Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.mft
File: NbLSnrKr4I5ed1l40ACmPQ5uyEo.mft (raw, json)
Hash identifier: k+EzMl1STnyrEyI9V7j9Dyn+qhMtqnPBWsjCSruu1Jk=
Subject key identifier: 3A:2B:48:FC:BE:1D:1A:58:D8:05:C1:68:63:A2:55:CA:BB:8D:F3:B1
Authority key identifier: 35:B2:D2:9E:B2:AB:E0:8E:5E:77:59:78:D0:00:A6:3D:0E:6E:C8:4A
Certificate issuer: /CN=35b2d29eb2abe08e5e775978d000a63d0e6ec84a
Certificate serial: 01A0BD9DBB1704D15F39534D9360819E1F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbLSnrKr4I5ed1l40ACmPQ5uyEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.mft
Manifest number: 84
Signing time: Sun 20 Sep 2026 07:00:25 +0000
Manifest this update: Sun 20 Sep 2026 07:00:25 +0000
Manifest next update: Mon 21 Sep 2026 07:00:25 +0000
Files and hashes: 1: NbLSnrKr4I5ed1l40ACmPQ5uyEo.crl (hash: rNfVPZONCWDnFMdnQVqKO1AZ2/xxqQm5ySxotKTF8Fw=)
2: oV7oEBtVkW-ZG0CNfBXZibq26cI.asa (hash: mCEcA0bMAnu7Jp7d+IWKI+vKl49ls8wLdVUMkuF36Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbLSnrKr4I5ed1l40ACmPQ5uyEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9d:bb:17:04:d1:5f:39:53:4d:93:60:81:9e:1f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b2d29eb2abe08e5e775978d000a63d0e6ec84a
Validity
Not Before: Sep 20 07:00:25 2026 GMT
Not After : Sep 21 07:00:25 2026 GMT
Subject: CN=3a2b48fcbe1d1a58d805c16863a255cabb8df3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:bb:b6:90:b7:72:7e:d5:40:43:0f:ba:f1:
bc:d8:88:ea:b7:21:63:f4:50:8d:46:7c:4a:eb:d7:
06:52:4a:3e:79:ac:fc:59:e5:95:56:24:0b:b4:fa:
c0:95:1a:a0:89:68:fb:1b:bd:65:ce:6d:cf:1d:b8:
ac:51:91:30:39:07:63:3b:1a:9c:ea:45:bd:9f:8d:
21:89:fc:c3:ff:4b:53:44:c5:36:6a:27:8e:06:80:
a1:46:fd:9f:a4:7c:b2:00:38:fe:f4:95:56:f5:6c:
53:98:d8:79:ae:cc:b2:bd:c8:b7:9a:ce:dd:00:7b:
7f:47:b7:a2:f7:e5:cd:b5:96:73:8a:23:07:6c:e2:
95:d5:ec:10:1d:f2:16:39:1e:e0:20:a4:b6:1b:6e:
b0:51:e6:c2:72:ab:84:c0:67:5e:47:b7:0c:48:9f:
c7:4d:0a:e5:a4:28:aa:ee:41:48:3e:75:a6:00:59:
61:26:10:8e:3f:69:ab:8b:a2:85:31:4f:44:9b:72:
63:73:8a:be:0f:d6:e3:bf:aa:20:9e:f4:f8:5e:14:
e4:23:ec:5d:12:b8:a8:4f:39:53:7f:f2:d8:12:1e:
a5:75:a2:35:ab:7a:f2:0e:15:d3:7f:3e:f8:8e:bf:
a0:e5:2d:75:eb:97:62:7a:0e:3a:7c:a5:52:53:af:
66:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2B:48:FC:BE:1D:1A:58:D8:05:C1:68:63:A2:55:CA:BB:8D:F3:B1
X509v3 Authority Key Identifier:
keyid:35:B2:D2:9E:B2:AB:E0:8E:5E:77:59:78:D0:00:A6:3D:0E:6E:C8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbLSnrKr4I5ed1l40ACmPQ5uyEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b7:bc:2e:75:69:dd:1c:ea:65:4c:f1:55:95:ba:4f:07:76:
02:cd:7a:38:74:64:7d:0b:76:62:7e:ea:10:8d:38:59:90:a4:
de:1c:e8:02:1b:9f:39:fd:75:ac:a4:90:92:77:e3:a1:db:3f:
b7:a8:5f:24:14:92:b3:65:97:96:75:c7:90:be:7d:c8:84:aa:
ec:c2:c4:7f:33:98:51:f2:3f:c1:c0:29:c6:fe:1f:1c:b3:64:
ff:b9:d4:42:d0:f9:4b:8e:11:6c:58:e2:e4:7e:49:c5:f8:7e:
b0:6c:16:cb:59:5b:e8:d5:d1:96:42:28:70:e0:63:1e:7a:17:
dd:f3:cd:34:67:a3:13:cf:95:bc:6b:15:c4:f3:16:15:2f:09:
2b:5d:f8:8a:d2:4c:87:ad:6c:5c:15:88:09:cc:c8:6b:e5:9d:
bb:84:9d:c8:32:46:a2:90:77:4b:6d:b2:d2:08:78:11:f3:4c:
63:6c:72:3b:f1:bc:23:c4:6f:15:09:58:92:2b:20:15:6c:b4:
88:fd:7d:4c:d2:c0:8c:10:1e:d3:42:ca:b7:8e:47:4a:d6:8b:
96:1a:47:c6:b2:f1:29:d1:99:a6:c3:8f:fd:31:4f:15:70:8a:
15:b1:64:57:f0:3b:87:e0:63:03:bc:af:9e:83:b2:d7:92:2d:
da:1f:33:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:18:05 2026 by rpki-client