Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
File: NutRbqkC2WStsqptytmh3A9bfv4.mft (raw, json)
Hash identifier: 5mcm7CA0pE96ck1Lvb0kGFTKu0RnOLheddAt4BFuLTs=
Subject key identifier: A7:1D:61:3F:F9:F9:B5:21:A5:CA:18:5C:6D:51:C8:4E:E4:BD:69:C4
Authority key identifier: 36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
Certificate issuer: /CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Certificate serial: 01A0D9836B90F1D0DE68F0EACE1C23560D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
Manifest number: 1A02
Signing time: Fri 25 Sep 2026 17:01:03 +0000
Manifest this update: Fri 25 Sep 2026 17:01:03 +0000
Manifest next update: Sat 26 Sep 2026 17:01:03 +0000
Files and hashes: 1: NutRbqkC2WStsqptytmh3A9bfv4.crl (hash: /Nf043YTxKcYKScst6h1p/9zl3KVoEd77ObN1dQNZcA=)
2: YlXedLCyqhXrfS6xWyQ0uTsUI3U.roa (hash: F80TY0fOITpa/Bk+EYhgg41ne6mDHfXgDtH94lguM+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:6b:90:f1:d0:de:68:f0:ea:ce:1c:23:56:0d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Validity
Not Before: Sep 25 17:01:03 2026 GMT
Not After : Sep 26 17:01:03 2026 GMT
Subject: CN=a71d613ff9f9b521a5ca185c6d51c84ee4bd69c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9c:34:5d:c0:cc:eb:53:71:0a:2d:37:53:b0:
ff:4b:42:d3:b8:9b:4f:36:67:67:92:b4:fa:7f:e0:
ba:db:79:fb:0a:a5:c0:46:1f:78:d5:a1:8e:cf:a5:
85:1b:f5:8c:c8:ec:8d:fa:ca:ff:75:b0:a5:fd:0f:
c3:ca:12:5b:75:92:21:bf:0d:df:30:3e:35:c0:04:
e3:76:3c:51:fb:eb:0d:b1:e1:4f:d9:5b:f8:c8:2d:
e9:db:8f:94:e9:95:f7:4d:87:70:8b:31:b5:52:e9:
26:c0:a3:70:96:bb:7a:46:2e:d1:ba:17:67:ab:9b:
ef:a6:8f:b6:09:a9:ba:64:d9:cb:6a:97:de:3c:13:
e6:0b:f3:ad:6c:b5:a0:64:1f:a3:4e:55:29:12:41:
12:3c:1f:0b:97:c3:77:3f:d4:bb:8b:b1:1b:d8:15:
7e:59:18:a3:26:b7:63:90:7c:73:a9:2c:6e:06:42:
35:98:87:5e:4c:d6:e1:6c:4b:75:b4:7d:18:a4:67:
ee:e4:18:fa:9a:52:c5:2a:f8:31:a3:9f:c1:45:30:
78:58:80:2e:86:69:bc:51:74:df:f4:8b:b1:6f:d0:
e0:86:c9:7f:39:31:46:df:e6:e2:c5:dd:d5:72:40:
2c:3a:2f:82:b0:d7:2c:09:cb:f3:40:5a:a9:c2:75:
8a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1D:61:3F:F9:F9:B5:21:A5:CA:18:5C:6D:51:C8:4E:E4:BD:69:C4
X509v3 Authority Key Identifier:
keyid:36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d0:ba:6f:f5:b0:55:de:8a:73:16:8d:39:c2:76:dd:76:ca:
e8:cb:cd:2c:c6:4c:a4:b4:2e:02:7f:54:47:86:5f:07:79:71:
b8:73:13:27:01:54:a2:2f:1f:00:e2:c2:e4:9f:15:98:e1:a7:
75:ab:2e:8a:19:68:81:18:d1:54:64:ba:bf:93:0e:a3:b0:bd:
5d:a3:45:2a:ad:6d:56:1a:cf:ad:a9:91:ab:e9:bd:c0:48:10:
4f:4f:70:9a:fd:84:c9:78:3a:0a:ba:34:39:3f:69:29:3a:e8:
e0:f3:ac:10:85:f7:6f:1c:8b:9a:26:aa:fe:d0:6a:1e:9e:f4:
e7:c3:df:ab:5a:03:46:02:30:ac:c1:e6:aa:9d:cc:df:32:69:
f5:10:60:d9:e3:e3:81:b4:29:49:60:ea:99:d6:3c:b7:f2:89:
a2:f8:d6:cb:fd:08:4c:d1:b7:4c:44:89:dd:fd:5e:49:fb:ad:
71:d1:a3:b2:57:5f:21:fb:8d:ad:1d:6a:b2:fd:dd:62:a6:43:
89:60:cb:7a:e7:55:e0:96:05:54:e2:f7:30:6e:f3:03:80:51:
c6:c2:34:dc:07:bf:67:30:44:fb:fd:5d:43:5f:c5:67:d8:97:
f0:f4:ed:46:46:13:81:b8:6c:6b:22:ba:5a:be:ea:7d:c7:b9:
cd:48:09:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:32:31 2026 by rpki-client