Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
File: nPmIlqiK6PNUCut37KHxqUu9aXg.mft (raw, json)
Hash identifier: DFhSXBA1vcQvib4ff0lA91cNL/dO1MUxwwrarnH/l6A=
Subject key identifier: 3C:60:50:11:15:E9:64:3E:F8:AE:91:4F:1F:96:82:6E:03:5A:36:3F
Authority key identifier: 9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
Certificate issuer: /CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Certificate serial: 019D34886E8459C1F4F8BF941F0EFFAB21E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
Manifest number: 0A23
Signing time: Sat 28 Mar 2026 13:00:49 +0000
Manifest this update: Sat 28 Mar 2026 13:00:49 +0000
Manifest next update: Sun 29 Mar 2026 13:00:49 +0000
Files and hashes: 1: nPmIlqiK6PNUCut37KHxqUu9aXg.crl (hash: dpqWxUP8ptqqpJopkPB1NWpnpXNO/9X13kIhhjcGwlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:88:6e:84:59:c1:f4:f8:bf:94:1f:0e:ff:ab:21:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf98896a88ae8f3540aeb77eca1f1a94bbd6978
Validity
Not Before: Mar 28 13:00:49 2026 GMT
Not After : Mar 29 13:00:49 2026 GMT
Subject: CN=3c60501115e9643ef8ae914f1f96826e035a363f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:ce:1d:cc:e4:ad:27:a7:b0:1d:51:cd:3e:
d4:96:bc:2b:f0:a9:f1:fb:29:7f:c9:bf:91:ff:d0:
02:5f:c3:d4:07:74:65:90:64:0c:fe:05:9b:de:e2:
81:03:9b:22:36:7d:44:9b:ca:e9:d2:fb:b1:7c:6e:
89:77:e3:b7:1a:37:9d:d9:55:5d:f5:56:15:61:b9:
33:38:4e:d3:e2:1e:b7:47:0b:53:aa:fc:d8:6d:4f:
74:07:6e:92:b4:f2:e9:93:2f:69:31:de:fa:88:d4:
38:0e:28:52:1b:e6:e1:ef:a5:1a:95:15:48:4e:44:
e1:bf:b0:c8:80:09:2a:dd:47:69:db:eb:52:f5:e0:
be:13:6f:c1:a3:5e:f9:ba:ed:3f:9c:db:cc:99:74:
2e:99:8d:fd:5a:76:dd:8c:15:ee:cd:46:0e:34:c3:
58:fd:5d:b2:86:7b:d7:c9:94:9e:66:89:a5:50:c6:
1b:53:70:2f:a1:bd:d6:cf:0a:e6:aa:5b:21:f2:14:
ba:e7:bf:13:c4:7c:56:11:32:bc:1b:63:d1:12:07:
1b:c3:fd:10:4f:a1:4b:a5:df:3d:04:34:03:76:89:
03:6c:bf:80:55:c2:b2:5a:bb:7c:0e:43:52:c8:d6:
20:16:48:b2:f0:b9:30:2d:f9:85:01:f0:76:69:a6:
bb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:60:50:11:15:E9:64:3E:F8:AE:91:4F:1F:96:82:6E:03:5A:36:3F
X509v3 Authority Key Identifier:
keyid:9C:F9:88:96:A8:8A:E8:F3:54:0A:EB:77:EC:A1:F1:A9:4B:BD:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPmIlqiK6PNUCut37KHxqUu9aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/deb102-423f-4e92-b7c5-73d014e8349b/1/nPmIlqiK6PNUCut37KHxqUu9aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:53:e2:33:7d:fe:28:71:c0:de:a1:24:dc:1f:47:c8:ff:65:
46:f6:76:87:f8:77:5e:35:b1:6a:3f:20:ce:ef:76:dd:af:3c:
5b:98:c4:1b:61:ac:e4:ea:b7:3e:3e:8b:bf:ca:8b:14:07:40:
d8:4f:b4:c2:17:9e:6f:52:8b:88:2e:ce:10:da:4f:5a:c1:67:
5c:67:2e:ae:8f:de:1b:0d:4b:b6:fb:48:5b:16:9e:61:5c:94:
a6:f9:3d:0f:4e:5d:f6:5e:57:08:be:7f:3e:f1:4e:d4:a8:3d:
be:98:ea:9f:ba:b0:a7:6a:25:e3:c5:d0:14:92:a5:36:d8:15:
d4:c8:42:98:94:91:fa:dc:50:1b:63:95:28:5d:72:c1:f5:e6:
94:2e:c5:f2:e8:e5:72:23:14:a7:5e:19:f5:bd:17:bc:9a:bf:
3b:c2:f0:2b:d2:25:08:04:be:6d:b1:5d:3d:c5:a8:43:d7:f2:
80:ce:cc:a8:22:75:0a:47:5f:67:61:8b:e5:2b:55:f3:c1:9a:
7c:80:76:b2:45:40:f1:f7:03:d0:a5:90:18:c1:5b:df:00:73:
25:0d:bd:cc:a4:fc:7a:de:d2:81:3c:d7:89:9d:3e:8b:27:af:
62:e3:91:c8:8a:56:e4:c0:0d:ee:37:47:4c:5f:3b:4f:d7:6a:
e8:0f:5e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:26 2026 by rpki-client