Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: htuJeivOA2UXybsWVTOMFj1yRIn5B5Bp6m5hBoFXVcQ=
Subject key identifier: E0:77:2C:D8:BC:D4:30:FC:72:D0:4E:E8:66:1B:43:4C:82:D2:87:49
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 019FA93E0A697D7F0B7C883589405439F2DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 13C4
Signing time: Tue 28 Jul 2026 15:00:43 +0000
Manifest this update: Tue 28 Jul 2026 15:00:43 +0000
Manifest next update: Wed 29 Jul 2026 15:00:43 +0000
Files and hashes: 1: 43mZhZr44AIFJcFlEmjkEL_Qzjo.roa (hash: GwcZdDMV/aXs2RqaKWm3srdiDr2ZSWOLhYiN6xh8X/w=)
2: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: SbVkyKdsd6kqFXJlJri56nQs+1Fu17tTZmwBIinxd7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:0a:69:7d:7f:0b:7c:88:35:89:40:54:39:f2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: Jul 28 15:00:43 2026 GMT
Not After : Jul 29 15:00:43 2026 GMT
Subject: CN=e0772cd8bcd430fc72d04ee8661b434c82d28749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dc:28:2a:a1:ee:c2:34:d8:61:10:cf:3e:04:
c7:96:56:0e:d8:86:53:a9:7a:0a:35:f8:9c:d7:26:
a5:e4:3a:5c:a8:42:5d:ce:1c:bb:92:b5:fb:4f:3c:
be:ff:32:9b:f4:96:55:85:c8:52:76:1b:d9:30:21:
99:57:12:84:d9:d2:98:f1:8e:0b:21:2e:52:7e:38:
c4:18:bd:6a:9f:cb:dd:82:99:31:73:73:0d:b1:94:
a9:ef:50:04:17:e4:08:2b:e1:8c:ff:4b:f2:bc:a8:
98:31:04:1e:73:60:82:ec:53:d2:c1:af:c4:a5:e8:
c4:5d:08:f8:cd:77:da:01:85:1a:78:58:95:88:9b:
96:35:70:a9:35:09:36:db:b4:3e:68:26:6e:3b:c3:
ad:88:1c:6c:73:b1:87:4f:17:35:07:9e:af:1a:11:
96:a6:4b:a0:27:0c:a6:8b:bf:31:d6:9b:91:f0:8d:
58:df:7b:a5:23:23:00:b5:31:30:3f:f6:47:ea:8e:
f0:a8:6c:e2:23:f8:29:55:0c:d8:05:79:a8:0d:fb:
ee:ca:ba:67:50:54:d6:3e:c6:e8:7b:e4:ba:d7:9e:
b6:ad:f8:12:ee:8e:d2:0d:64:83:2e:59:af:0d:a0:
1d:ff:14:d2:74:4a:71:ac:f3:e2:91:ff:74:43:ee:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:77:2C:D8:BC:D4:30:FC:72:D0:4E:E8:66:1B:43:4C:82:D2:87:49
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f8:7c:7a:a8:d2:c6:45:a6:cd:4a:71:cc:6c:1c:ee:38:22:
79:5d:91:02:24:48:a3:cb:22:db:bd:a9:ad:2f:f3:e0:b5:56:
8e:1d:41:8d:e0:38:2b:b1:40:cb:24:5f:64:ea:4f:12:e1:af:
38:e7:91:de:97:4c:ba:50:f7:ad:a1:2d:4b:5e:ac:5c:fd:d3:
70:74:7d:66:d6:e7:8f:1b:8b:54:a7:17:06:ae:6e:f6:2a:bf:
76:b7:e6:4e:4b:e2:8e:a2:b4:0d:85:cf:f4:5f:97:a3:4c:cc:
51:7e:cf:a3:c4:19:11:b4:e5:6d:d6:06:87:ca:67:e3:73:bd:
83:59:96:6a:e9:c0:91:1b:d9:4f:f6:d8:8e:d7:77:e4:8e:2f:
5b:16:4a:ac:e0:45:5e:17:74:ff:33:fc:e0:4f:84:ba:b8:28:
cb:46:cf:b1:43:24:b4:79:0a:41:c5:8a:55:b9:f1:20:c9:bd:
c8:41:3f:f4:77:0a:8a:a7:27:a5:f7:1e:c0:c0:83:a2:bc:3a:
87:26:c9:a3:e3:cd:f2:11:7a:94:f4:88:12:85:b9:ce:90:65:
68:4b:c8:05:2e:e2:e4:4f:69:7d:1d:7c:a9:fe:3b:e6:dc:46:
da:59:d9:d6:2d:f3:b7:9e:55:6e:71:f7:72:bf:69:79:06:e6:
a4:cd:c7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:02 2026 by rpki-client