Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
File: nE-xCAvPALb912uv2dUTPF4cPTI.mft (raw, json)
Hash identifier: Uv4E9/3pTtMOvziFOJZrcM+GhuUQVy3TnUxE7qj/kvA=
Subject key identifier: 0D:4C:1E:07:3F:BE:85:2D:9E:C1:2C:62:2E:DA:CC:0E:A9:17:AD:F5
Authority key identifier: 9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
Certificate issuer: /CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Certificate serial: 019D265FAC936A74EDB9CE8B8FE5AA15325E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
Manifest number: 086C
Signing time: Wed 25 Mar 2026 19:01:37 +0000
Manifest this update: Wed 25 Mar 2026 19:01:37 +0000
Manifest next update: Thu 26 Mar 2026 19:01:37 +0000
Files and hashes: 1: nE-xCAvPALb912uv2dUTPF4cPTI.crl (hash: mxmS4wm5zKwEPLaAOWexgYI89AATGZwW+f/JhGlVw0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ac:93:6a:74:ed:b9:ce:8b:8f:e5:aa:15:32:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Validity
Not Before: Mar 25 19:01:37 2026 GMT
Not After : Mar 26 19:01:37 2026 GMT
Subject: CN=0d4c1e073fbe852d9ec12c622edacc0ea917adf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:60:2e:ca:18:8b:6d:80:df:24:c4:38:7f:
ac:f0:79:41:77:da:8e:93:02:7d:12:37:a7:e7:0a:
1e:fe:4e:47:c2:05:2c:b6:0f:c4:cc:7a:67:a6:2a:
e5:6d:0e:96:9c:dd:bc:8b:eb:17:b8:e4:7f:9d:3f:
a4:0b:cc:7f:8c:2b:0a:2c:a7:eb:f2:25:0d:5a:bd:
ae:a8:2c:1b:9e:bb:41:a4:2c:34:56:d9:65:cc:37:
71:59:cb:24:c4:d1:e9:8b:2d:30:8d:a8:dc:ce:45:
d0:13:cb:6b:d4:e9:45:c2:dd:09:29:27:3a:75:b1:
7e:0c:b4:90:f1:2c:cc:f4:16:da:55:dc:d1:fa:54:
fd:36:58:cd:33:35:3c:89:57:93:66:d4:2a:e5:19:
40:85:ec:a6:27:01:fe:fa:62:08:c2:50:c1:4f:19:
6d:b8:2b:c0:7f:eb:a1:b7:ae:ec:58:7a:bb:f7:f3:
89:da:16:62:bf:44:95:2d:d4:84:9e:4d:b3:f2:10:
fe:73:33:07:80:b3:8c:8e:0e:b4:cd:9d:fb:00:03:
30:8a:71:b1:06:36:2a:47:aa:c3:8f:7e:93:a6:ab:
50:69:98:39:b9:12:54:11:33:d7:7d:e0:fe:99:aa:
d4:2e:f8:64:dc:90:95:12:03:cf:d7:f8:9c:27:17:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4C:1E:07:3F:BE:85:2D:9E:C1:2C:62:2E:DA:CC:0E:A9:17:AD:F5
X509v3 Authority Key Identifier:
keyid:9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b5:66:8a:01:10:c5:f7:df:82:bf:a2:69:35:9f:a8:06:72:
97:5b:e5:7b:93:db:38:42:2a:01:73:91:c5:99:60:af:0e:d5:
6e:4c:f0:16:1d:68:e3:18:82:30:40:2e:ae:1c:ba:d2:b0:bd:
9a:39:31:09:5b:3b:80:47:f0:31:90:83:3e:73:4f:0c:24:f3:
83:bb:0a:31:16:ae:cb:4c:e5:1e:0f:22:83:e3:55:3f:8f:4e:
a7:1b:07:ce:5d:16:36:77:e6:15:18:01:83:31:77:ad:7e:99:
36:3d:e1:31:ec:eb:b0:c4:e9:c0:fc:1d:17:2a:42:4a:d1:dc:
9a:9a:a3:8e:9a:d6:ff:89:87:13:ea:fb:69:29:e7:71:93:5d:
ab:75:27:cc:02:de:01:d8:5b:2f:20:89:53:b5:4d:58:92:b4:
c4:d4:a4:18:80:0c:fc:5e:e2:c6:9f:b0:95:8d:5a:dd:6d:d7:
04:d9:71:ba:66:eb:b4:d0:a6:cf:88:61:0e:2a:82:6c:51:64:
59:86:20:bc:5e:60:8b:a3:a8:c1:d8:79:34:22:04:06:d9:ee:
00:c7:55:e1:7d:fd:06:0b:6c:d7:6c:97:0b:8f:28:0c:f5:93:
3c:cb:c4:3c:b5:ab:84:c9:0d:27:e7:39:e1:59:15:bf:b1:29:
39:94:aa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:51:00 2026 by rpki-client