Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
File: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft (raw, json)
Hash identifier: 5mdWDQ7R0b+yWkSZNoeQxC15QLUdY/Uw7pkxFkQ9FjI=
Subject key identifier: 98:E4:14:5A:44:52:EE:A6:79:24:07:0B:1D:81:E3:9A:A4:42:6B:6D
Authority key identifier: 35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
Certificate issuer: /CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Certificate serial: 019D2772073F20F31021DBF0A11C8EC28073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
Manifest number: 0651
Signing time: Thu 26 Mar 2026 00:01:17 +0000
Manifest this update: Thu 26 Mar 2026 00:01:17 +0000
Manifest next update: Fri 27 Mar 2026 00:01:17 +0000
Files and hashes: 1: Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl (hash: hcEu5htdV5EdTI+83V8GsUvJI30QY3paK8A3mVI+mJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:07:3f:20:f3:10:21:db:f0:a1:1c:8e:c2:80:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35fc74b5798c705b30bd0eafa98ffd3d5bd422b0
Validity
Not Before: Mar 26 00:01:17 2026 GMT
Not After : Mar 27 00:01:17 2026 GMT
Subject: CN=98e4145a4452eea67924070b1d81e39aa4426b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7c:46:83:4f:cb:bd:91:89:fc:84:39:e1:1c:
d9:ef:9c:5f:12:85:c2:ac:44:06:92:c8:bf:0b:61:
3a:2b:85:01:e3:43:31:53:bf:2a:8e:d0:6b:9f:04:
5b:5f:4e:97:4b:c2:e3:bb:a7:0f:9f:aa:9f:a5:2a:
81:01:f1:e8:e4:2b:51:94:7d:7e:da:26:bf:20:24:
02:a2:7c:63:0e:a4:b0:84:ea:7a:a0:ed:a3:e1:64:
13:77:7c:d0:bd:71:37:38:0c:d3:b5:6f:7b:08:98:
ff:63:63:45:93:0f:73:07:76:7a:c0:a2:c7:1a:f5:
0e:d2:71:cc:e0:ed:05:96:22:8b:4f:a8:0e:ca:3e:
99:8d:52:fa:ef:e5:5f:33:8d:1a:2b:25:05:01:0b:
0e:47:04:ce:af:bb:16:eb:2f:17:a2:7b:f5:1e:b2:
76:96:a6:90:83:d6:67:b2:a8:bf:f2:7c:05:d6:46:
dc:13:30:09:b8:60:21:97:09:af:b6:f9:3e:f2:5c:
36:9c:c6:d1:83:19:8c:35:e7:ac:4c:20:49:d3:54:
cc:2c:7e:1b:58:be:eb:2e:85:26:0d:c9:cc:cc:96:
b9:c5:da:51:2b:77:0e:ff:18:44:5f:c0:6f:4a:b8:
e4:78:8f:1a:5a:f6:45:ad:f5:51:03:61:9c:ad:3e:
fa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E4:14:5A:44:52:EE:A6:79:24:07:0B:1D:81:E3:9A:A4:42:6B:6D
X509v3 Authority Key Identifier:
keyid:35:FC:74:B5:79:8C:70:5B:30:BD:0E:AF:A9:8F:FD:3D:5B:D4:22:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/115cd0-08dd-47ac-9848-cddcd1835516/1/Nfx0tXmMcFswvQ6vqY_9PVvUIrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ac:b6:24:e4:d8:3e:4e:26:71:5b:ef:0a:13:71:2e:4f:a7:
ba:1b:a4:b8:58:8d:0a:3c:a7:d9:00:b5:30:2b:c9:76:f8:68:
91:d5:e8:01:8a:90:fd:8a:12:31:f5:21:5c:57:67:3a:0e:93:
6f:ba:0f:6b:b5:92:66:2e:0f:b0:10:e9:f9:25:a2:6e:30:68:
90:20:15:7f:da:c8:00:0f:eb:85:15:f7:16:63:60:86:03:a3:
16:6f:c6:f8:5d:50:8a:3a:56:6c:93:4b:e2:9d:32:c7:13:7e:
21:63:e3:48:26:45:eb:fd:ca:c1:de:42:29:2b:eb:1f:a1:00:
09:b3:69:7c:b1:28:5b:00:83:b0:7b:08:7f:ba:97:da:13:d8:
a1:3b:d2:d7:29:24:e4:c2:11:64:91:73:7b:fc:5d:b1:26:f9:
0f:f3:2d:0d:ae:bc:f2:56:c1:42:6a:d3:d3:7b:4b:af:e1:75:
f5:3f:90:25:e7:c0:01:75:ce:81:1b:2e:3f:fa:ef:5d:fe:f7:
8a:ce:54:f5:8b:b0:9e:b7:d4:44:bf:6e:b0:18:cb:37:94:43:
97:80:95:7b:ce:2c:bb:1e:ee:28:65:d7:47:73:91:9d:bf:54:
5e:c2:96:33:10:61:ad:fc:b1:40:c6:a0:c9:d4:f2:16:94:6e:
fa:84:19:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:04 2026 by rpki-client