Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
File: nGCyJ8t1doofV4Vuw1M8loSCYZw.mft (raw, json)
Hash identifier: 6WZZ6QADyuTK1FIkYg76zJeBvjUHQBI24w+rHvI3jQQ=
Subject key identifier: 15:88:62:D9:05:81:19:C7:80:50:A1:DC:2F:4C:56:0D:C7:AE:0B:79
Authority key identifier: 9C:60:B2:27:CB:75:76:8A:1F:57:85:6E:C3:53:3C:96:84:82:61:9C
Certificate issuer: /CN=9c60b227cb75768a1f57856ec3533c968482619c
Certificate serial: 019D2771DB5EAF092372D245F74BFEBF4258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
Manifest number: 1738
Signing time: Thu 26 Mar 2026 00:01:06 +0000
Manifest this update: Thu 26 Mar 2026 00:01:06 +0000
Manifest next update: Fri 27 Mar 2026 00:01:06 +0000
Files and hashes: 1: nGCyJ8t1doofV4Vuw1M8loSCYZw.crl (hash: vR7gATqRHdjeoBRgjDu76pBdbHyXSM1bSk7CadOb5o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:db:5e:af:09:23:72:d2:45:f7:4b:fe:bf:42:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c60b227cb75768a1f57856ec3533c968482619c
Validity
Not Before: Mar 26 00:01:06 2026 GMT
Not After : Mar 27 00:01:06 2026 GMT
Subject: CN=158862d9058119c78050a1dc2f4c560dc7ae0b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:75:9e:35:06:67:af:72:27:68:7d:cc:96:
ba:d7:90:07:89:d3:4f:2f:cf:f4:7b:9a:34:ef:87:
3e:bb:d9:b6:94:85:64:69:de:aa:3f:b5:94:9e:da:
6b:c9:7e:5f:b7:37:1e:e8:62:8a:59:2b:39:da:f0:
8d:66:22:25:d9:55:c9:ab:97:ba:13:eb:5b:bf:e8:
7a:c2:99:29:26:e3:18:58:cb:15:45:5d:ad:6f:c0:
fa:cf:89:6c:87:75:80:2c:3d:ce:33:f1:dd:6f:4b:
b0:ae:9f:28:b7:ae:07:70:50:25:f5:8c:dd:b2:7b:
75:89:4f:1d:72:70:93:f8:86:14:a3:f1:a7:2e:10:
8c:11:38:56:7a:a8:80:74:02:be:7b:9f:98:55:75:
87:42:a4:88:45:e1:d5:a6:b0:0c:71:b4:12:17:ee:
9a:0f:be:0f:61:aa:3a:fd:4b:97:15:67:75:60:94:
c4:94:a7:bd:dc:94:d5:8b:af:fc:07:84:68:f5:5e:
50:02:8a:29:97:37:7c:b5:9d:bf:01:52:9b:03:43:
fd:d6:14:a7:dc:45:5e:f8:b1:93:9d:33:18:92:2b:
66:6e:a9:74:40:93:05:97:dd:91:be:a0:99:96:07:
b5:88:46:db:02:c8:29:ac:c4:7c:bb:02:ee:4a:a6:
52:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:88:62:D9:05:81:19:C7:80:50:A1:DC:2F:4C:56:0D:C7:AE:0B:79
X509v3 Authority Key Identifier:
keyid:9C:60:B2:27:CB:75:76:8A:1F:57:85:6E:C3:53:3C:96:84:82:61:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGCyJ8t1doofV4Vuw1M8loSCYZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/11c99f-4fd5-4522-85c4-8918a28c4f7c/1/nGCyJ8t1doofV4Vuw1M8loSCYZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:72:d0:b2:5a:08:7a:01:f9:5a:e6:4c:46:61:08:ee:bd:b0:
94:6b:be:37:69:c6:11:2b:be:a4:f2:09:41:45:b8:a7:38:5d:
00:f0:18:c9:9c:a9:95:2e:dc:c1:60:ff:4d:c9:6e:f5:40:81:
2f:42:98:b2:85:a0:a4:b3:57:be:e6:e8:58:ae:06:6b:b5:6a:
af:da:a1:c6:5e:3d:61:7e:24:2a:6e:fe:a1:7d:b3:d7:e7:75:
c6:f1:dc:33:c1:e0:0a:bc:07:e2:83:b3:ab:08:a8:0c:67:64:
0c:e2:6a:c3:95:47:e1:88:ae:c8:36:e2:06:5f:de:cc:21:a1:
d6:82:27:d5:ab:07:24:7f:3a:96:2d:15:37:0b:46:a1:e4:78:
4a:2c:9f:48:74:50:68:e3:ea:1c:99:75:c0:f6:aa:4c:0c:6c:
03:04:4a:38:19:1f:84:d7:ba:48:2e:a2:21:27:47:c1:fd:e9:
1d:73:5d:15:f0:c3:bd:3e:96:16:d9:61:fe:85:a1:5d:68:f8:
84:54:d8:9f:91:48:4c:a3:87:59:ff:50:c2:21:d3:89:47:32:
7c:0f:54:12:13:21:00:dc:de:d3:2f:d8:33:b2:4c:dc:7b:ea:
df:72:1c:c8:38:4f:3c:b3:47:e7:e8:5d:37:33:55:01:90:f1:
e9:40:f9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:35 2026 by rpki-client