Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
File: NhIf0uc0bus8H451uTyE-VhB9EY.mft (raw, json)
Hash identifier: 7KWgpu5eZi5ZiMUa5eMbkXMX4ncr5PwbFvmkOBNTG7k=
Subject key identifier: 37:37:47:0E:18:34:C7:21:37:B7:A0:91:96:89:FC:13:10:88:6D:89
Authority key identifier: 36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
Certificate issuer: /CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Certificate serial: 019D2BF3510EED4D778EA1985B7C5B5B289B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
Manifest number: 059F
Signing time: Thu 26 Mar 2026 21:00:59 +0000
Manifest this update: Thu 26 Mar 2026 21:00:59 +0000
Manifest next update: Fri 27 Mar 2026 21:00:59 +0000
Files and hashes: 1: NhIf0uc0bus8H451uTyE-VhB9EY.crl (hash: Bw8WVRiXVBfvFnT858ejWLiY92FL2LElkQQZb85mP6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:51:0e:ed:4d:77:8e:a1:98:5b:7c:5b:5b:28:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Validity
Not Before: Mar 26 21:00:59 2026 GMT
Not After : Mar 27 21:00:59 2026 GMT
Subject: CN=3737470e1834c72137b7a0919689fc1310886d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:8a:b6:7f:21:00:93:fb:06:6b:80:97:3d:
9e:36:56:7a:f9:82:9f:de:4d:23:d6:e9:16:f8:cf:
be:1a:f1:ab:92:32:a8:21:49:72:df:ca:e2:9b:d4:
59:49:1f:13:fc:ef:32:cb:dd:fc:4d:f5:1b:38:5d:
9e:db:bb:64:08:0b:8b:1c:0a:13:b1:e4:26:57:c1:
6e:bf:32:64:be:01:12:4c:f2:ea:fe:cf:9e:55:99:
6c:aa:2b:80:df:6a:08:20:fb:8e:29:22:fc:7d:b0:
25:df:18:82:2c:c2:d2:07:d5:36:09:47:58:7f:6c:
de:36:cf:28:cb:72:02:74:d3:87:a7:5b:d2:c3:f6:
57:e6:d6:31:28:81:01:fd:02:7b:2c:2c:61:fa:58:
1d:6f:50:57:35:a3:ec:4f:d4:2c:03:b2:f2:cb:f5:
34:8c:a8:0a:b7:1a:2b:fb:d0:23:e4:aa:b4:a7:0f:
21:08:c9:2c:67:9b:aa:cc:4c:ed:bd:7a:02:5e:c8:
38:c8:9a:6f:5a:b3:43:8d:24:b1:06:d0:fb:b8:82:
21:90:b9:f1:5d:b3:17:5f:31:00:2f:52:69:ac:f2:
22:22:e9:1e:6c:0b:86:01:01:e8:79:66:53:0a:92:
9f:07:c7:d3:21:95:e0:6f:d0:05:44:dc:52:97:97:
43:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:37:47:0E:18:34:C7:21:37:B7:A0:91:96:89:FC:13:10:88:6D:89
X509v3 Authority Key Identifier:
keyid:36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3a:30:86:90:46:4e:b8:01:dc:3c:4f:f6:12:08:93:9e:82:
3e:5d:4f:a3:b2:d7:4f:c6:0b:d3:7d:25:67:67:86:7d:f1:78:
22:04:b3:2c:4a:ce:d4:79:b3:4d:b7:8a:35:b9:47:33:2d:de:
8b:76:66:7a:5a:00:ab:dc:a0:88:17:24:d6:60:28:20:12:d3:
90:3b:a1:d6:21:c3:39:b5:9a:c7:13:31:6a:2a:fd:c1:a2:d0:
23:d1:ed:29:74:a4:be:37:75:f6:a6:a2:b7:3b:4a:9e:c4:ec:
fe:08:38:84:28:94:59:c0:ea:c7:02:11:18:2d:04:d0:2c:69:
63:1c:60:50:c8:41:27:f4:38:c7:91:78:67:75:15:af:e2:af:
0d:a7:77:a4:7b:2a:7a:8e:45:e3:92:29:fd:30:0d:fa:54:27:
ca:16:5f:1a:64:b4:18:ca:49:10:4d:ce:b4:4f:ce:fc:e8:be:
bc:0c:19:f2:1b:e2:f4:4c:5d:e2:77:d9:6f:7b:a9:d0:16:f1:
45:7a:8a:d0:cd:81:90:35:eb:ad:38:9f:17:6f:71:e8:89:a1:
71:b2:02:43:79:2e:32:46:99:11:18:44:2e:c0:6c:53:27:e2:
03:5c:8e:07:fc:42:77:cc:b2:0e:8d:6f:15:e0:f8:89:01:30:
9f:11:2b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:33:40 2026 by rpki-client