Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File: NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier: p5y9kmP1furgVVGaiMWBTqhNJC9GSlGoM8NpT2mtJYM=
Subject key identifier: 2A:5C:3B:77:18:BC:4D:EB:57:2C:05:03:70:FF:DF:ED:CB:81:3E:85
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer: /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial: 019D270459F9786B4B0C8B20A168E4D48005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number: 0EC7
Signing time: Wed 25 Mar 2026 22:01:29 +0000
Manifest this update: Wed 25 Mar 2026 22:01:29 +0000
Manifest next update: Thu 26 Mar 2026 22:01:29 +0000
Files and hashes: 1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: 7KKl7OV6Dceiw5R2ZpN55vnVsFz1viz7ZRpCYVkDKd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:59:f9:78:6b:4b:0c:8b:20:a1:68:e4:d4:80:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Validity
Not Before: Mar 25 22:01:29 2026 GMT
Not After : Mar 26 22:01:29 2026 GMT
Subject: CN=2a5c3b7718bc4deb572c050370ffdfedcb813e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:b7:49:63:72:af:99:1a:c7:a5:3b:c6:62:
1c:65:36:1a:62:b3:1c:61:35:13:09:bf:fb:23:45:
10:e8:6c:78:36:a6:33:4b:97:17:df:c9:e7:fa:58:
55:75:74:1f:bd:eb:7f:70:82:84:e6:43:dc:14:d5:
a8:2a:0a:d6:b2:f3:c4:41:4f:7e:63:98:fb:1f:cc:
8d:a8:87:b3:8e:26:ba:4e:a6:38:33:42:69:41:e9:
52:da:bd:48:8b:e1:a3:86:31:48:e1:a2:6f:7c:c5:
12:e8:35:d5:17:40:3f:6c:c8:50:24:a9:c9:db:2d:
ee:c8:e4:e8:b7:fb:af:6d:91:35:5e:ce:9f:a7:53:
1c:14:3b:19:a5:aa:e4:62:1b:7c:93:02:6e:e4:ed:
8d:84:ff:24:4b:7b:58:69:42:32:ca:d4:d7:0c:c9:
4a:28:2b:5b:7c:61:53:38:ae:37:ae:d3:8f:44:99:
2a:31:1a:0a:57:e4:03:44:60:80:29:69:96:07:bb:
74:67:7c:a1:15:39:3e:d4:15:b4:79:13:3c:ac:69:
51:ba:8b:22:25:91:52:46:28:d7:e6:14:79:de:2e:
02:72:f7:09:d3:ea:98:d5:93:c4:0e:95:11:45:c9:
fe:09:93:39:52:78:a4:9a:8e:22:d5:04:7e:35:b7:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5C:3B:77:18:BC:4D:EB:57:2C:05:03:70:FF:DF:ED:CB:81:3E:85
X509v3 Authority Key Identifier:
keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:43:43:3d:14:3c:f4:cf:37:19:f5:bd:99:44:0d:a9:12:a7:
41:48:00:3c:0e:73:90:13:22:d5:d4:59:a3:fc:6b:1e:a4:35:
cf:ab:83:d9:8d:17:0c:e3:bf:32:0a:d0:e4:77:16:be:ee:da:
fd:f1:2e:d0:1a:62:a9:93:4e:ae:2c:95:7d:c3:da:59:09:28:
81:7a:98:69:16:31:59:40:44:6a:37:33:86:1c:c3:18:56:0f:
4a:a8:2d:1b:b5:75:b4:87:6a:10:9a:86:a6:66:19:f1:4e:e4:
b7:2d:ea:1d:9b:54:ae:45:96:57:a6:f7:6b:2e:be:d3:fc:1a:
d8:b7:37:84:f1:ff:0f:69:d6:21:34:2d:a2:cb:cd:90:a1:d7:
4c:85:f3:ad:76:c9:61:45:4e:96:e7:9e:88:61:5f:ee:91:13:
4b:5f:5f:37:c6:c0:16:9a:d1:7e:69:1f:89:bb:e9:69:8e:f3:
09:66:83:ef:42:54:dd:93:b7:aa:a1:d1:99:eb:3a:a7:d2:e4:
a6:a4:a6:e9:d4:7e:6f:fe:bd:8e:4b:d7:24:16:0b:d9:54:da:
d5:1f:01:da:71:e6:52:4e:45:54:5c:66:57:3d:6e:45:0d:1e:
4b:2b:f5:1e:73:ac:a4:22:7d:b1:23:a8:82:29:d2:f2:d5:ef:
6f:88:f4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:45 2026 by rpki-client