Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
File: NDez9zdtPvHNqLyWbxOXCFnPeW4.mft (raw, json)
Hash identifier: fwGHjEJ3ObMKjhTG7RQ2R5OGRE1h0bIzcBLiyQStYsE=
Subject key identifier: 92:A0:28:03:F6:79:A6:2F:D0:94:A7:40:B8:4B:99:A0:63:E1:6F:55
Authority key identifier: 34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E
Certificate issuer: /CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
Certificate serial: 019D26CCD39C4A249354A912835725B7C5A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
Manifest number: 0982
Signing time: Wed 25 Mar 2026 21:00:50 +0000
Manifest this update: Wed 25 Mar 2026 21:00:50 +0000
Manifest next update: Thu 26 Mar 2026 21:00:50 +0000
Files and hashes: 1: NDez9zdtPvHNqLyWbxOXCFnPeW4.crl (hash: GpmCC/F/QpLOFdFxLn1k+1OG/xUu2L6yFkovKkgzIfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d3:9c:4a:24:93:54:a9:12:83:57:25:b7:c5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
Validity
Not Before: Mar 25 21:00:50 2026 GMT
Not After : Mar 26 21:00:50 2026 GMT
Subject: CN=92a02803f679a62fd094a740b84b99a063e16f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:29:96:f2:c6:14:50:7c:af:52:dc:4e:f1:
3a:1f:47:44:98:cb:e7:33:4e:ff:39:cb:e6:57:89:
be:31:e2:68:f8:62:71:4f:5f:8d:e7:1c:9e:cc:ae:
48:75:81:17:96:18:62:8b:61:b4:62:c3:f1:f2:9e:
b5:af:15:d8:28:22:5b:a9:1f:cb:4e:fa:b7:40:50:
a7:df:69:84:27:55:21:8d:7d:59:58:f7:81:e8:97:
67:4c:1e:25:f6:02:7d:92:f6:98:10:4b:8f:62:d7:
d3:7e:49:8a:cf:aa:d1:a2:d0:1c:1c:bb:37:91:92:
e4:24:a4:17:0d:d8:af:84:14:3c:89:ee:18:8a:94:
c0:23:6d:60:10:fd:11:16:18:ad:97:c6:00:50:42:
f9:7e:6b:91:cd:33:46:b6:32:9e:c2:04:2e:52:1f:
d6:06:94:8b:63:80:19:a4:1f:85:53:eb:7c:64:66:
52:56:52:81:82:be:44:46:47:7b:41:0b:b8:64:1a:
4c:b5:e0:ee:48:5b:db:60:9d:5f:1d:06:be:04:46:
f4:99:b9:98:36:f6:39:8a:2e:7d:77:83:7f:9b:8f:
c9:0a:4b:73:9f:7a:98:2d:41:1c:d8:b0:ba:88:d4:
f6:96:06:ae:5f:ce:73:32:f0:71:4d:87:1b:aa:58:
46:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A0:28:03:F6:79:A6:2F:D0:94:A7:40:B8:4B:99:A0:63:E1:6F:55
X509v3 Authority Key Identifier:
keyid:34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:83:22:dc:8f:33:dc:58:88:d7:91:10:e4:7c:70:fe:3b:05:
5a:46:cf:2d:be:a9:77:d9:6b:48:51:9a:dc:82:66:93:3f:2b:
9d:2d:7c:90:33:1d:ee:f2:6f:f6:17:81:ec:56:22:b8:54:05:
a2:bf:34:71:5e:be:f6:99:1c:f2:c1:f9:a4:66:06:e7:f2:6d:
cf:c3:c1:92:8a:6a:0a:fb:0b:e6:49:f4:2e:4c:2a:e1:85:84:
34:8e:59:57:3a:c5:10:40:d7:40:52:58:45:c8:eb:8e:9c:1d:
c0:1b:d6:d8:49:5e:28:46:5f:cf:a0:4c:69:14:08:61:7f:32:
bb:f0:62:ad:b2:3a:71:67:3c:0a:9f:66:dc:e7:fe:37:27:85:
eb:ba:c7:f6:d8:c2:53:14:f5:2c:9d:13:75:58:03:28:31:92:
f2:ae:fd:ac:aa:06:39:b0:af:1a:d0:dc:9e:3b:1c:a3:0c:b4:
7d:1b:46:30:87:e9:26:7b:c3:be:8f:96:48:d7:a5:12:dc:9a:
e7:79:b9:64:eb:9d:b3:6a:c0:97:54:3a:46:d7:aa:7a:86:89:
ea:fb:66:13:30:7d:31:48:14:e3:30:00:26:40:ea:fc:ec:58:
22:2f:2b:e2:15:87:a6:bd:1a:f9:06:b3:6e:23:d2:44:08:0e:
5f:74:cf:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:31 2026 by rpki-client