Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
File: nEbB13YgBThO2FJs-hx0llZPUNM.mft (raw, json)
Hash identifier: ZMY/Q1IOBG+vXCYmoquDE9xS9/coKLUsr74VjkV3GR0=
Subject key identifier: 0D:5E:E5:51:96:BF:C9:11:50:8E:21:00:4E:A2:C9:7D:DA:BA:49:32
Authority key identifier: 9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
Certificate issuer: /CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Certificate serial: 019D29CDC2642B10E343D5FDAC41C25461DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
Manifest number: 0720
Signing time: Thu 26 Mar 2026 11:00:43 +0000
Manifest this update: Thu 26 Mar 2026 11:00:43 +0000
Manifest next update: Fri 27 Mar 2026 11:00:43 +0000
Files and hashes: 1: nEbB13YgBThO2FJs-hx0llZPUNM.crl (hash: JDIbfDSzTEflbgCFc/ipMygxPb6134Roi+thZXQZow8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:c2:64:2b:10:e3:43:d5:fd:ac:41:c2:54:61:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c46c1d7762005384ed8526cfa1c7496564f50d3
Validity
Not Before: Mar 26 11:00:43 2026 GMT
Not After : Mar 27 11:00:43 2026 GMT
Subject: CN=0d5ee55196bfc911508e21004ea2c97ddaba4932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:75:69:23:5f:66:37:d9:da:03:04:22:d8:
c0:4d:25:94:eb:e5:84:4a:51:1c:1c:3d:a2:46:23:
cd:cf:49:59:92:f6:42:42:8a:a5:3a:ea:b5:3a:f0:
ab:e8:6c:84:12:f4:d4:0d:1e:3b:da:33:8f:14:52:
ce:2c:c0:76:54:f3:5f:8d:bc:36:02:b0:ce:ae:4c:
8f:02:8d:1e:46:4b:52:a3:a4:9e:bd:79:9b:3f:ca:
64:5f:c9:2b:ac:c9:c9:66:9b:4d:2e:a3:21:e1:ef:
94:be:d8:16:e2:75:a8:e7:f0:02:38:21:ca:0b:57:
48:c3:b2:54:44:08:39:da:e3:02:85:8d:8b:8c:97:
71:37:23:b0:37:d5:0f:57:ec:a5:5f:75:ae:66:80:
75:9a:11:7f:2d:43:4f:c8:de:e1:fb:7b:fe:a1:35:
ff:f6:55:2f:70:36:ba:93:19:87:df:99:32:5f:86:
66:3f:ae:b0:73:07:50:07:a4:c3:f9:ca:b5:05:11:
24:00:90:3c:0d:c4:e4:20:32:7c:9e:04:c1:14:2b:
b4:42:a8:0c:46:68:80:cd:4f:fd:77:4d:9a:b2:19:
db:f4:2b:e6:84:2a:ff:fc:7e:ed:7f:e4:03:84:e4:
77:dc:46:60:bd:10:36:c1:c3:01:6d:27:83:08:a1:
89:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5E:E5:51:96:BF:C9:11:50:8E:21:00:4E:A2:C9:7D:DA:BA:49:32
X509v3 Authority Key Identifier:
keyid:9C:46:C1:D7:76:20:05:38:4E:D8:52:6C:FA:1C:74:96:56:4F:50:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEbB13YgBThO2FJs-hx0llZPUNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2b5e0d-19a9-4036-98b6-ca65a9723c59/1/nEbB13YgBThO2FJs-hx0llZPUNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:22:ec:6c:61:33:7a:8b:c5:8a:b2:aa:5b:1a:b7:99:9c:ec:
37:a5:d3:72:ef:23:11:43:0b:f0:16:cb:e1:86:15:d1:f6:37:
a6:a6:e5:70:7d:1b:14:0d:a9:7f:02:50:43:3d:cc:9f:d5:ab:
6b:f8:66:bf:b8:61:85:b0:d2:f5:9f:56:2d:5e:f6:6b:f4:13:
9d:fe:65:22:95:46:26:ef:d2:86:01:5f:46:53:52:2a:97:dc:
6c:2c:fe:b4:a5:5d:84:40:d4:a1:07:05:c6:e9:ea:ce:f2:d3:
1f:db:8d:cd:0b:7f:eb:99:db:ef:48:ee:ac:48:10:f0:75:39:
82:55:c4:f4:ba:94:97:3d:8d:a1:a1:05:b2:39:cd:15:a8:ab:
3c:c6:0a:50:b6:f9:68:a7:d9:00:45:4d:36:da:8f:15:3c:52:
17:f5:5f:36:59:c0:a1:bc:fa:d1:49:7f:28:48:ce:50:85:ad:
ee:47:e9:ae:6a:f0:29:44:03:c7:cf:48:2a:7e:28:06:49:27:
18:ec:66:a8:63:c1:c7:3a:fb:07:ce:cc:c9:c8:d4:62:bd:bf:
1f:25:2a:65:19:7c:e5:91:7e:be:7e:fb:18:7c:66:76:7d:e2:
23:b8:f1:81:a7:98:16:c4:12:43:ac:14:fc:a6:71:af:99:6e:
2f:18:52:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:47:46 2026 by rpki-client