Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
File: Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft (raw, json)
Hash identifier: iwwlVZA8LSyFS0AhRL05tgdlD8xMhiDcOTROfnQaUG8=
Subject key identifier: 74:6C:DE:92:EA:F9:1B:80:9C:D5:1E:6B:82:02:D6:4C:C7:A2:FB:4C
Authority key identifier: 36:B7:6D:DD:F8:E3:30:46:33:9E:86:56:52:14:4C:45:3B:60:57:50
Certificate issuer: /CN=36b76dddf8e33046339e865652144c453b605750
Certificate serial: 019FA899C19040BEC6403B65E72C23642368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:16 +0000
Manifest this update: Tue 28 Jul 2026 12:01:16 +0000
Manifest next update: Wed 29 Jul 2026 12:01:16 +0000
Files and hashes: 1: Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl (hash: xiRZg7k5BulqS4X5sJrEpUnQQDX+WgpIuq4IDdsRZ+I=)
2: mmX_7osZyxuKHgrp5xtpjBXseIc.asa (hash: 6oK8ShjwFJPl0vg4dcL77DXZ1M2IE0dArmaOzK/T8ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:c1:90:40:be:c6:40:3b:65:e7:2c:23:64:23:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b76dddf8e33046339e865652144c453b605750
Validity
Not Before: Jul 28 12:01:16 2026 GMT
Not After : Jul 29 12:01:16 2026 GMT
Subject: CN=746cde92eaf91b809cd51e6b8202d64cc7a2fb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:03:4b:da:fb:71:9b:8f:3f:ba:cc:64:87:
a7:4e:25:9a:26:f5:f8:35:9a:07:45:b2:e4:b4:5f:
da:59:3a:1c:83:39:1f:0a:70:8c:ab:ba:89:1e:44:
7f:af:b9:50:0e:9d:47:84:a4:fc:34:b3:c7:37:af:
4d:85:40:8f:7f:b9:0c:48:d0:c3:13:58:0e:ce:1f:
eb:2b:92:91:50:6b:d3:88:c3:d0:45:b1:ba:7a:e5:
e8:df:8a:cf:43:78:95:51:e0:d5:92:f5:56:65:14:
6a:a0:30:27:93:16:4e:cd:10:c9:ff:44:3f:5b:7c:
62:fb:5f:67:1a:3b:c6:93:67:07:f4:95:d7:45:52:
98:20:87:45:21:ea:4a:21:c1:eb:09:75:6f:d3:eb:
5e:11:a8:bf:e8:5d:c6:33:20:2c:8a:e4:d9:f3:c7:
1c:56:f5:81:a9:d2:06:0e:81:a4:41:29:cb:90:28:
c7:37:04:67:f3:54:7f:2f:66:d4:d2:6e:c2:19:fe:
76:a8:ad:ca:19:3d:95:71:1a:48:24:c8:e5:76:c0:
e1:a8:8c:04:5a:23:59:64:4d:9d:35:60:c2:26:b6:
84:df:0f:af:38:d1:41:54:ee:a3:1f:c1:e9:5a:f6:
ec:f9:da:50:39:c4:11:2e:6c:f1:a3:72:34:c1:9c:
bb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6C:DE:92:EA:F9:1B:80:9C:D5:1E:6B:82:02:D6:4C:C7:A2:FB:4C
X509v3 Authority Key Identifier:
keyid:36:B7:6D:DD:F8:E3:30:46:33:9E:86:56:52:14:4C:45:3B:60:57:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a1:a6:cb:cc:30:3a:1c:e5:91:14:e1:5e:0f:25:a7:04:b9:
e2:36:0f:3b:b5:5e:0e:a9:03:54:16:72:0a:8e:7b:55:9b:00:
f0:49:64:9d:84:34:70:b9:d2:3c:58:2e:6a:fe:80:49:cb:37:
1a:77:e8:c4:15:1a:25:ae:a1:27:ac:12:8e:1f:f1:eb:c6:6b:
f1:1e:76:d4:d4:9c:f4:0d:02:12:49:12:32:73:8a:0f:11:d3:
6c:fb:03:0c:2e:1b:71:82:67:79:14:63:8d:fe:17:a4:e5:2a:
34:4e:53:f5:8a:3e:05:ac:e5:29:26:8b:8b:66:27:7e:5c:b9:
09:cf:ac:f7:1c:59:b6:f6:07:fb:a6:39:30:d4:53:c6:73:7c:
55:65:05:f0:3a:ae:ed:3f:e2:11:29:f4:45:99:3b:fc:08:58:
2e:e1:ba:d9:66:28:5a:76:67:f4:ee:19:d4:e9:be:b3:bf:0a:
39:27:46:cf:3c:96:44:f1:58:f6:52:66:6b:97:cc:e3:e0:c1:
de:45:da:96:30:34:a6:e6:f5:d5:a8:8c:ee:7a:33:ef:6b:ae:
89:c5:81:ec:da:63:28:cb:92:3e:41:27:66:54:12:c3:eb:c2:
03:ee:2e:a4:66:57:0d:25:eb:45:56:3c:b7:f9:9a:b7:6a:15:
89:75:9c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:42:06 2026 by rpki-client