Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
File: nAK6r7b7qr_o-oTdJp9bopIPFYM.mft (raw, json)
Hash identifier: ptpQgU6vfGqc80Bd7IwBx355nhf79RD/q3cNGHpit1o=
Subject key identifier: D2:B4:96:4A:1A:DC:21:8E:DA:1B:49:AC:0A:00:6A:84:21:4B:51:C8
Authority key identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
Certificate issuer: /CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Certificate serial: 019D27728C52969E9FF405D300C22BD77D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
Manifest number: 1881
Signing time: Thu 26 Mar 2026 00:01:51 +0000
Manifest this update: Thu 26 Mar 2026 00:01:51 +0000
Manifest next update: Fri 27 Mar 2026 00:01:51 +0000
Files and hashes: 1: nAK6r7b7qr_o-oTdJp9bopIPFYM.crl (hash: q2YUy6IxRwUb/CV4sT93rwhZsZZaRpcYfFqotNVBMSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:8c:52:96:9e:9f:f4:05:d3:00:c2:2b:d7:7d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Validity
Not Before: Mar 26 00:01:51 2026 GMT
Not After : Mar 27 00:01:51 2026 GMT
Subject: CN=d2b4964a1adc218eda1b49ac0a006a84214b51c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:94:1d:b7:72:3d:c9:97:61:78:b8:6e:62:
fb:b8:ca:89:25:89:0b:5d:25:78:8a:dc:d8:ea:96:
c5:ef:bd:1a:17:b0:12:9f:db:c4:9e:67:23:44:01:
54:86:4a:74:d3:18:92:9a:8a:f5:4f:4e:bb:99:56:
fb:06:be:1d:9e:c3:d1:c4:28:8c:91:4f:73:7f:5e:
38:24:45:d2:d7:62:28:bc:3f:86:f4:36:21:1a:66:
0b:49:38:aa:7b:0f:ad:c5:37:a5:66:df:4d:2c:04:
5a:68:a0:ad:eb:19:36:e7:79:57:0b:21:bf:6e:f4:
87:11:d2:29:ca:ba:c8:16:02:fb:54:da:c9:3c:2a:
bb:c7:8c:29:d2:ce:84:08:05:77:13:50:e5:d8:16:
41:0e:2d:fb:df:cf:29:4e:72:66:c7:b4:b8:9d:d4:
79:f3:0f:78:62:27:12:4f:cb:5e:78:67:60:92:21:
13:67:79:b6:54:19:e8:f1:05:e1:c9:e6:c0:6d:e7:
61:4b:b9:e8:0b:bd:3c:31:b0:30:18:5e:ac:e0:5f:
b6:1d:f0:35:9b:2c:b5:9f:f2:66:42:cb:92:94:04:
6d:89:23:f2:21:32:31:0a:82:fb:e6:df:99:7e:2e:
c4:5e:92:73:91:c3:1d:21:b6:07:c0:9b:ba:c9:51:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B4:96:4A:1A:DC:21:8E:DA:1B:49:AC:0A:00:6A:84:21:4B:51:C8
X509v3 Authority Key Identifier:
keyid:9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d4:e8:2e:2e:71:ae:57:7f:e5:b0:01:36:2d:b8:88:64:4c:
3e:e3:f3:4c:15:57:31:29:49:a0:51:fc:8b:07:83:8d:70:a6:
32:0a:91:20:0c:7d:7e:55:83:bc:cb:09:65:92:01:2c:6d:d7:
19:04:88:52:0c:b2:de:ee:20:d1:65:03:b2:b9:e0:4e:74:78:
42:d0:a1:fb:98:75:19:50:9f:45:bc:6d:06:51:f0:e2:88:a4:
01:ee:5d:fe:40:2c:6b:7a:50:af:11:a2:54:f0:c6:75:e4:57:
45:e1:28:b2:5b:e2:43:49:d1:30:aa:4d:90:1d:9a:93:58:29:
0e:43:da:ba:1a:fb:d6:b8:f6:13:6c:0c:ce:fc:1e:c4:75:84:
75:ba:a8:6e:2f:a3:8c:0b:2b:cc:f3:41:32:8b:94:99:96:37:
07:cb:c6:fe:d9:17:b1:af:e4:5e:0d:ae:28:32:8a:a3:cb:1f:
d7:e1:26:0c:50:6a:df:e2:33:ff:67:2c:a5:29:66:c3:a9:93:
2a:4e:81:81:c3:eb:aa:cd:ed:54:2c:05:eb:de:1b:43:58:5f:
02:8f:c5:e2:11:a7:19:9c:10:98:ae:76:87:1e:26:60:53:bc:
a9:a6:45:e3:97:d2:f0:b8:d2:ea:c7:57:87:b4:e2:14:1e:2b:
e8:1d:81:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:46 2026 by rpki-client