Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
File: NGbkl-i6koMIR7TYtnEDJdI72oU.mft (raw, json)
Hash identifier: tQPh0hNYUvC/FhdYY/WWl7nIlE+dZI8JZicHGSkn57c=
Subject key identifier: 44:09:73:3C:F8:0A:97:85:96:EB:4B:C9:C9:DE:42:DA:9D:7B:75:8D
Authority key identifier: 34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85
Certificate issuer: /CN=3466e497e8ba92830847b4d8b6710325d23bda85
Certificate serial: 019D25BA9AD2060D8A1913DD88E5E19C4DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
Manifest number: 08E4
Signing time: Wed 25 Mar 2026 16:01:19 +0000
Manifest this update: Wed 25 Mar 2026 16:01:19 +0000
Manifest next update: Thu 26 Mar 2026 16:01:19 +0000
Files and hashes: 1: NGbkl-i6koMIR7TYtnEDJdI72oU.crl (hash: pN3Suq/Uvm8+b9U/xLOez1fhDH6LPoPbXuR+0su1Blw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:9a:d2:06:0d:8a:19:13:dd:88:e5:e1:9c:4d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3466e497e8ba92830847b4d8b6710325d23bda85
Validity
Not Before: Mar 25 16:01:19 2026 GMT
Not After : Mar 26 16:01:19 2026 GMT
Subject: CN=4409733cf80a978596eb4bc9c9de42da9d7b758d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:47:b7:8a:e2:80:94:42:24:71:dc:4a:e5:
a4:d5:79:d3:dc:27:fc:71:2f:40:07:aa:c5:57:e8:
bc:8d:3a:11:65:65:0c:f7:ad:ba:c5:5a:24:81:9e:
c1:df:7b:da:6d:75:5b:e4:cc:85:73:fa:cf:75:0e:
df:52:d3:08:6e:18:c0:42:7f:10:da:09:bf:d3:50:
9e:1a:a3:00:93:f6:7c:88:53:69:c5:31:df:74:a4:
aa:a8:69:76:18:81:9c:7f:9b:a4:8a:20:4f:63:12:
3e:d5:e5:77:dc:f8:e3:37:fb:1a:4b:71:8a:f6:c0:
17:20:58:0c:c1:94:d9:f7:44:06:35:1f:4d:77:2b:
91:bb:16:a8:9b:6d:46:4a:a7:77:ff:e1:fc:11:bc:
e2:7d:94:66:0a:6a:44:35:51:bd:80:76:ca:fa:a9:
81:19:3c:f9:08:1e:a2:78:83:9a:77:db:09:44:d1:
60:0c:38:65:e6:b1:6c:4e:50:c9:79:9e:51:47:60:
5c:a7:f5:36:0e:5b:da:bd:56:77:90:11:32:10:75:
30:77:ea:3e:21:ec:5a:b9:43:6f:73:8b:d6:7c:00:
77:19:43:fb:c8:e1:72:44:67:1c:f4:de:85:22:b6:
b0:da:44:05:bc:a2:74:ff:3b:13:9e:ed:84:6f:b9:
6b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:09:73:3C:F8:0A:97:85:96:EB:4B:C9:C9:DE:42:DA:9D:7B:75:8D
X509v3 Authority Key Identifier:
keyid:34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:98:1f:e3:a5:8c:c8:e7:f1:e9:0c:70:8d:aa:5a:2a:88:93:
86:45:7f:44:e3:ec:30:80:24:63:13:17:12:69:e3:6d:b6:46:
d2:b0:3b:05:1e:72:8a:ff:cd:54:f4:49:b3:95:8e:b5:ec:02:
34:e3:bb:91:40:19:7a:95:ef:62:89:87:d6:32:2a:bd:7d:25:
06:51:9f:26:f8:63:4e:1f:77:23:11:2e:cc:19:65:8f:ae:1a:
6a:d6:d3:24:da:a4:61:17:99:71:3b:83:2f:03:9c:7f:9b:97:
3e:b2:2c:51:f1:4f:b6:93:3b:8b:0e:5f:f0:74:16:f5:db:1f:
73:04:5a:d5:be:72:f0:0c:5c:6f:4a:0b:c6:0a:d9:0d:fa:3b:
b1:31:b4:a0:bc:9f:40:3a:e1:b6:e7:5f:ab:ea:a8:71:1c:c4:
68:ef:a8:cd:9b:f1:b1:d8:db:8b:7e:9a:c7:dd:e8:ac:9c:bb:
56:0b:d8:f1:ab:1f:53:93:e0:55:84:3d:cb:a2:e1:e0:99:00:
05:a2:58:00:79:ac:45:25:98:87:f9:55:6a:59:49:47:5a:87:
8a:6e:ec:81:6b:cb:8c:0c:90:67:94:3d:d8:59:62:4c:57:46:
34:f8:d5:69:f4:02:80:2d:f6:91:dd:62:d4:1e:58:64:62:02:
02:4c:7e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:45 2026 by rpki-client