Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
File: Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft (raw, json)
Hash identifier: DCSu0P2dUKZse9aOV6Temx8YJ/pZS5UAXIDmEBM44co=
Subject key identifier: 72:71:C7:1A:03:44:BA:B2:FE:AD:6A:3C:16:43:1F:A8:FA:BA:D1:A1
Authority key identifier: 36:3E:43:7F:6B:68:34:B0:84:74:7E:AF:76:D8:D2:60:A7:9B:FC:8B
Certificate issuer: /CN=363e437f6b6834b084747eaf76d8d260a79bfc8b
Certificate serial: 019F9512232C6EB86E0478F8994B6E0A8B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj5Df2toNLCEdH6vdtjSYKeb_Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
Manifest number: 93
Signing time: Fri 24 Jul 2026 17:00:21 +0000
Manifest this update: Fri 24 Jul 2026 17:00:21 +0000
Manifest next update: Sat 25 Jul 2026 17:00:21 +0000
Files and hashes: 1: Nj5Df2toNLCEdH6vdtjSYKeb_Is.crl (hash: FgKBzi2yYwgDwfIVBlUWbw6c6hFNaJs1Isw9YqQMrIQ=)
2: QTwY7hZ5jhbuRgKMO0Ou2fKamBU.asa (hash: AlP7J188PqhkPU3RkVEeK3sJgESC4Fbnn4Z98OFzkN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj5Df2toNLCEdH6vdtjSYKeb_Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:23:2c:6e:b8:6e:04:78:f8:99:4b:6e:0a:8b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363e437f6b6834b084747eaf76d8d260a79bfc8b
Validity
Not Before: Jul 24 17:00:21 2026 GMT
Not After : Jul 25 17:00:21 2026 GMT
Subject: CN=7271c71a0344bab2fead6a3c16431fa8fabad1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:e4:4d:10:94:c2:5c:66:93:14:ce:b0:b1:
72:3e:18:45:2a:10:8b:71:d3:72:dc:2a:0b:31:1d:
58:36:aa:d1:96:4e:13:d7:50:2f:30:1f:e4:6f:21:
06:13:14:4e:ba:69:46:ea:42:36:43:75:69:02:a2:
72:d7:5f:4f:e2:f3:22:6c:76:74:b3:e5:bb:0d:74:
8b:ae:9d:67:6e:f8:b0:1c:a3:c5:81:88:04:e6:e4:
e9:63:d1:ad:31:a4:bf:ab:51:12:00:07:7f:a3:27:
23:3d:ec:98:04:05:9a:60:67:e8:f3:ca:c4:7c:2f:
bc:01:c3:31:83:a8:20:b2:a5:97:4e:8e:c3:08:ac:
84:8e:3b:58:83:52:53:b9:cd:a6:1b:ae:88:9c:8f:
fa:be:6c:4f:6f:96:8d:4d:be:45:d6:2a:f9:e4:07:
b5:ab:ae:ee:6e:31:3d:9e:a6:67:4f:8c:b7:10:9a:
5d:b2:13:11:70:64:51:9b:d4:65:86:43:69:0f:e1:
cc:cf:e5:9f:41:79:0f:4d:d7:c4:cf:fe:2b:26:a7:
50:2b:c0:51:8c:da:44:3e:e8:6d:89:d9:e8:d2:34:
76:97:7f:f2:49:45:dc:fa:d0:fa:9a:1a:29:ac:49:
8f:a7:25:14:b1:3d:be:f1:bc:9a:f9:55:b9:d8:b3:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:71:C7:1A:03:44:BA:B2:FE:AD:6A:3C:16:43:1F:A8:FA:BA:D1:A1
X509v3 Authority Key Identifier:
keyid:36:3E:43:7F:6B:68:34:B0:84:74:7E:AF:76:D8:D2:60:A7:9B:FC:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj5Df2toNLCEdH6vdtjSYKeb_Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:06:13:d2:e2:c4:81:f7:52:1f:99:85:a4:b8:4a:f8:1b:e7:
43:fd:02:fa:a3:76:b6:d0:fb:ed:7f:83:2c:35:d5:97:d9:b6:
e5:36:9b:92:56:10:3f:87:27:f4:27:3f:5e:dc:b3:ed:38:14:
8f:47:2e:33:97:ad:32:f6:7c:f4:82:be:c7:16:f9:29:14:c2:
2d:47:69:a5:d9:98:56:18:cd:4b:88:21:d1:5d:31:8a:85:15:
f6:e1:e3:4d:0e:4a:ae:e3:9b:16:6e:af:1d:10:56:58:ef:dd:
e6:ac:9e:f6:27:dc:a9:a8:df:aa:f5:ef:e6:c4:67:05:ed:be:
b1:79:55:1c:48:bb:d3:32:59:5d:c5:d8:26:a0:2e:ca:b9:fe:
45:a5:d5:64:22:a3:76:ef:5e:77:bd:e3:86:27:72:d5:b8:a3:
4c:19:f6:11:5e:1d:4c:ca:fd:84:16:8e:25:a7:bc:b9:91:6f:
3f:4c:d1:95:a5:2e:06:78:c2:a5:34:56:27:9e:31:ca:b6:fe:
06:de:0d:1d:ee:57:29:52:07:9b:05:bd:8a:5d:58:3e:14:8a:
e8:55:5e:d4:12:c2:02:49:0b:a9:23:db:c0:14:f6:5e:34:bd:
cd:ee:3f:d7:ec:92:b5:15:b8:75:61:3a:25:96:25:35:cd:c0:
0c:06:9b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:17 2026 by rpki-client