Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
File: NkITiw7v_lajLMuqWNb_5u3D8p4.mft (raw, json)
Hash identifier: ecD0PdEf74aGwE0/nGlyMSWjdbKM6ByQm0m0caQz+Ho=
Subject key identifier: 23:DF:7B:69:19:8E:17:22:66:7E:E6:E1:6F:6C:37:E1:4F:DB:2B:9A
Authority key identifier: 36:42:13:8B:0E:EF:FE:56:A3:2C:CB:AA:58:D6:FF:E6:ED:C3:F2:9E
Certificate issuer: /CN=3642138b0eeffe56a32ccbaa58d6ffe6edc3f29e
Certificate serial: 019D28F2E279611001A23CE8D1944147819B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
Manifest number: 078B
Signing time: Thu 26 Mar 2026 07:01:39 +0000
Manifest this update: Thu 26 Mar 2026 07:01:39 +0000
Manifest next update: Fri 27 Mar 2026 07:01:39 +0000
Files and hashes: 1: NkITiw7v_lajLMuqWNb_5u3D8p4.crl (hash: rGPn5sWe3OVjwUe35ucUR2e16GjYR9uDqJTmoqMGm/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:e2:79:61:10:01:a2:3c:e8:d1:94:41:47:81:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642138b0eeffe56a32ccbaa58d6ffe6edc3f29e
Validity
Not Before: Mar 26 07:01:39 2026 GMT
Not After : Mar 27 07:01:39 2026 GMT
Subject: CN=23df7b69198e1722667ee6e16f6c37e14fdb2b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:f1:c9:e1:dd:a8:e1:31:a0:3f:75:f9:34:
2d:6a:a2:6a:93:2d:c2:6b:6b:90:ae:bd:ad:e7:47:
37:71:90:66:4a:ba:6c:54:78:75:80:20:07:1e:be:
91:4c:2e:8b:01:b2:ea:17:ff:7b:23:2a:08:10:b8:
42:70:d1:27:41:63:e8:97:bc:cb:a5:fc:99:67:49:
f1:f9:bc:ae:f8:0f:5c:6f:61:92:e8:0b:cc:c4:f4:
c6:92:f5:7f:8a:24:76:8b:78:53:2a:59:80:98:ec:
25:ac:98:bc:54:b9:30:90:c7:b8:e0:78:62:38:17:
b5:49:17:07:b6:02:e1:7d:94:ba:f5:fb:9e:e4:2c:
90:a6:fa:9a:97:d6:b0:db:5a:82:81:14:69:d8:59:
93:87:a7:1c:43:af:7b:b2:07:8c:dd:bf:db:91:ab:
f5:16:ad:b2:eb:d4:b9:f8:ca:9b:03:e6:d8:0a:69:
d9:9c:15:f3:f3:ce:78:e0:0b:98:5c:c1:82:24:93:
f2:fa:10:3f:44:b7:9f:d5:47:db:97:42:f5:71:96:
2c:80:10:37:af:9b:1c:b7:31:60:c2:4f:91:ac:bc:
0b:e6:ce:c2:70:6e:9e:42:2a:7a:7b:18:31:a7:d9:
5c:0d:55:a6:9f:2a:2a:2e:26:9b:7a:d5:b0:a2:a6:
84:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DF:7B:69:19:8E:17:22:66:7E:E6:E1:6F:6C:37:E1:4F:DB:2B:9A
X509v3 Authority Key Identifier:
keyid:36:42:13:8B:0E:EF:FE:56:A3:2C:CB:AA:58:D6:FF:E6:ED:C3:F2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:63:5f:0a:df:ca:62:f4:1a:dd:ec:59:a7:21:af:1b:2e:d4:
cd:71:9e:ae:fa:69:d3:4b:b8:01:fc:57:24:22:0e:50:87:59:
93:1a:1e:f6:61:ed:f5:70:ba:c1:39:d7:f0:6e:ba:bd:73:ac:
cd:2c:59:9f:1e:5f:f4:ec:80:a6:1c:fb:20:0c:b3:ad:33:10:
4d:f6:41:52:96:d4:fa:e6:a1:41:1c:f3:3b:1d:42:0c:d1:9b:
7f:cf:f7:0f:1e:1a:8d:72:77:c0:85:e9:6b:4b:19:56:eb:63:
b4:28:32:21:34:1c:72:d4:0c:3a:e8:41:bb:06:6d:d1:f5:54:
13:0c:38:bf:e7:23:19:b6:f3:d3:31:3b:9a:b4:18:51:9c:df:
81:81:0a:d3:f4:c4:5b:91:32:9f:12:25:5f:5a:d7:8c:21:9e:
58:22:2e:85:4b:91:94:be:b9:87:4f:fc:76:eb:b4:ba:80:f5:
1d:e4:6c:ea:79:35:1a:eb:7e:7a:f2:07:5d:88:bb:cc:a2:0d:
ac:0d:91:06:04:15:3c:f2:57:53:5e:c1:73:5a:4e:e9:c0:91:
ed:39:e5:15:91:bf:79:92:59:7c:9a:bd:a7:00:e1:a5:71:a0:
8b:61:92:c2:ee:c7:29:fe:ec:d5:82:60:9b:45:00:af:05:d5:
c9:1a:82:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:46 2026 by rpki-client