Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: JAsN/DHK1RLOCxcDMhIdCQ41oex1DZyQX05dTMgmDHY=
Subject key identifier: 5E:96:FD:F1:6B:7C:17:12:A4:29:C1:0F:12:64:A4:C8:30:B8:72:DF
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 019CAA8F5078EE1FA78AEA0CD14FCE00A92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 1237
Signing time: Sun 01 Mar 2026 18:00:44 +0000
Manifest this update: Sun 01 Mar 2026 18:00:44 +0000
Manifest next update: Mon 02 Mar 2026 18:00:44 +0000
Files and hashes: 1: 43mZhZr44AIFJcFlEmjkEL_Qzjo.roa (hash: GwcZdDMV/aXs2RqaKWm3srdiDr2ZSWOLhYiN6xh8X/w=)
2: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: Lupuf+PaTs2arfYI5YosB0nu0qP/lr/vrYnDJSb1xcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:50:78:ee:1f:a7:8a:ea:0c:d1:4f:ce:00:a9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: Mar 1 18:00:44 2026 GMT
Not After : Mar 2 18:00:44 2026 GMT
Subject: CN=5e96fdf16b7c1712a429c10f1264a4c830b872df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:3e:16:75:2c:cc:0f:e5:f2:eb:40:b2:a0:
28:83:ba:72:03:e0:49:8f:60:d7:b6:b0:89:35:6b:
b4:5e:8c:9a:99:72:91:75:47:08:b9:86:38:d6:21:
ce:5c:61:5c:76:46:00:89:2b:59:40:c8:10:97:7e:
b3:3f:4f:02:12:67:59:f3:3e:87:17:68:4e:05:ae:
03:35:1a:57:a3:e4:0f:a7:1c:70:74:1d:d5:f9:bf:
70:01:8f:ef:e2:a1:c4:b3:ff:b6:36:ee:3b:53:66:
e8:16:c9:3e:f1:e0:d6:dc:37:37:08:a5:ea:a7:1c:
16:b9:0e:0b:26:69:e5:ea:8a:7f:df:74:4d:01:53:
b7:16:57:88:81:6f:45:1f:b0:c0:12:8b:f3:90:3f:
cf:d2:2c:17:1e:bb:75:f8:83:35:21:d0:73:c8:a6:
57:97:8d:c3:f8:ea:00:7f:06:59:8c:59:6b:cc:97:
f5:81:0b:06:1e:b8:69:2e:a4:a7:ce:26:f2:f2:31:
3b:9a:04:3d:5c:54:7f:12:b0:2a:ee:bf:c6:23:1a:
9a:36:d9:57:bc:87:a3:2c:e6:47:0d:82:dd:66:41:
d9:27:1f:2a:5e:ad:f3:2c:30:ca:60:42:5f:76:9f:
f4:d3:58:13:f0:5a:03:08:33:c7:c8:f0:14:ae:fa:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:96:FD:F1:6B:7C:17:12:A4:29:C1:0F:12:64:A4:C8:30:B8:72:DF
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:55:a6:c8:d6:16:1b:10:5e:1e:59:78:90:a8:a9:8c:44:f5:
6a:a0:ee:41:d0:06:a7:e3:74:a5:49:41:ac:2f:25:50:44:8b:
1b:25:08:05:c7:db:ec:bf:a5:d9:62:4c:aa:f1:32:8f:23:7f:
1a:df:6e:bd:a5:61:fd:2b:90:09:5a:13:18:c4:8d:22:3d:d8:
e1:ad:4d:a5:7b:93:a7:5d:27:30:fc:00:3e:58:2a:6a:56:73:
85:dc:53:05:94:68:63:32:7f:00:ba:af:e5:68:6f:fa:19:06:
bf:1e:72:15:59:8b:1a:6b:e7:c7:b3:3b:85:a7:02:cb:fb:87:
21:e0:07:d1:df:26:3f:df:cc:50:40:90:65:89:29:c9:ee:5e:
07:80:e4:aa:e2:d1:d4:20:0c:1d:48:ed:20:7f:7b:07:0f:0d:
91:69:65:3c:2a:20:bd:92:9c:41:56:56:85:9e:33:b6:91:81:
a0:9e:8f:e5:71:6f:ed:97:e5:99:9b:ac:76:8b:bd:06:ca:42:
43:cd:2c:88:e4:75:5f:b2:92:ec:56:3c:b6:76:39:2e:43:3b:
7f:9c:1a:5e:c5:93:9f:e8:d5:07:ff:06:ad:1d:5e:f7:43:aa:
f0:6b:e7:72:0b:07:ea:57:99:30:6b:db:9d:76:24:ca:0b:50:
59:73:3b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:40 2026 by rpki-client