Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
File: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft (raw, json)
Hash identifier: jEP+CebrDgGoIFk86ypWQsoekQThKrEYJOJahXiHU/E=
Subject key identifier: 97:3E:43:15:51:2F:68:08:57:9C:3D:70:F4:3A:76:B1:FC:CD:AD:51
Authority key identifier: 35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74
Certificate issuer: /CN=35ced0549f5b35dafa74d90b0468200178545d74
Certificate serial: 019D2960C65CBC630401E88BA14E2674E8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
Manifest number: 03A5
Signing time: Thu 26 Mar 2026 09:01:41 +0000
Manifest this update: Thu 26 Mar 2026 09:01:41 +0000
Manifest next update: Fri 27 Mar 2026 09:01:41 +0000
Files and hashes: 1: Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl (hash: 1V3cseEVv7bZR8v466FuKf65Tj7opJEQll41Rva5ZMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:c6:5c:bc:63:04:01:e8:8b:a1:4e:26:74:e8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ced0549f5b35dafa74d90b0468200178545d74
Validity
Not Before: Mar 26 09:01:41 2026 GMT
Not After : Mar 27 09:01:41 2026 GMT
Subject: CN=973e4315512f6808579c3d70f43a76b1fccdad51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:54:95:07:5e:22:6f:ab:28:fd:f3:a8:4b:88:
c5:50:9d:18:96:d2:27:b9:0d:ae:e8:89:7b:5f:88:
94:4e:1e:d4:5a:15:19:fc:34:17:44:70:df:f9:5a:
b0:29:13:2b:1d:8c:67:5b:d5:53:4d:78:5c:64:9c:
27:51:45:e2:44:68:9e:e1:11:8f:ab:85:46:ca:27:
ad:39:5b:11:0d:18:9d:89:a8:bc:35:77:4d:a6:f1:
b6:a7:4b:f6:8d:9b:41:c6:0f:39:fd:4e:fa:c2:b3:
b0:98:a1:6d:27:d0:88:51:c5:b5:94:cd:ef:00:ae:
4c:f2:b1:35:19:54:e7:35:57:01:2c:45:76:bb:29:
40:b0:90:59:40:de:55:de:3e:eb:7d:90:73:41:a2:
40:da:49:1f:77:13:a5:22:a8:b7:44:2b:27:b9:e1:
e5:18:be:33:a2:33:84:df:42:27:b9:78:ed:62:6c:
64:79:84:d7:6c:d8:56:f4:4e:64:e2:19:95:2c:ac:
b8:82:a8:f7:be:8e:b4:88:92:7c:76:7f:20:bb:75:
f9:87:83:74:f6:f0:8d:2a:b1:38:8a:a8:1c:74:09:
5a:fc:e4:57:27:cf:1a:0a:5e:be:79:76:f8:95:33:
62:87:fb:9e:23:c4:f9:7d:ac:20:5c:cc:f0:7b:b1:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3E:43:15:51:2F:68:08:57:9C:3D:70:F4:3A:76:B1:FC:CD:AD:51
X509v3 Authority Key Identifier:
keyid:35:CE:D0:54:9F:5B:35:DA:FA:74:D9:0B:04:68:20:01:78:54:5D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6cd772-c909-4b47-9d82-efc12a9fd6e1/1/Nc7QVJ9bNdr6dNkLBGggAXhUXXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c1:50:4f:33:0f:de:05:d2:6d:ff:8c:3d:ee:e3:ef:0d:01:
7a:7d:13:e5:e5:72:24:27:cc:84:a8:36:02:e7:d4:c4:2d:1a:
2d:a3:19:77:71:22:f8:b7:25:b6:84:6c:3f:54:9f:b7:27:ff:
af:f1:0f:a4:49:97:78:1b:2b:e7:c6:fa:ca:1d:42:06:b8:aa:
39:17:38:b4:0f:1d:72:0e:dc:3a:e1:7b:3e:fb:36:fa:e6:9c:
fa:fe:0a:63:be:a2:fe:68:b2:ed:d5:84:42:45:00:dd:58:34:
66:6f:00:86:32:f9:7d:aa:70:95:df:30:ab:2c:36:3c:fe:a1:
62:72:d3:f1:21:3b:cd:69:8b:e5:64:2c:ac:b2:b2:ce:16:02:
6a:2a:05:63:48:b1:29:d9:81:d4:ef:3e:d3:a2:e6:ef:94:e9:
2c:63:06:8d:5f:40:00:dd:f5:f1:97:cc:06:c3:a3:8a:4e:1d:
65:c1:52:0b:2d:13:0c:de:e2:55:63:65:fc:fd:29:f1:11:fc:
53:94:f2:42:61:8e:1f:61:5c:43:40:5f:9d:62:94:65:e8:2c:
bc:0a:5a:44:a4:6a:74:84:d3:38:87:83:53:71:fe:97:32:e5:
3a:77:73:13:f8:b5:65:f7:7f:e8:e1:09:d5:c6:a4:61:39:5a:
ef:52:8c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:53 2026 by rpki-client