Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
File: nTW9eP7OI2XlsT9SOIfS2NakU_k.mft (raw, json)
Hash identifier: 6PcoJqn6x9Ebdob4QOmDJ0Glh3XCiAdxNmkQM6LQMI4=
Subject key identifier: A2:1B:2B:81:8D:0D:3B:F6:7D:17:C8:50:F4:42:30:71:7C:88:2F:21
Authority key identifier: 9D:35:BD:78:FE:CE:23:65:E5:B1:3F:52:38:87:D2:D8:D6:A4:53:F9
Certificate issuer: /CN=9d35bd78fece2365e5b13f523887d2d8d6a453f9
Certificate serial: 019D288456343259CCD3E3D73DBA823953F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTW9eP7OI2XlsT9SOIfS2NakU_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
Manifest number: 02A9
Signing time: Thu 26 Mar 2026 05:00:54 +0000
Manifest this update: Thu 26 Mar 2026 05:00:54 +0000
Manifest next update: Fri 27 Mar 2026 05:00:54 +0000
Files and hashes: 1: nTW9eP7OI2XlsT9SOIfS2NakU_k.crl (hash: bU8E1C3bUp6irgmlvQkexRGAGLzla6Rflo4u+OA2rsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTW9eP7OI2XlsT9SOIfS2NakU_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:56:34:32:59:cc:d3:e3:d7:3d:ba:82:39:53:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d35bd78fece2365e5b13f523887d2d8d6a453f9
Validity
Not Before: Mar 26 05:00:54 2026 GMT
Not After : Mar 27 05:00:54 2026 GMT
Subject: CN=a21b2b818d0d3bf67d17c850f44230717c882f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:50:f5:94:67:2f:c8:70:6c:35:45:86:7f:
21:98:72:5f:99:8b:31:d0:c2:a6:e3:1e:b1:8b:73:
20:f2:28:00:75:30:a3:74:aa:60:c6:a2:1e:67:eb:
08:7d:12:77:92:e6:aa:2a:ad:3c:fc:4e:66:b2:f5:
f2:e7:fe:26:b5:f2:df:4e:29:7d:71:b4:5f:d9:16:
4f:f2:85:bc:e7:26:81:ab:80:0e:25:71:b5:a4:e0:
b8:a2:56:10:7f:e2:11:e2:23:9b:40:2f:26:2d:03:
f4:6a:66:d5:67:31:c0:2f:28:18:3b:0a:0a:fc:91:
58:c5:e7:0b:26:8d:25:b1:70:0b:f5:b4:de:58:00:
08:1d:cd:a9:34:10:4c:2a:ec:e2:da:bf:91:d1:90:
08:72:61:10:bf:f2:5f:f1:b2:64:e8:93:d3:74:d6:
08:e8:53:00:c7:0a:34:38:15:7b:57:55:ba:60:05:
d6:41:c4:8c:19:3e:3c:94:a7:a1:f8:13:96:11:46:
25:af:45:cd:0c:24:f4:88:08:1a:ae:4c:fe:cb:6f:
c5:54:73:9b:2d:b5:f2:d2:63:b5:3f:0b:d5:73:fb:
21:ca:24:d1:6a:87:ae:63:2b:f4:24:9b:22:58:60:
08:de:a8:c0:03:e0:b9:45:60:08:01:f8:d2:7b:4e:
f4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1B:2B:81:8D:0D:3B:F6:7D:17:C8:50:F4:42:30:71:7C:88:2F:21
X509v3 Authority Key Identifier:
keyid:9D:35:BD:78:FE:CE:23:65:E5:B1:3F:52:38:87:D2:D8:D6:A4:53:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTW9eP7OI2XlsT9SOIfS2NakU_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f3:1b:35:f3:1c:6b:35:5d:20:93:51:c8:83:f8:e8:10:fd:
18:d6:0c:55:ca:4c:ca:c8:29:92:a3:1f:bc:43:b7:68:6f:10:
41:56:92:d3:5e:d3:6b:ad:65:d3:2b:80:b4:27:51:c7:13:0c:
f2:28:7b:47:38:26:8b:8a:63:92:3e:60:23:b3:13:e9:e2:59:
05:03:60:2d:e3:59:e9:cb:09:67:ef:93:0c:85:f4:07:35:3b:
59:4d:b9:9e:b1:f0:b8:25:a6:55:f1:d7:f7:5d:b9:8d:00:a2:
8d:d0:20:d3:03:89:52:32:5c:3d:8d:ea:d3:b3:80:31:03:eb:
a2:f4:9a:eb:1b:79:d4:da:22:35:ba:b8:36:6c:74:b7:20:47:
86:58:f0:f1:f7:af:47:8b:b4:ca:65:8e:a9:e8:aa:bb:7a:8d:
2f:2e:4b:05:34:58:31:f9:31:a8:70:9d:fa:9e:02:69:52:11:
4b:03:f4:b9:76:9d:0e:f2:6c:ae:b1:98:ed:54:e1:22:05:8e:
7e:fb:7b:7e:5b:9d:57:f9:a9:8b:ea:68:b0:cd:9c:a6:12:95:
2e:51:49:00:b6:0d:64:52:c1:bc:b5:ff:38:43:e2:e8:f9:c4:
c3:e0:bd:3f:a1:17:80:cf:d2:ad:03:c0:a2:5d:67:3e:5a:63:
2d:9d:fe:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:30 2026 by rpki-client