Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
File: Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft (raw, json)
Hash identifier: 3H8SfAmc+P/WY47tgKXPpeGkn1xnclZwkZJDSYqMvZM=
Subject key identifier: 68:89:65:95:DC:B2:6D:8F:65:04:E8:C4:60:80:1B:D9:16:3E:66:00
Authority key identifier: 36:3E:43:7F:6B:68:34:B0:84:74:7E:AF:76:D8:D2:60:A7:9B:FC:8B
Certificate issuer: /CN=363e437f6b6834b084747eaf76d8d260a79bfc8b
Certificate serial: 01A0C632F102D6D1F1AAC90D9BEED4C8398F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj5Df2toNLCEdH6vdtjSYKeb_Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
Manifest number: 0131
Signing time: Mon 21 Sep 2026 23:00:22 +0000
Manifest this update: Mon 21 Sep 2026 23:00:22 +0000
Manifest next update: Tue 22 Sep 2026 23:00:22 +0000
Files and hashes: 1: Nj5Df2toNLCEdH6vdtjSYKeb_Is.crl (hash: 5VkYqTiW3MoM1g58DBL9xiJFsZj8GGslBItwo3ljY3M=)
2: QTwY7hZ5jhbuRgKMO0Ou2fKamBU.asa (hash: AlP7J188PqhkPU3RkVEeK3sJgESC4Fbnn4Z98OFzkN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj5Df2toNLCEdH6vdtjSYKeb_Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:32:f1:02:d6:d1:f1:aa:c9:0d:9b:ee:d4:c8:39:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363e437f6b6834b084747eaf76d8d260a79bfc8b
Validity
Not Before: Sep 21 23:00:22 2026 GMT
Not After : Sep 22 23:00:22 2026 GMT
Subject: CN=68896595dcb26d8f6504e8c460801bd9163e6600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:4c:d0:b5:ae:c9:d6:fe:14:f7:11:0d:de:
53:41:49:09:92:94:77:31:18:be:c1:32:87:13:97:
e0:2e:e4:08:0a:74:4c:d9:4b:30:68:c7:5d:f4:3e:
9d:ac:32:6d:8d:42:bd:75:f5:4f:81:1e:45:14:6c:
1a:4e:24:37:cc:31:ed:d2:99:e3:f3:15:e0:1c:cc:
83:c4:9e:19:b3:eb:5e:30:30:21:28:01:35:fb:65:
a4:5d:ef:98:fe:36:1a:dd:c0:75:77:1f:61:22:97:
02:db:2d:80:4c:0a:a2:a5:8e:87:ae:53:29:7f:4b:
c7:d6:51:d8:ab:4a:01:a3:3c:d0:61:f1:5c:cf:a2:
fb:94:06:ed:d3:fd:54:21:a2:7f:38:44:4e:98:b5:
25:32:c4:80:dd:65:6c:23:19:38:e1:39:48:37:83:
96:a7:ec:7a:e3:73:46:1f:e8:df:c6:25:79:db:da:
cf:f2:9f:64:d1:60:26:c4:3a:94:ac:1a:19:5b:0e:
14:fe:29:1a:4a:77:89:e5:56:cb:b2:ca:17:7d:c5:
ba:12:d6:5b:b4:fd:d0:4c:fe:9c:55:b2:18:fe:cf:
11:3d:e3:2d:5b:da:27:a6:14:14:d8:78:0f:00:21:
5a:e5:76:48:64:19:9d:d5:a1:22:6d:bf:df:e8:9b:
f6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:89:65:95:DC:B2:6D:8F:65:04:E8:C4:60:80:1B:D9:16:3E:66:00
X509v3 Authority Key Identifier:
keyid:36:3E:43:7F:6B:68:34:B0:84:74:7E:AF:76:D8:D2:60:A7:9B:FC:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj5Df2toNLCEdH6vdtjSYKeb_Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ae:30:b9:fb:01:af:71:7e:a1:fc:3c:09:19:7c:3e:3f:c3:
de:60:61:c5:ec:0d:68:4b:ee:26:d3:4f:5e:eb:cd:8e:72:0f:
24:7c:fc:aa:d7:d1:f9:fe:ca:ef:7c:b1:4e:1b:5e:42:a1:e5:
b1:c8:44:62:0e:57:7d:60:a2:7a:91:9d:01:a5:60:b5:1f:93:
93:44:cc:24:8c:ec:93:58:6a:2d:62:68:7d:b9:d4:fd:6f:69:
7a:45:01:95:50:32:25:8b:5f:a3:1e:fd:fc:60:72:7c:10:61:
c1:85:80:47:cd:26:34:14:9b:07:13:a8:28:5a:c4:24:e3:53:
65:69:96:84:c2:1f:e7:8e:e1:31:a0:a3:f7:38:e4:f8:4d:64:
f9:d4:c0:a3:92:d0:ba:fd:26:85:4b:aa:ca:3f:a7:34:69:b3:
ac:f9:69:d3:e2:49:b4:26:44:5d:e6:e7:04:b2:d3:3e:04:3b:
e9:5a:6a:21:9a:a2:29:ed:f6:92:24:0b:ef:38:d9:af:32:3f:
f0:47:77:37:e8:56:5d:3d:08:5c:86:76:c2:7c:94:f4:73:b8:
cb:a3:53:36:51:29:c0:d2:e3:91:23:95:4c:18:e7:4b:77:71:
7b:ac:b2:86:2e:3a:e3:6c:44:f3:38:3b:44:1e:c8:37:c3:b4:
22:87:4a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:11:04 2026 by rpki-client