Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
File: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft (raw, json)
Hash identifier: Du283l3KVMpykVTCFWnFZ+qEeXZR+EzR6P3dugVmOYI=
Subject key identifier: 75:57:FF:FD:9E:0F:51:59:2D:14:99:35:2D:45:B7:AC:44:5D:CD:9E
Authority key identifier: 9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
Certificate issuer: /CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Certificate serial: 019D29CDD8AE9B8D5EE90B0CA25D194B9F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 11:00:49 +0000
Manifest this update: Thu 26 Mar 2026 11:00:49 +0000
Manifest next update: Fri 27 Mar 2026 11:00:49 +0000
Files and hashes: 1: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl (hash: PREWycCenSqMMykr/RVaxLmpbzMbPbuuYG79E4ae3ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:d8:ae:9b:8d:5e:e9:0b:0c:a2:5d:19:4b:9f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Validity
Not Before: Mar 26 11:00:49 2026 GMT
Not After : Mar 27 11:00:49 2026 GMT
Subject: CN=7557fffd9e0f51592d1499352d45b7ac445dcd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:f3:1d:1d:26:be:ba:69:1d:af:71:46:80:
e8:dc:26:ad:80:2c:5e:de:d2:14:cb:13:07:00:92:
90:33:57:ba:fb:c2:4f:78:f8:65:b2:e8:e2:c1:10:
d2:43:f6:2d:31:bb:ec:a0:af:e9:0d:1e:9e:46:21:
1a:e0:3d:7e:6d:e4:11:f2:a7:5c:d5:b7:90:c5:d5:
24:11:a2:63:14:50:dd:a0:a5:77:f5:9d:3c:81:b6:
4c:52:f6:2a:b6:6c:2d:59:1c:ba:06:ab:67:70:c4:
e0:ed:cb:22:cd:11:5d:38:63:2b:53:1a:99:f7:ab:
e6:7c:2f:36:07:34:4c:7a:51:fd:3c:17:38:66:b7:
85:22:e0:04:4b:32:aa:56:67:0c:4e:9f:b3:38:59:
64:7c:c0:c0:8e:17:07:e1:c9:17:63:b3:cb:63:2d:
20:a2:19:6c:d8:78:0c:91:89:b4:9d:a6:01:fb:25:
75:5c:9f:89:8b:4a:33:9e:8d:2d:74:7e:37:3c:7f:
a9:52:ab:98:c4:5b:1d:b3:e8:a3:4c:4b:06:3e:3a:
f2:0d:04:27:39:c5:76:b1:6d:e4:ea:80:40:05:db:
41:eb:37:f7:52:7f:45:86:ac:71:d3:73:ff:95:12:
a4:83:96:48:95:5d:90:ed:2e:75:ef:89:23:25:a9:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:57:FF:FD:9E:0F:51:59:2D:14:99:35:2D:45:B7:AC:44:5D:CD:9E
X509v3 Authority Key Identifier:
keyid:9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:75:49:ea:a1:ec:6d:9e:0b:2b:df:26:27:2f:8b:f2:fb:01:
c1:5b:69:94:8f:a9:6c:a3:0e:e8:3a:16:77:46:66:f3:7a:c2:
ad:6a:b4:4e:4a:51:31:db:7f:60:d6:59:03:53:a3:43:f7:81:
05:81:3b:14:d6:80:1b:84:38:52:03:4a:bd:09:4b:a9:2d:4a:
54:13:7e:63:58:45:37:a1:0f:a0:1c:ed:6d:ab:9c:20:15:e6:
9d:34:a6:2a:61:c0:cf:45:6a:ae:3b:51:b0:95:34:75:09:6f:
2c:64:68:d8:6f:ed:4a:e6:08:b8:41:0a:10:59:81:35:74:2a:
3d:b8:7f:91:29:80:46:bc:c6:01:38:7b:1a:6a:91:ef:d4:20:
14:09:4f:61:fc:36:82:0f:41:75:4d:50:6d:b3:16:4e:df:29:
33:08:39:6f:de:b7:48:c0:87:2f:7d:c1:b9:d6:2c:b6:67:af:
5f:65:c4:80:2f:4b:4d:4b:dc:d2:e3:b6:92:a5:97:b2:0a:d5:
1f:34:4f:f8:c1:6c:83:66:54:dc:37:93:4b:b5:64:97:9c:9f:
ca:ae:b0:94:fd:28:00:4d:08:80:61:41:9a:48:f6:8b:30:03:
db:d8:83:30:dc:52:1b:18:cc:07:6c:ef:f3:18:90:e7:ed:99:
76:8d:12:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:58 2026 by rpki-client