Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
File: nSBC44DWR2UTrMCPtU-8xzYm7D0.mft (raw, json)
Hash identifier: dRYwlX+fuA4wOsigWu+7d4JyoOPhqSY3a+SSYwvhTaw=
Subject key identifier: 05:51:AC:D7:DD:1C:A8:AD:1D:3A:A3:A1:07:AC:23:60:18:2F:E3:41
Authority key identifier: 9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
Certificate issuer: /CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Certificate serial: 019D2A3C24796B579CC8D1DD015E9E001369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
Manifest number: 03B6
Signing time: Thu 26 Mar 2026 13:01:17 +0000
Manifest this update: Thu 26 Mar 2026 13:01:17 +0000
Manifest next update: Fri 27 Mar 2026 13:01:17 +0000
Files and hashes: 1: nSBC44DWR2UTrMCPtU-8xzYm7D0.crl (hash: H/Pg/qrs1zToGihrFUbUYM3kLfLQxFq5wtpxeL0jkEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:24:79:6b:57:9c:c8:d1:dd:01:5e:9e:00:13:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Validity
Not Before: Mar 26 13:01:17 2026 GMT
Not After : Mar 27 13:01:17 2026 GMT
Subject: CN=0551acd7dd1ca8ad1d3aa3a107ac2360182fe341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:45:2a:8f:97:76:6e:2b:f0:ec:88:72:33:
a1:c5:02:47:0e:51:2b:0e:04:2f:e0:92:bf:63:79:
df:05:46:93:0a:b9:62:ad:8e:e6:46:e0:c9:36:e1:
7b:6e:7c:c1:e2:a7:dc:46:b6:2c:54:3d:cc:88:5f:
9b:7e:1b:fd:c3:e0:7e:97:20:5c:84:08:4a:71:a6:
5e:8b:79:a1:5c:50:2b:80:43:46:94:0b:1d:80:49:
bf:7f:8b:fd:c2:92:09:fe:69:6a:54:16:70:6a:d2:
fc:a1:ff:43:af:5b:35:b0:8c:2f:92:93:b1:ab:58:
c8:b7:22:81:85:33:c8:2c:9b:b4:35:8e:7e:1d:4d:
77:57:ae:ff:77:e0:9f:38:14:fe:ad:f6:74:f0:44:
5f:de:7d:cd:43:9c:b1:19:c7:34:cb:39:ec:b9:6c:
54:5d:97:da:85:8c:3c:c5:fa:4a:b5:66:5b:c2:44:
e0:3e:2a:9d:6a:a5:a0:d2:f9:2b:7d:84:dd:79:b3:
41:0a:a2:e8:2a:42:4f:41:1c:d3:cc:79:81:ed:b2:
52:74:ee:8d:8c:cc:49:53:67:5a:d6:74:d4:e2:ec:
29:47:ab:0b:71:d3:84:0c:68:1f:fb:ce:01:c6:93:
ec:55:ee:5a:28:2b:6c:fe:2a:c8:3c:fd:5d:4a:5d:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:51:AC:D7:DD:1C:A8:AD:1D:3A:A3:A1:07:AC:23:60:18:2F:E3:41
X509v3 Authority Key Identifier:
keyid:9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:50:53:40:91:7f:bd:c1:a3:92:2b:89:42:96:86:41:44:77:
2a:51:c9:ed:f7:a0:a3:54:d1:e4:d2:c9:f0:26:c4:26:e9:c3:
bc:2d:8f:8a:d3:c4:14:6d:68:35:18:c1:ed:e1:71:97:61:15:
d2:76:7b:67:3c:59:90:ff:27:34:95:c0:9c:81:91:89:66:c1:
14:55:67:a0:29:ed:9d:6c:24:d4:b4:83:2c:c8:1f:07:19:5e:
e5:1b:95:7d:2e:db:33:69:55:a4:a1:82:62:0e:1b:7c:5a:fa:
20:92:c4:c1:50:5b:29:16:8f:82:c2:11:2c:1f:15:fb:3e:4c:
73:14:28:69:37:03:ed:51:e3:ae:2e:b2:b3:c8:d4:f8:dc:31:
d9:6f:6e:d2:20:ae:6f:13:9c:d0:63:b0:f4:78:81:60:df:ca:
80:8b:c5:a6:b4:e6:f4:5a:c9:fd:8e:3c:fd:0f:81:ab:ee:77:
a1:fd:17:d8:7f:01:da:0d:08:f4:d0:b9:d0:cc:7e:14:07:c3:
a2:82:c7:b2:52:b7:b5:ee:e2:5b:18:93:7e:de:9a:42:8d:8a:
26:0e:71:7a:35:8c:83:3a:b5:e8:d1:ed:79:d5:af:f2:ab:f0:
19:e8:2e:77:b7:92:c9:69:96:f6:d2:9a:13:bd:c5:70:64:48:
49:dd:f5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:48 2026 by rpki-client