Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: pR2hicDolq/oU9Lp+E8sRX4NhjByxDAa0dF1w7QjoHg=
Subject key identifier: C7:BE:14:89:59:22:7C:E9:84:36:55:B4:87:FC:53:E0:A0:AE:6E:25
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 01A0C331D61E76898AE15BE9C359A8A19110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 1456
Signing time: Mon 21 Sep 2026 09:00:18 +0000
Manifest this update: Mon 21 Sep 2026 09:00:18 +0000
Manifest next update: Tue 22 Sep 2026 09:00:18 +0000
Files and hashes: 1: 43mZhZr44AIFJcFlEmjkEL_Qzjo.roa (hash: GwcZdDMV/aXs2RqaKWm3srdiDr2ZSWOLhYiN6xh8X/w=)
2: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: 2vovijgrY553ru6ZLvrJMnvPap6uDyjKySB9bCBdDeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:d6:1e:76:89:8a:e1:5b:e9:c3:59:a8:a1:91:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: Sep 21 09:00:18 2026 GMT
Not After : Sep 22 09:00:18 2026 GMT
Subject: CN=c7be148959227ce9843655b487fc53e0a0ae6e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:e6:c5:e9:3e:6a:15:aa:c4:d9:89:b3:12:
04:57:dc:6c:38:cb:ed:60:25:18:27:c8:e9:d6:0b:
53:a7:a7:bd:38:a2:08:97:2e:a6:f2:71:a4:cb:dc:
1f:b3:ed:45:a3:96:3c:f2:bb:24:50:64:2d:32:5d:
24:52:8a:f8:58:f7:7d:0c:33:db:d2:82:2b:de:f1:
53:c7:61:8e:b4:37:30:9c:bc:ef:61:2a:8a:f6:17:
00:81:20:d0:8c:15:51:7f:1a:35:ef:45:8c:9f:56:
aa:f1:0c:a0:f6:01:c8:22:68:58:d3:1c:a0:63:7c:
df:ca:f2:2e:20:e7:72:73:1b:94:f8:9c:c6:f3:28:
5f:48:90:c2:a5:0c:69:92:d7:6d:87:57:74:94:e0:
47:de:ac:8e:3c:c3:47:59:af:6f:84:0b:c0:f4:cc:
c9:3d:85:a3:1f:a1:49:46:46:14:fb:d7:bc:63:55:
9d:58:61:e6:30:3f:ca:39:cb:51:ca:5d:a3:49:94:
8b:2e:d1:36:60:bb:c4:5b:44:d0:e8:2b:17:66:f6:
2e:eb:04:80:06:01:cd:d7:34:97:67:e2:12:5c:36:
34:e6:b4:d8:4c:3e:fe:ff:4c:f6:02:fa:04:85:86:
a3:03:5c:a4:0f:9e:85:e3:13:ca:86:a3:e8:18:ec:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BE:14:89:59:22:7C:E9:84:36:55:B4:87:FC:53:E0:A0:AE:6E:25
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:28:e1:cb:df:f2:dd:b9:23:14:3a:68:8a:e7:c8:24:e7:a3:
70:0a:38:e3:24:7a:05:8d:16:86:a2:94:15:f7:e3:79:cc:d1:
71:8e:7f:e3:a6:02:96:4e:26:8b:0c:f2:09:1e:12:97:9c:63:
db:13:e1:6e:db:85:eb:94:df:51:66:dd:2f:f2:19:54:8a:49:
ca:37:9d:7f:31:56:50:9d:b0:db:69:4d:4b:33:95:bc:1f:e2:
8f:21:43:e5:6c:4f:2f:67:94:e8:2c:de:08:04:37:ed:d4:9b:
38:b6:e0:09:c6:fe:6c:b4:e9:33:6c:db:fe:bf:0b:e7:cf:b6:
9b:3a:0a:7c:2a:01:27:8a:d8:11:cd:46:df:84:25:9b:7c:fe:
fa:c4:1d:87:52:3a:b4:da:91:af:4d:56:cd:ba:db:e3:1b:89:
a4:73:32:f6:05:09:e3:9b:a4:12:d4:1b:58:10:c6:da:77:46:
9b:00:0b:8a:a9:f9:a0:56:90:05:1b:37:e9:b6:79:09:de:cb:
50:36:50:ae:ef:7b:28:c4:7e:84:f3:6b:45:70:27:cd:0d:c6:
fe:ce:1f:cf:56:ce:a9:a7:3e:d3:4a:bf:58:7e:04:fa:91:92:
f1:48:e5:12:59:b9:a5:dd:05:86:d0:ae:c3:30:d4:92:63:4d:
e8:ec:03:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:55:21 2026 by rpki-client