91:5f:92:49:b0:ca:f7:61:9b:77:6d:ed:84:
e8:01:fc:09:c0:10:99:45:18:37:92:5e:f0:db:a7:
fc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5E:53:61:02:D6:58:96:DE:B0:CB:D4:69:28:92:7C:F0:51:6F:8F
X509v3 Authority Key Identifier:
keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d1:a8:26:95:89:29:c9:0a:b0:99:80:db:e1:1b:6e:50:26:
72:21:69:30:da:cf:58:cc:88:5e:d0:e5:48:3b:3e:e2:39:8c:
e4:48:94:0b:7e:56:92:7d:b4:09:e6:de:6f:06:dc:2f:64:a8:
03:9d:63:72:10:84:f9:41:76:d0:13:65:b9:c4:f4:e3:19:9d:
5e:50:55:02:a0:19:98:f2:23:d6:76:26:f0:b4:02:21:6f:26:
0d:14:98:08:5f:0f:39:b3:83:ed:08:e3:e9:03:18:33:e8:56:
3f:28:de:d8:29:44:e6:97:4f:7c:76:f4:e7:6a:f7:fd:46:7b:
0e:03:c7:4d:0d:e7:75:1e:ac:9a:1b:5c:6e:c1:57:6d:01:1f:
10:36:17:37:99:17:1a:08:44:8a:c6:1f:08:e8:53:96:a1:b0:
b7:85:89:a5:2d:95:fc:89:04:e7:39:da:a0:40:90:f8:85:40:
36:69:0e:45:59:18:ef:e5:e4:23:fd:81:c5:58:64:10:c4:3e:
c4:4c:a7:ef:ec:48:ee:96:bc:9b:95:2f:7e:9a:53:d3:3f:1d:
7a:6a:2e:c5:51:00:39:c6:db:55:10:03:80:ab:e1:67:db:3b:
80:cf:8f:0f:6e:35:f0:29:6c:c0:c7:b4:e0:7a:4a:02:fb:18:
31:93:d1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:10 2026 by rpki-client