Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
File: nPMilEsEi3BX5F7SyzQbVg4KxsM.mft (raw, json)
Hash identifier: cWIVJYS95fye3Gq1orDOWpfqt2p0L1kRjaQTu6Zvbfg=
Subject key identifier: 2C:B7:EC:CF:BF:7E:E9:26:4A:A0:4A:1B:01:3C:73:55:BA:7C:7C:E9
Authority key identifier: 9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
Certificate issuer: /CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Certificate serial: 019D2583C98738EACF8A8C1E333EE8BBDB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
Manifest number: 1881
Signing time: Wed 25 Mar 2026 15:01:26 +0000
Manifest this update: Wed 25 Mar 2026 15:01:26 +0000
Manifest next update: Thu 26 Mar 2026 15:01:26 +0000
Files and hashes: 1: nPMilEsEi3BX5F7SyzQbVg4KxsM.crl (hash: mJQ4YL8qpBoI7cXszxeu9N2bh+hsJUPO1zGhqGeQNL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:c9:87:38:ea:cf:8a:8c:1e:33:3e:e8:bb:db:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Validity
Not Before: Mar 25 15:01:26 2026 GMT
Not After : Mar 26 15:01:26 2026 GMT
Subject: CN=2cb7eccfbf7ee9264aa04a1b013c7355ba7c7ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fc:1a:6d:6b:4c:9c:12:52:cb:79:9e:cf:f0:
92:03:dd:0f:00:04:97:ab:36:d3:d9:65:7a:18:a6:
87:f0:a6:5a:26:5a:1c:39:c8:a9:56:59:f1:4a:a2:
8d:7f:98:a8:bd:36:31:03:74:b7:4c:60:7c:cf:53:
0d:f8:19:54:0a:22:92:79:50:df:27:9b:df:35:9d:
f1:ca:9e:5c:22:dd:35:74:e3:ef:61:a6:b7:39:5a:
7c:de:c1:1c:22:e3:09:13:9a:d5:8a:a2:30:c1:62:
26:f3:8e:6a:bb:dc:4a:73:b9:2c:ee:b0:52:7c:54:
81:0a:54:b6:50:65:06:bf:9d:69:67:d1:a1:e6:14:
d7:d6:f7:ec:ca:c3:cd:fa:a7:59:0f:44:27:eb:6a:
cb:bf:51:cb:88:da:19:41:f9:e2:66:52:39:55:63:
7f:e1:a9:6f:83:54:5e:e2:f7:39:d9:96:61:70:0f:
a1:23:cc:14:84:3b:3d:fb:b7:e2:d0:3a:8c:ce:3a:
73:40:8e:7b:9b:c6:0b:d4:39:c7:2d:02:a6:78:5d:
0b:1e:92:0c:3c:10:62:c3:90:12:07:b0:0e:37:cc:
c6:51:52:d6:b2:1e:6c:4c:dc:bb:06:7a:4b:da:56:
c1:9a:52:33:8b:cd:8f:54:e3:85:10:62:6d:23:cc:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B7:EC:CF:BF:7E:E9:26:4A:A0:4A:1B:01:3C:73:55:BA:7C:7C:E9
X509v3 Authority Key Identifier:
keyid:9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fd:f5:ac:17:39:52:db:7a:8f:ec:a2:9e:b7:5f:72:50:97:
f4:db:34:e0:5b:9f:32:c8:02:e2:c0:eb:ca:d7:8e:d6:22:8d:
9c:c4:65:59:0e:3a:b5:6a:20:ac:38:19:1e:2a:11:b5:07:0e:
c0:d2:04:ab:a3:50:6d:24:82:4a:59:a1:2d:6c:cd:04:90:59:
7f:18:67:04:ee:30:e2:1a:24:f2:15:c6:44:c6:90:04:e2:5f:
ca:ed:81:05:89:97:35:aa:df:d3:1b:cb:7c:ad:4b:47:cb:4d:
f6:f3:13:6a:d9:fb:07:9d:fe:44:25:96:25:0f:28:c5:0f:98:
75:9b:36:7a:8d:72:c1:47:44:aa:2f:05:80:c4:18:70:fc:b8:
94:fd:28:4a:64:dc:08:85:01:3e:7b:8a:71:fb:3d:05:a6:d9:
f6:00:0d:5e:1e:8e:cc:90:95:3d:0d:b9:24:48:b8:9c:88:62:
a4:56:fd:d3:32:66:81:88:2a:82:a1:f9:27:92:6d:f7:e6:90:
67:56:4b:1b:43:eb:f5:dd:ca:a7:87:5b:5a:a5:6c:41:9a:e6:
4f:fd:75:12:32:22:61:fc:dc:a2:f1:61:6d:51:d7:f3:19:d9:
b9:74:8d:95:d5:ad:96:d0:2c:ee:a1:d0:81:3c:d6:76:00:47:
e9:a6:22:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:01 2026 by rpki-client