Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
File: nBBfWIvTBDjjPxwtKWdUxz341Ss.mft (raw, json)
Hash identifier: yysfkl27cxzgHnurHzTfnXAlKTIqBGwRniog98ZqYWg=
Subject key identifier: FA:F7:C7:A8:87:B4:05:A4:45:96:A1:50:22:F1:2F:8E:F7:2B:CB:59
Authority key identifier: 9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
Certificate issuer: /CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Certificate serial: 019D2AE06016E1E6538CF7DCD768D8B61294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 16:00:40 +0000
Manifest this update: Thu 26 Mar 2026 16:00:40 +0000
Manifest next update: Fri 27 Mar 2026 16:00:40 +0000
Files and hashes: 1: nBBfWIvTBDjjPxwtKWdUxz341Ss.crl (hash: 0OJIA5LuZxcNA80O73uGZkZbuSXTARuzex5/S3/7Io4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:60:16:e1:e6:53:8c:f7:dc:d7:68:d8:b6:12:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c105f588bd30438e33f1c2d296754c73df8d52b
Validity
Not Before: Mar 26 16:00:40 2026 GMT
Not After : Mar 27 16:00:40 2026 GMT
Subject: CN=faf7c7a887b405a44596a15022f12f8ef72bcb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:59:7f:bf:d5:3a:74:01:56:66:d2:e4:b0:37:
f7:57:01:d0:70:86:f0:76:cb:20:bc:40:a5:7e:15:
6d:6e:7e:b4:b0:44:a8:d1:ec:b4:c1:35:75:df:5a:
d1:6f:6d:12:c1:15:79:d8:4d:ab:6a:2d:d2:b2:00:
38:72:2a:7a:6b:87:c6:02:25:83:16:07:c7:46:22:
06:60:29:d4:bb:20:50:49:1f:eb:b5:b8:ea:9a:a2:
41:bd:5b:f7:d8:01:00:ca:40:d6:9b:78:18:95:b1:
cd:b2:b7:a2:d6:b7:6b:12:94:35:04:92:05:7b:be:
60:0a:8f:f6:a9:9b:79:25:9c:01:72:0e:72:08:5f:
29:90:2c:26:d3:a7:e8:74:84:c9:0c:81:12:c0:a0:
8c:4c:af:f9:0b:c6:f0:f3:6b:f8:d4:4e:55:22:71:
5e:a3:01:32:e1:2e:a1:d0:d3:cb:a4:23:34:54:45:
ea:80:e4:ff:a4:bf:f4:7e:99:08:ad:39:4a:07:25:
d8:4b:fa:28:51:af:07:42:f4:0a:8b:fd:d3:32:34:
0c:0e:49:91:81:e0:b7:61:35:ab:b2:0a:92:ef:8a:
df:84:9a:f7:37:47:fd:c4:1f:09:29:62:c8:be:dc:
a1:10:46:39:6d:09:c0:09:d1:fe:7b:46:eb:54:0a:
21:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F7:C7:A8:87:B4:05:A4:45:96:A1:50:22:F1:2F:8E:F7:2B:CB:59
X509v3 Authority Key Identifier:
keyid:9C:10:5F:58:8B:D3:04:38:E3:3F:1C:2D:29:67:54:C7:3D:F8:D5:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBBfWIvTBDjjPxwtKWdUxz341Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9307d-9964-41d0-9bb9-46256dafec5e/1/nBBfWIvTBDjjPxwtKWdUxz341Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:60:d8:ce:f4:40:31:ba:47:2a:b9:28:ea:e4:eb:a7:d6:54:
cf:05:27:a3:17:30:7f:27:11:85:41:de:b1:d6:96:f3:2a:91:
1b:f7:67:6e:65:8a:97:3a:fe:14:d7:62:34:bb:b0:14:1a:19:
aa:d9:94:32:55:09:45:d3:61:9f:55:7f:66:e4:eb:a4:8e:84:
8d:94:81:00:52:27:15:cf:f1:37:ee:19:6e:f2:01:6c:43:c7:
44:c9:f4:c3:c5:f8:52:7b:5e:cb:3b:8c:ee:8b:8b:be:38:c0:
c9:2b:cc:5a:47:f1:55:4e:87:77:c4:25:05:a6:8a:f9:70:b9:
c0:55:e4:2f:15:af:f2:ab:24:25:45:be:55:c4:39:b4:81:98:
4d:c9:85:5c:78:d1:6f:48:c7:76:8f:1b:53:b2:63:5a:de:35:
ee:f3:a6:08:a2:3e:cc:b7:29:f2:7d:af:a8:64:42:61:46:c1:
b8:3e:8a:05:d8:35:e8:1d:02:01:9a:dd:8f:3b:a9:17:f9:63:
87:cb:cf:7d:57:3b:a8:a2:93:5b:8b:4d:56:3e:2b:e7:34:6c:
8c:e0:d3:ce:ce:ff:a7:df:2a:9d:a1:8a:f6:19:b1:dc:6d:d6:
4b:8b:67:62:82:c6:2c:07:1b:4f:da:cd:dc:8e:b1:53:a4:8d:
81:75:e3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:53 2026 by rpki-client