Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json)
Hash identifier: Vn7QOGViGC/GfJxXZeMvUcM43tbw54PWLNIuU3FcKK0=
Subject key identifier: 53:22:69:B8:53:30:2E:56:71:3B:54:BD:E7:5F:FB:31:F4:AD:2F:BB
Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Certificate serial: 019D273AFD290166A3C039B99E8A3C0206BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:01:10 +0000
Manifest this update: Wed 25 Mar 2026 23:01:10 +0000
Manifest next update: Thu 26 Mar 2026 23:01:10 +0000
Files and hashes: 1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: tcgeutFSZpwPg+oXvHrVP8VrirdSEGhmnGFfcQQ8L14=)
2: TM1bxUMPDPyCHRavcIw7WxQjRbU.roa (hash: UaG8J2YnGAjViEmyxsyTzCRJYYoHOIo0htvybh8voBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:fd:29:01:66:a3:c0:39:b9:9e:8a:3c:02:06:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Validity
Not Before: Mar 25 23:01:10 2026 GMT
Not After : Mar 26 23:01:10 2026 GMT
Subject: CN=532269b853302e56713b54bde75ffb31f4ad2fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:af:fe:9d:47:33:ed:3f:40:d5:36:37:d8:5f:
ed:d2:29:88:04:9e:7c:7a:96:43:f5:75:37:58:b0:
3e:5a:6d:56:18:b2:46:cf:be:40:a5:76:c3:9c:ef:
ac:33:07:67:f1:dd:f4:44:8b:f3:e5:46:35:b0:5a:
ba:ed:fa:9f:b9:59:72:61:7a:30:9d:80:64:f2:a0:
28:b1:c8:11:b1:86:15:3c:28:44:e0:42:5c:94:a3:
33:a3:a3:81:b0:cc:e7:70:dd:63:a1:af:79:a5:11:
47:c0:44:18:cf:2e:53:df:70:dd:f3:c8:65:bd:4d:
b2:e0:2c:fc:53:34:5b:3f:3a:81:1f:2e:0b:1b:98:
eb:7b:af:69:35:7e:1d:5b:16:0f:15:76:b4:6a:8b:
de:97:8d:65:e2:4e:ac:6d:3c:9c:81:e0:d3:0b:60:
60:2d:32:88:30:21:cc:99:72:69:73:a5:f5:c2:fe:
11:ce:be:35:60:71:b5:08:68:c9:2f:ee:03:3a:d9:
eb:ff:9e:b5:ac:3b:70:37:10:d4:db:2c:e4:05:7b:
ba:59:75:1e:4a:13:c6:b0:5a:71:85:3c:ed:4c:49:
09:67:c1:eb:be:93:9f:0a:fe:52:31:a4:9a:a0:13:
ec:3d:16:07:f5:a1:9e:bf:fd:2b:6a:29:3f:57:96:
66:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:22:69:B8:53:30:2E:56:71:3B:54:BD:E7:5F:FB:31:F4:AD:2F:BB
X509v3 Authority Key Identifier:
keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e7:0e:9e:e5:92:57:c9:bc:8f:51:e5:65:c1:22:ad:ef:8d:
22:04:fc:50:47:95:bc:90:55:c5:66:4c:04:f4:2b:4e:dc:8f:
f9:a4:17:e0:d7:93:99:e3:6b:47:a6:08:ab:f9:8f:2b:0b:6c:
9f:1a:9b:9c:6e:d5:9f:da:fd:13:0d:45:91:64:38:6e:cd:e2:
e6:bf:b3:bb:29:4f:c9:85:01:78:ad:db:1c:7b:b7:6a:8f:d5:
7f:14:7b:ec:47:cd:95:c5:dc:9c:9b:88:7f:88:93:20:f2:ad:
05:5b:f3:07:1b:04:43:09:8e:0f:9b:a5:ae:20:47:c5:04:e5:
f0:af:fc:c9:20:41:31:ca:cd:c6:f9:25:b6:2a:c7:f5:e2:0b:
5b:ba:0f:63:90:4b:42:0c:7d:c6:bf:90:0e:90:11:07:cf:24:
45:34:51:63:03:ae:85:af:09:23:98:1f:16:18:74:0b:8c:de:
5a:2b:01:4f:d6:7c:e3:3c:9e:64:f1:30:c3:aa:65:c2:4b:cd:
be:45:18:c4:b4:e7:cc:75:5d:74:9a:fb:5a:da:7b:6e:94:31:
34:f1:1e:1a:ae:a8:48:ec:9f:d7:8c:a8:19:73:f3:33:4c:4d:
eb:32:3c:01:08:a0:b8:27:1a:09:58:85:14:1e:df:1c:33:82:
c9:1e:dd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:10:27 2026 by rpki-client