Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
File: nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json)
Hash identifier: Yui3GfAE3B8DOwlRcXuy61X+bUKRvZgoOp0WZ1yJb1I=
Subject key identifier: 18:70:26:24:A5:59:84:4A:E6:81:05:E5:77:50:DD:83:1E:01:19:2A
Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
Certificate issuer: /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Certificate serial: 019D2929301A5964BE45466071F6744D430F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
Manifest number: 0600
Signing time: Thu 26 Mar 2026 08:00:58 +0000
Manifest this update: Thu 26 Mar 2026 08:00:58 +0000
Manifest next update: Fri 27 Mar 2026 08:00:58 +0000
Files and hashes: 1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: wpuTDVcffw0lUjp+iHQD5xuFrPj9SLi1WzNZqwduJHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:30:1a:59:64:be:45:46:60:71:f6:74:4d:43:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Validity
Not Before: Mar 26 08:00:58 2026 GMT
Not After : Mar 27 08:00:58 2026 GMT
Subject: CN=18702624a559844ae68105e57750dd831e01192a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:cc:4b:42:cb:12:c9:76:f2:ac:27:37:c7:
26:52:52:7e:f7:7a:a0:a6:cc:1f:8a:ef:6e:b4:4d:
86:bc:d3:79:7e:5d:f8:65:c1:0c:75:4c:54:00:39:
7b:01:6b:47:7d:d9:9d:98:a4:77:2e:cf:2d:61:c6:
6d:0f:76:c3:7c:5a:56:dc:2e:bd:e9:6f:59:4f:b6:
f3:fb:e9:f8:0b:90:f9:96:55:16:93:c6:a7:87:00:
bb:f9:8b:67:6d:79:7d:22:92:04:08:72:85:d5:83:
95:47:84:a1:57:37:16:ef:5e:ad:ef:c1:31:71:d7:
2a:d1:a9:c2:6e:34:91:b7:a0:22:e3:ea:d7:e3:83:
d0:8b:8d:bb:b8:d9:84:d0:78:56:26:4b:61:2c:1c:
99:c2:c9:07:c5:a9:09:34:f7:22:2b:76:24:07:e5:
e1:e0:1c:34:29:f9:71:9b:db:22:d9:b1:3b:e1:f3:
cc:73:ce:7c:24:2c:03:d5:a5:30:3e:20:81:c6:25:
9b:52:97:cd:a3:c7:ee:2a:0e:9d:10:fa:9c:ca:14:
8c:8a:bc:04:37:df:55:90:4f:01:02:9d:b1:68:8f:
89:eb:c1:1c:3d:87:ff:17:8b:85:2b:0f:d5:f9:a3:
1c:4d:74:7b:af:fa:bc:a9:6e:be:11:eb:d6:0a:4b:
36:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:70:26:24:A5:59:84:4A:E6:81:05:E5:77:50:DD:83:1E:01:19:2A
X509v3 Authority Key Identifier:
keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5a:69:5d:ea:e8:c2:3f:ea:43:9e:61:ac:f1:ee:0f:9d:37:
d5:1f:76:98:28:74:9d:91:05:d0:5f:b4:27:61:e0:b2:44:7c:
04:95:97:51:e8:0c:c5:a3:d7:81:bf:2c:b3:9e:4e:dc:55:c1:
d6:33:f9:c2:c7:c1:3e:61:e3:10:58:e3:94:43:24:3e:49:30:
c0:90:ac:45:78:13:9d:c8:31:7d:9b:35:e2:8a:86:88:60:8c:
85:4f:c7:69:60:49:c8:b4:a6:9a:1c:96:69:e9:78:1d:82:e8:
3f:40:b6:01:b0:ec:0b:e2:24:c1:1d:80:20:c9:90:14:34:8e:
af:61:eb:73:83:a0:68:fe:52:10:1a:25:0f:4b:29:0b:50:68:
e9:c8:20:20:c9:e9:c0:63:86:41:f2:88:dd:ad:a4:26:27:db:
49:5b:53:73:e0:2f:a5:9c:d6:7d:aa:59:bf:72:9f:db:82:c4:
d9:34:10:b5:e9:33:c2:8e:d6:24:9f:a7:19:da:98:f4:6b:2c:
8b:57:05:41:24:8e:42:72:44:b1:36:00:6e:6f:37:eb:af:2f:
1c:83:94:f0:f6:f3:e8:c0:8c:28:3e:b3:a2:b4:0b:17:85:cb:
64:aa:d0:61:69:7c:84:e3:1a:55:05:b5:78:7c:74:51:93:6d:
3b:3c:6a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:25 2026 by rpki-client