Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: y0LfJAmVMYyw/6KrxxYcM/DHCNuX7QEH6xIDg6MGx0k=
Subject key identifier: 6A:F3:FA:B7:A5:0C:FD:2D:AB:9E:40:18:4C:48:F6:6F:60:65:9E:3D
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 019D9A072BE3032F00AE8564902D5E5A9D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 12B3
Signing time: Fri 17 Apr 2026 06:00:54 +0000
Manifest this update: Fri 17 Apr 2026 06:00:54 +0000
Manifest next update: Sat 18 Apr 2026 06:00:54 +0000
Files and hashes: 1: 43mZhZr44AIFJcFlEmjkEL_Qzjo.roa (hash: GwcZdDMV/aXs2RqaKWm3srdiDr2ZSWOLhYiN6xh8X/w=)
2: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: BSOs0drBI74rO/4G2nnEDZbu1hccvmV+t8/xFTcDMtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:2b:e3:03:2f:00:ae:85:64:90:2d:5e:5a:9d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: Apr 17 06:00:54 2026 GMT
Not After : Apr 18 06:00:54 2026 GMT
Subject: CN=6af3fab7a50cfd2dab9e40184c48f66f60659e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:fa:26:28:bf:7f:c6:e9:52:9d:56:ba:7e:
01:78:e0:cd:7c:3b:2c:04:b1:50:95:52:39:0a:7d:
ae:6d:f3:31:e5:10:5e:08:ba:ad:1e:c4:70:df:c2:
cd:ec:58:dc:e7:c2:14:1c:63:b1:58:a6:3b:d9:2e:
d2:0e:38:56:fa:8b:7b:df:11:75:5d:54:8e:af:46:
03:b7:ab:db:b6:ae:41:f7:ff:c6:a1:42:7a:3c:a6:
53:80:76:fa:ef:1b:e1:f6:60:b7:82:20:fc:bc:bc:
be:1a:6a:4b:13:7f:15:c8:6c:5e:64:60:05:31:81:
8b:62:a6:2d:fa:8c:da:7e:8d:2b:d0:93:8b:d5:2d:
7d:9b:83:67:7d:54:c4:19:b2:e5:b9:de:57:c0:cf:
56:ee:bc:7a:a3:37:e6:4d:e9:15:f3:0a:6b:07:76:
14:6a:f7:26:e3:46:61:a6:53:23:5a:8b:61:f6:5b:
b9:1f:a2:6a:0b:3d:17:5d:6c:a4:68:e3:97:84:cf:
24:a8:f6:32:f2:ed:03:72:0e:f2:d5:56:3a:11:ac:
c4:1c:11:93:cc:b9:78:0c:c1:4b:99:a4:c6:cf:ea:
fa:b7:8a:90:e3:29:83:50:68:f0:bb:9b:87:04:a7:
8b:54:21:25:93:7f:b0:21:f2:b8:0e:ce:ca:27:4b:
2a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F3:FA:B7:A5:0C:FD:2D:AB:9E:40:18:4C:48:F6:6F:60:65:9E:3D
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b3:fc:e3:a4:84:79:20:fa:71:26:0c:5b:18:b8:08:56:0d:
6c:0b:9b:37:93:6c:90:3e:9e:38:db:23:96:0b:53:8c:0a:59:
27:69:83:9d:fc:70:a3:b9:81:75:e1:cd:25:29:90:3f:9e:56:
7a:c0:70:74:54:dc:06:3a:39:4c:0e:50:6c:33:e5:07:f6:98:
b6:e2:0d:60:bf:47:28:b0:ec:1d:8a:44:ec:5c:31:1d:fc:58:
09:62:62:45:27:7a:32:79:23:96:fe:3f:ba:fa:1d:39:77:92:
49:11:21:23:67:e7:64:d3:89:31:25:d3:7d:07:21:4d:3d:ff:
f6:40:a6:2a:0f:2b:94:4d:da:a7:b1:e3:fc:ae:21:04:9b:68:
ba:a9:a3:dc:ed:43:2f:3d:2a:10:99:5c:4d:94:f1:7d:53:45:
a5:b6:11:55:dc:02:a0:4f:8a:0c:2f:94:69:63:af:54:a0:96:
e1:87:3b:32:b5:b3:1e:00:4d:03:cf:20:ac:27:84:14:e3:38:
86:ea:8c:a3:04:b4:8f:ed:8c:fa:92:8e:a8:fa:ad:c9:f4:38:
c8:ea:27:87:1f:5a:3a:67:e5:76:de:f3:b4:e8:38:ab:1a:76:
ba:8e:f7:9c:99:a8:1e:31:59:7a:70:40:0b:99:e0:bf:4a:69:
4d:60:e9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:58 2026 by rpki-client