Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: fX3Xd5nnCYMCnIF0I/BoMQEyNm69l9SPpoJOs9owWVs=
Subject key identifier: ED:D5:73:DD:C6:46:D5:49:A4:12:92:36:22:C8:71:25:E7:D7:92:80
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 019D2772B99404A32EBBD513354E56645030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 0F67
Signing time: Thu 26 Mar 2026 00:02:03 +0000
Manifest this update: Thu 26 Mar 2026 00:02:03 +0000
Manifest next update: Fri 27 Mar 2026 00:02:03 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: JmKl3g2kw8CpFqdfz6z1a/Qf89vh57ljyCxeZ6f/mws=)
2: d4grg2tvuefsoHmD0ZdaVonf75c.roa (hash: OXvdnvF2UW52gDEgFTfQ3VspznPh5gZEegyP1xQRgjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b9:94:04:a3:2e:bb:d5:13:35:4e:56:64:50:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Mar 26 00:02:03 2026 GMT
Not After : Mar 27 00:02:03 2026 GMT
Subject: CN=edd573ddc646d549a412923622c87125e7d79280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c9:ab:5b:88:32:05:06:89:dd:47:6c:c9:d3:
99:04:9c:11:d9:81:31:86:a7:43:3c:fc:ab:f1:36:
1b:60:e1:c5:e4:8f:fa:e2:1a:39:01:8d:d7:6e:55:
00:17:43:cf:88:10:33:8f:24:04:12:25:99:20:a1:
74:8c:22:d9:37:69:96:00:34:b2:e1:4e:a3:a1:3b:
9c:4f:ac:3f:34:c8:78:a4:aa:13:cb:ca:42:de:b9:
d8:c5:8a:60:fd:b8:41:bc:61:31:d4:ff:b2:db:20:
17:bf:ca:7d:b1:12:16:2e:54:0d:40:1a:a6:6a:fe:
6f:fc:ae:48:28:eb:1a:94:c2:59:72:03:d7:6f:ab:
3c:1b:4f:6c:3c:bf:b1:58:06:eb:be:2e:91:59:3a:
eb:5a:ff:b4:20:b3:34:48:12:c1:c2:fd:28:de:76:
0c:68:4b:17:a9:76:f0:17:78:2f:b9:c5:19:d9:2a:
a1:18:7c:d6:d2:9a:51:bd:af:ac:81:76:b7:a8:52:
48:c0:df:d3:7b:21:15:b4:e9:28:32:23:de:7a:f0:
84:c9:b0:af:e6:41:46:ad:63:37:41:22:7d:ea:67:
7a:7a:0b:23:01:07:2f:d6:c8:32:fd:4a:bb:8d:d3:
70:f1:09:e2:a2:34:cf:ee:8b:04:bc:89:5d:06:9f:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D5:73:DD:C6:46:D5:49:A4:12:92:36:22:C8:71:25:E7:D7:92:80
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:56:dc:ec:91:39:0e:d6:9c:28:38:6e:d8:07:92:6d:0b:ba:
c8:b3:66:5b:3a:d5:2a:52:15:01:87:fa:e2:04:20:8e:1f:f7:
f0:8f:65:09:dd:41:47:70:35:3d:15:88:b4:42:93:36:69:6b:
05:0b:30:92:37:0f:d3:c3:31:12:43:e9:c3:09:b8:d4:4c:f0:
49:cc:d9:bf:a6:5b:32:b5:67:36:7f:82:3a:aa:4a:55:01:a1:
86:94:a0:9e:e6:80:21:f4:9e:b2:e7:3a:72:54:1d:6b:18:00:
f2:27:97:ba:93:89:57:fe:6f:3d:d3:ce:26:13:1c:9c:b1:37:
af:3e:67:5d:15:83:f8:16:bf:cd:66:ff:5b:e0:b6:79:4d:37:
3e:56:22:b1:94:21:25:a5:cc:94:b2:02:68:5c:5b:5f:2b:e4:
bb:f0:87:d4:f6:1a:f7:66:86:56:b6:e8:b3:fe:01:a9:f0:54:
7a:37:d3:ee:8e:79:b1:f7:6c:68:f3:0a:a2:1f:f7:93:2a:08:
a0:58:25:35:b3:27:c3:15:28:b2:3e:0f:32:8e:15:20:02:ae:
bb:7b:a6:a8:f7:93:e0:d8:33:c1:95:6e:01:44:25:0a:54:29:
07:b4:ae:c1:44:d6:6e:38:74:68:47:f8:7c:5d:cb:ec:a9:e6:
29:aa:43:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:54 2026 by rpki-client