Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
File: nSPpHVsFtF8H04Uk9PHi45K4qDo.mft (raw, json)
Hash identifier: im8KFkRtVs6X28DKLxtww2dzyu+STrHI0eHSOlPklhw=
Subject key identifier: C1:5D:E0:53:69:BF:74:A3:F7:CA:25:5C:A4:B8:C4:36:71:92:C3:E6
Authority key identifier: 9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
Certificate issuer: /CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Certificate serial: 019D265ED7212BED9BF44A6DFD5883B5BD67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
Manifest number: 08AF
Signing time: Wed 25 Mar 2026 19:00:42 +0000
Manifest this update: Wed 25 Mar 2026 19:00:42 +0000
Manifest next update: Thu 26 Mar 2026 19:00:42 +0000
Files and hashes: 1: nSPpHVsFtF8H04Uk9PHi45K4qDo.crl (hash: LB+Fi/tYpmFRiSsZx4m+4xLmBrQbQPRH8R/bm+UdfDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:d7:21:2b:ed:9b:f4:4a:6d:fd:58:83:b5:bd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23e91d5b05b45f07d38524f4f1e2e392b8a83a
Validity
Not Before: Mar 25 19:00:42 2026 GMT
Not After : Mar 26 19:00:42 2026 GMT
Subject: CN=c15de05369bf74a3f7ca255ca4b8c4367192c3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:ac:78:1b:54:d5:f7:22:21:dd:33:b4:1c:
5b:d9:c7:da:a3:a3:7b:39:a4:12:65:be:34:87:20:
92:af:1b:3f:47:ad:c2:b0:14:9e:8b:84:d4:cd:a1:
d4:fd:57:49:bf:52:6d:3a:d1:8e:35:dd:ab:06:5b:
91:7b:73:bd:d7:4c:04:84:66:c5:54:33:8f:d0:8f:
04:94:02:fe:a2:68:a8:56:4b:41:37:9b:04:61:76:
11:58:36:60:8c:7a:92:27:49:f8:4d:fc:a2:2b:c7:
28:4e:ae:b3:f2:63:9c:54:64:f2:6d:85:9b:94:7a:
f5:85:24:8d:fb:7f:38:39:a5:55:cc:3b:27:07:c6:
3a:31:55:c6:0e:46:77:b7:e1:97:31:f3:ac:19:73:
60:bf:43:b4:f2:40:ab:1a:13:22:5e:9e:e1:d5:96:
16:28:b1:8f:c7:2f:db:b3:eb:01:c7:13:2b:3b:4f:
18:47:2d:b5:05:3b:9d:62:70:7a:40:c9:76:db:82:
6f:0f:00:b0:c6:2a:1f:c2:c4:75:d4:54:85:d2:ba:
c0:25:70:43:92:ec:cb:56:0a:dd:c7:1d:0a:fe:66:
40:22:39:cd:d3:78:0f:59:57:88:96:7e:83:ef:53:
97:ae:0f:77:25:a5:ec:37:9c:92:5b:28:f1:af:e8:
84:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5D:E0:53:69:BF:74:A3:F7:CA:25:5C:A4:B8:C4:36:71:92:C3:E6
X509v3 Authority Key Identifier:
keyid:9D:23:E9:1D:5B:05:B4:5F:07:D3:85:24:F4:F1:E2:E3:92:B8:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPpHVsFtF8H04Uk9PHi45K4qDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/754587-c3fe-47b0-9070-37a9dd02b2c4/1/nSPpHVsFtF8H04Uk9PHi45K4qDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:65:e4:7f:9e:fb:71:f6:7a:ac:cb:2f:d7:82:b9:3c:b3:95:
e6:7d:04:47:22:d2:17:96:78:a3:f5:05:0b:74:1c:5f:0d:e4:
d8:6e:1e:e8:15:67:fa:08:67:c3:65:fd:94:6b:a2:e9:9d:52:
0b:f7:a0:5b:c9:f6:f8:a7:fa:0d:25:79:b3:45:76:c5:3a:18:
91:f2:a0:a8:b3:38:9b:d9:be:ed:eb:04:c3:5e:bf:ae:06:b8:
3d:5b:2d:68:a9:e0:44:bd:c1:7c:40:33:39:d4:91:49:3a:de:
2d:85:d9:17:d0:b6:5c:a6:ec:96:18:25:ea:5e:d9:74:29:e7:
c5:98:79:0a:31:95:e3:a9:35:91:5b:8c:bf:11:7c:f5:15:b3:
4e:47:aa:af:04:6c:ed:75:21:10:ca:21:ff:c4:cc:ba:15:c7:
f1:ed:e9:9a:b5:07:35:54:81:ec:cd:41:e4:c9:44:a7:56:fe:
ad:fa:ef:e1:87:7d:e9:d6:06:86:cb:54:6d:08:3f:cf:56:6e:
e6:aa:bf:02:83:e6:90:c0:01:df:14:61:ed:07:d0:a2:58:d6:
f8:b8:7d:25:ad:aa:76:d3:72:b7:20:be:14:dd:23:a6:28:eb:
8c:5d:21:fb:c7:62:12:56:16:8e:c9:cb:58:1f:3c:b3:65:ec:
9a:cb:d3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:42 2026 by rpki-client