Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
File: Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft (raw, json)
Hash identifier: R5LtBk0HoXfhfBoeW/yjBF4kUQzJ+Z+jhaq41hRuVSo=
Subject key identifier: 7A:2A:E8:92:BA:7C:49:E7:A7:03:FF:7F:BB:6B:B2:78:E4:59:41:39
Authority key identifier: 36:B7:6D:DD:F8:E3:30:46:33:9E:86:56:52:14:4C:45:3B:60:57:50
Certificate issuer: /CN=36b76dddf8e33046339e865652144c453b605750
Certificate serial: 01A1250C728E3CFD0B456A1F849DB5A92729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
Manifest number: 0111
Signing time: Sat 10 Oct 2026 09:02:15 +0000
Manifest this update: Sat 10 Oct 2026 09:02:15 +0000
Manifest next update: Sun 11 Oct 2026 09:02:15 +0000
Files and hashes: 1: Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl (hash: 6GzCMYjpeGWOpjeCJc57lLU7W8/FxkjFQfzgxbEjK6c=)
2: mmX_7osZyxuKHgrp5xtpjBXseIc.asa (hash: 6oK8ShjwFJPl0vg4dcL77DXZ1M2IE0dArmaOzK/T8ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0c:72:8e:3c:fd:0b:45:6a:1f:84:9d:b5:a9:27:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b76dddf8e33046339e865652144c453b605750
Validity
Not Before: Oct 10 09:02:15 2026 GMT
Not After : Oct 11 09:02:15 2026 GMT
Subject: CN=7a2ae892ba7c49e7a703ff7fbb6bb278e4594139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:89:94:ec:1f:1c:04:2b:e9:39:ac:4d:e4:
e4:47:c7:59:7f:04:80:23:6b:9e:32:42:04:2d:29:
aa:99:78:47:ae:81:b3:00:b5:ba:0b:2e:08:bb:40:
ce:c0:28:b6:14:fc:dd:17:b2:0d:c8:96:87:c3:55:
dc:73:bb:e4:ca:74:2d:2a:6c:83:1a:a2:2a:11:39:
de:62:9d:6a:45:c3:28:57:cb:02:6c:1e:91:73:d0:
f5:a7:58:2c:7c:07:a4:0a:7c:5d:93:3e:1b:dc:cf:
65:0d:9a:bc:c1:9e:b2:b7:b7:ba:62:04:53:3b:a2:
8f:ca:a8:44:15:70:4b:ad:24:2d:36:5c:65:24:54:
b7:a2:ba:88:2a:d9:2b:a7:24:10:63:f9:76:f8:6c:
17:82:af:12:bc:bd:1a:ef:94:15:be:e2:f2:20:a4:
5c:93:87:d5:cf:e0:0a:32:55:5c:0e:26:66:fe:f2:
7a:d1:2c:eb:58:59:be:e6:a5:50:a0:4b:bb:c3:c5:
cc:07:e4:01:6e:0e:e8:4a:b1:4b:fb:e3:b0:86:4a:
95:ca:6f:c5:b8:0b:4a:aa:6b:b0:36:d0:4e:a3:1f:
9c:61:86:09:a5:40:31:f6:47:c1:64:40:80:84:ab:
58:76:42:5a:75:c7:74:25:ef:03:d3:63:63:eb:37:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2A:E8:92:BA:7C:49:E7:A7:03:FF:7F:BB:6B:B2:78:E4:59:41:39
X509v3 Authority Key Identifier:
keyid:36:B7:6D:DD:F8:E3:30:46:33:9E:86:56:52:14:4C:45:3B:60:57:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9b:4d:c0:c3:6e:e1:05:43:94:09:e7:c2:33:25:f8:3a:e6:
2a:36:30:fb:a7:76:a8:1d:f2:b6:47:b1:c6:3c:61:88:d4:15:
e4:93:44:4b:8b:89:11:83:12:77:41:ac:a9:fd:28:80:10:d0:
a2:49:be:7b:30:35:d2:a2:d0:18:ba:cf:16:af:c9:6e:57:05:
00:65:de:de:ad:9b:0e:e9:de:82:09:6a:5f:67:ae:f1:45:34:
48:37:3a:a1:6f:06:f8:fc:5b:f9:a2:fa:ce:48:a4:c5:57:0d:
ad:fb:22:82:da:56:7a:f0:d7:b2:af:86:7c:6f:d2:7b:07:cb:
20:54:04:5f:c1:06:b2:e6:21:38:9c:98:38:d6:06:4d:59:3a:
ab:94:fa:90:87:7e:70:bd:6e:2e:f1:50:e8:f4:25:87:9c:e1:
c0:db:b1:f4:ca:d0:d0:8c:e3:47:f5:fa:64:12:c8:17:f6:25:
97:d3:e7:e3:64:74:94:55:73:68:b2:36:4b:11:30:0f:b1:5c:
a0:3c:a8:49:57:d5:3a:0a:5f:0e:44:95:df:c5:33:25:d1:97:
4a:20:e4:25:eb:a2:99:50:75:90:3e:c6:80:c4:55:7d:d8:ef:
91:2e:81:27:5b:d3:03:9b:0d:21:70:54:8e:a6:ad:33:cf:00:
de:bf:50:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:00:08 2026 by rpki-client