Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
File: Nb4qqbT7-QcV68yQU0-dLVT32kM.mft (raw, json)
Hash identifier: jfcGlIOEW384SzUt+w52RNj9awx71y4+wTLUtGdnn8M=
Subject key identifier: CE:72:CD:41:94:03:5E:7F:1F:29:6F:4D:E0:09:19:41:F5:DD:51:D1
Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
Certificate issuer: /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Certificate serial: 019D27A93EBC70EB1BD9CD16024A4A2AF705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
Manifest number: 0497
Signing time: Thu 26 Mar 2026 01:01:36 +0000
Manifest this update: Thu 26 Mar 2026 01:01:36 +0000
Manifest next update: Fri 27 Mar 2026 01:01:36 +0000
Files and hashes: 1: Nb4qqbT7-QcV68yQU0-dLVT32kM.crl (hash: GDWfS1SCmVpU6oH3aL93juLHfZFJGYUtjLh47exbLTE=)
2: m4zjp-MwBLgtIcU6CL_nM9jmHXA.roa (hash: JyQkpr8DHxnP4GkQcPbRn8ESMBpHk6iJejQz7SBKaYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:3e:bc:70:eb:1b:d9:cd:16:02:4a:4a:2a:f7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Validity
Not Before: Mar 26 01:01:36 2026 GMT
Not After : Mar 27 01:01:36 2026 GMT
Subject: CN=ce72cd4194035e7f1f296f4de0091941f5dd51d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:05:68:06:5b:b0:7e:a9:15:0f:2d:c4:6b:
0b:68:9c:50:f4:10:7d:60:33:46:9e:25:9f:35:88:
af:1a:39:72:b2:35:89:a2:71:8e:56:89:8d:8e:be:
4e:41:cd:b0:85:f5:4f:e3:87:f2:00:7d:cd:26:f2:
5d:6a:19:76:ba:a9:5f:ec:61:b5:a8:38:0a:00:68:
e1:2f:12:e8:17:eb:61:35:4d:01:d7:3a:32:a1:05:
97:04:23:d3:d0:5b:d5:47:4e:63:61:2f:ef:30:4b:
24:2a:68:f9:1e:02:44:18:c6:3e:5a:ce:93:0b:33:
8f:ed:d2:0b:48:08:5f:d7:4a:75:a1:84:23:99:38:
64:69:ee:48:1c:d6:7e:a8:96:e6:2c:43:12:b5:28:
c3:2a:fc:31:c8:1e:66:fb:16:3a:dc:c6:3d:69:3a:
08:ce:60:07:d0:3f:3d:c9:d0:b5:61:15:8e:2a:6b:
6d:6c:ae:15:53:1f:a6:e0:cc:d6:fc:18:d2:44:3b:
54:1c:2b:d6:11:c6:da:83:99:6f:82:7e:72:c1:c3:
77:7a:d0:d2:30:ea:9b:51:5c:c5:9b:a9:10:6f:65:
f7:f4:70:73:97:d5:a1:41:81:c5:13:10:e2:1d:1d:
a3:ec:6d:1e:2d:d3:04:5e:4e:2e:3a:d8:7c:ff:00:
76:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:72:CD:41:94:03:5E:7F:1F:29:6F:4D:E0:09:19:41:F5:DD:51:D1
X509v3 Authority Key Identifier:
keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6f:d9:6e:df:86:50:32:4e:6a:9e:6f:9b:ae:ce:84:a3:7a:
90:6e:00:85:f8:61:17:74:65:0b:48:e5:8e:b8:c7:7a:15:6b:
a3:0e:75:df:d7:60:04:97:73:98:96:12:4a:21:dc:db:4f:4e:
aa:c7:1d:2b:31:c2:a4:f9:77:3b:7a:4a:e1:5c:19:4e:08:5e:
1c:f1:5c:e8:fb:68:c6:e0:6d:4d:29:65:84:89:e3:19:35:50:
0c:db:07:53:ff:fb:d3:f4:f8:ab:2f:c6:db:7e:df:66:96:83:
8a:0e:1a:b8:20:33:13:22:cd:29:b0:6f:f4:1e:ab:e8:76:eb:
7f:df:1a:bf:8a:06:01:cd:3f:b0:6b:a3:87:64:6b:97:12:30:
71:c0:1d:53:3c:68:46:7f:41:7e:bd:36:eb:17:fb:43:a8:f6:
b7:49:a7:2a:10:fb:a6:e3:36:fd:75:5c:34:6d:21:8a:ca:59:
4b:70:2d:fb:57:02:2f:69:c3:6e:d4:e3:8d:43:0e:2a:8a:c8:
ef:1a:99:1a:f7:39:6c:2e:2a:1d:82:ed:d1:ce:5a:08:cb:ec:
4b:68:1a:d1:8d:bc:d2:75:d3:7d:09:68:bb:cb:bf:53:47:ce:
48:4c:4a:a8:77:c1:ce:d5:a2:1e:ed:70:bf:56:08:f9:53:54:
2f:a2:ef:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:22 2026 by rpki-client