Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
File: NrzwGgmAWLhROxb9nksbI4_Nb1g.mft (raw, json)
Hash identifier: Sgfyj2sohCwKka22yydQ07dBPdxthdlmuMy1f/pmb6Y=
Subject key identifier: 8F:8A:A5:BE:52:D2:73:49:FA:66:0E:21:16:86:B8:AC:F8:B2:E4:FD
Authority key identifier: 36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58
Certificate issuer: /CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58
Certificate serial: 019D281690C24445A1F449893A8FB2EDF994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
Manifest number: 0434
Signing time: Thu 26 Mar 2026 03:01:00 +0000
Manifest this update: Thu 26 Mar 2026 03:01:00 +0000
Manifest next update: Fri 27 Mar 2026 03:01:00 +0000
Files and hashes: 1: NrzwGgmAWLhROxb9nksbI4_Nb1g.crl (hash: dxf7LNdYiCkzYpTwuRxIKnTJQr8NX6ekCDxl9pfxYj4=)
2: _8F0lsXlsoNmIGarfGop87h2ymI.roa (hash: vKpahHvP7psgUsaXQeYhHsIR4SzsOJrDnRksmg7tAyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:90:c2:44:45:a1:f4:49:89:3a:8f:b2:ed:f9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58
Validity
Not Before: Mar 26 03:01:00 2026 GMT
Not After : Mar 27 03:01:00 2026 GMT
Subject: CN=8f8aa5be52d27349fa660e211686b8acf8b2e4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:e2:3b:37:ea:10:f2:a8:58:c1:f1:23:e0:
fd:af:43:a8:14:84:52:8d:ef:44:1c:06:d6:37:2e:
bd:4d:64:50:a4:bc:08:b1:78:22:85:77:bf:35:ed:
5a:24:38:d8:e6:f6:4c:54:6f:fa:55:40:f3:66:1a:
91:0d:b1:ad:55:92:7c:f1:8c:95:07:9d:29:57:5e:
cd:5d:16:b4:48:76:c1:cb:9f:e3:84:5f:2c:8e:ba:
58:31:64:ee:b0:38:1b:dd:3c:a8:0e:a1:20:01:c4:
82:2f:6a:23:a9:bd:31:af:ef:2e:88:5f:a0:c4:ca:
de:ad:d5:b6:76:c3:8a:7f:91:e1:a1:32:4b:d1:47:
10:0e:29:17:ff:f9:63:5f:3b:8d:e1:ce:83:20:49:
b4:26:65:5c:8d:e8:a1:b3:aa:d5:71:f1:5f:17:11:
ef:fd:1a:cd:48:85:37:ba:9e:64:b1:94:40:b2:0f:
aa:5b:91:b7:97:33:35:31:a7:28:ed:7e:79:14:8c:
f7:49:6a:58:7f:ae:b9:99:3f:d7:21:a7:4e:17:d1:
ef:62:62:2e:16:e0:46:85:2d:ec:85:44:e7:d4:40:
ce:84:e5:5b:9e:ec:8c:56:ce:a0:5f:ae:1f:ea:e5:
2e:c0:4a:0d:b4:37:74:e8:6c:ff:34:9c:fb:f9:8b:
e1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8A:A5:BE:52:D2:73:49:FA:66:0E:21:16:86:B8:AC:F8:B2:E4:FD
X509v3 Authority Key Identifier:
keyid:36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:70:be:10:13:ac:d8:e5:77:f1:fb:1c:cd:ab:ae:4c:cd:59:
58:65:2a:47:2a:f4:b3:e2:b8:c7:86:ba:17:05:ca:cb:14:af:
ca:0f:b3:9d:a3:ca:31:47:e6:1f:ff:6a:37:a0:3f:c0:4e:d9:
f1:de:4e:0b:59:b3:16:df:ea:97:8f:f2:78:0b:72:64:24:17:
d5:b1:51:e0:57:cc:ef:17:72:f5:10:50:e9:9b:ac:1c:b1:6f:
4c:d7:79:f4:3e:36:1f:4d:9b:67:03:6d:be:49:1c:42:23:48:
06:c5:c6:d9:2b:6b:bb:bc:b1:80:f5:6a:12:a2:bd:39:96:e4:
69:d6:70:da:10:07:3b:12:a9:77:87:5b:1a:99:13:03:7c:35:
6e:2f:77:06:c4:33:99:63:17:78:39:0c:a2:6c:3f:e1:1b:1c:
96:49:fd:e3:fa:47:37:9a:20:89:4d:f8:83:db:8f:42:8b:8f:
7c:10:e8:30:c4:d2:cd:ee:28:27:bc:24:ec:50:36:e3:80:b0:
40:79:6f:61:08:71:c7:0f:a9:2f:81:29:53:aa:89:d7:32:bc:
64:1e:9e:0d:c5:b2:8f:77:bf:52:9a:f0:eb:ff:84:63:2d:7e:
00:34:96:23:77:92:6a:05:a4:97:cd:2e:6c:40:26:65:ee:e1:
60:8e:31:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:02 2026 by rpki-client