Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
File: Nl81kB17-TkbVrA0VzsklXS66S0.mft (raw, json)
Hash identifier: xrVyr2FkZjEP9Ipjq3Cg3I2t/0KP4Dq1U6GHd+lLSl8=
Subject key identifier: CB:2B:87:A0:87:11:53:64:91:40:54:C8:BE:AA:0B:8E:78:B7:F4:83
Authority key identifier: 36:5F:35:90:1D:7B:F9:39:1B:56:B0:34:57:3B:24:95:74:BA:E9:2D
Certificate issuer: /CN=365f35901d7bf9391b56b034573b249574bae92d
Certificate serial: 01A0E73FD010C74418812C807456838376FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nl81kB17-TkbVrA0VzsklXS66S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
Manifest number: F1
Signing time: Mon 28 Sep 2026 09:01:53 +0000
Manifest this update: Mon 28 Sep 2026 09:01:53 +0000
Manifest next update: Tue 29 Sep 2026 09:01:53 +0000
Files and hashes: 1: HmeltJqoGqK5DZzHGOZCGQrGqZs.roa (hash: vtN0gPmhpBlauaDksKBhqQJB3xkxqncdATCbp7ofHWY=)
2: Nl81kB17-TkbVrA0VzsklXS66S0.crl (hash: kfL6qymfQx5+P0eKS00vM7Yw48UFLHR6eK61t5niyNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nl81kB17-TkbVrA0VzsklXS66S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:d0:10:c7:44:18:81:2c:80:74:56:83:83:76:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=365f35901d7bf9391b56b034573b249574bae92d
Validity
Not Before: Sep 28 09:01:53 2026 GMT
Not After : Sep 29 09:01:53 2026 GMT
Subject: CN=cb2b87a087115364914054c8beaa0b8e78b7f483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:56:f9:23:6d:ac:c1:b1:9a:8e:e8:ce:3b:f4:
9a:87:6c:5d:9a:26:c0:58:30:ee:80:44:85:f7:9d:
63:d1:47:85:3a:8b:fa:59:fb:d1:e6:4a:83:ff:48:
fe:a4:d3:8f:de:93:31:00:6a:9f:81:fd:71:b7:f0:
31:0e:20:46:3f:a6:67:ff:a3:7e:db:5f:94:e1:29:
e1:17:bf:93:ef:96:96:0c:41:a8:41:8a:37:64:0a:
63:e9:92:dc:72:95:df:0d:fb:99:1c:bf:76:df:25:
af:0f:75:8e:24:f6:8f:3d:13:d6:a1:17:31:31:7d:
b9:68:9a:30:c9:f3:80:7e:e4:c0:5b:71:ce:ed:4c:
6f:d2:44:41:28:e1:08:0f:c9:35:70:fa:12:96:41:
48:c7:d0:f0:4c:2d:02:14:ce:f3:66:36:ad:77:58:
2b:1c:35:15:e0:73:78:22:61:12:29:75:58:f0:8b:
b4:b4:a5:78:48:ba:53:9d:8a:d8:7b:80:dc:47:23:
b1:39:2f:06:d3:5c:c7:c0:f8:b1:81:2e:15:d4:54:
80:6f:20:be:a9:8c:e9:b9:3b:ab:6f:ab:6b:76:4b:
2f:b7:61:1c:52:7e:a8:22:e5:e2:15:44:e1:ce:ee:
ee:04:f2:89:15:03:50:c5:10:d4:39:0a:71:63:15:
7b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2B:87:A0:87:11:53:64:91:40:54:C8:BE:AA:0B:8E:78:B7:F4:83
X509v3 Authority Key Identifier:
keyid:36:5F:35:90:1D:7B:F9:39:1B:56:B0:34:57:3B:24:95:74:BA:E9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nl81kB17-TkbVrA0VzsklXS66S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9c:41:94:70:63:dd:b3:1d:bc:b7:56:73:93:29:fe:57:e7:
b4:74:cb:f4:8a:c2:b8:93:20:fc:2c:9f:b5:1b:b7:f6:0f:01:
39:28:33:d0:c2:c8:8e:86:98:77:1f:6f:c0:1d:b7:cd:a1:8e:
89:f8:53:aa:8e:f7:e4:65:af:18:dd:f9:12:81:c5:eb:6b:00:
50:09:f1:45:93:e5:fb:d1:8e:09:f3:0c:ea:19:37:11:71:4f:
b1:f7:4a:79:46:13:4a:3c:c8:75:47:5d:7a:8d:de:6b:55:68:
2d:41:1a:9c:0b:a3:aa:61:92:34:00:15:c4:9f:1c:90:60:bd:
cc:07:76:e8:5d:39:27:44:c0:98:fc:b4:d8:0b:f9:11:17:e8:
e2:a8:35:36:e5:b9:85:2f:9e:30:8b:02:b8:a7:bb:a6:62:cd:
2a:af:83:90:12:f9:54:2f:ed:f7:8e:47:02:e3:a8:6f:d5:62:
17:be:6e:e7:20:0f:07:12:78:87:fd:ac:5e:3a:5d:88:ba:a8:
cb:78:37:6a:04:5b:d1:2a:9b:60:36:8a:9b:35:db:96:e1:97:
69:69:61:3d:d3:10:5a:b3:87:cf:26:95:8a:99:90:5a:b1:cb:
b0:7e:f2:11:32:46:22:89:e8:95:98:2f:bd:e7:90:2c:5f:50:
6d:08:d0:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnP9AQx0QYgSyAdFaDg3b/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NWYzNTkwMWQ3YmY5MzkxYjU2YjAzNDU3M2IyNDk1NzRi
YWU5MmQwHhcNMjYwOTI4MDkwMTUzWhcNMjYwOTI5MDkwMTUzWjAzMTEwLwYDVQQD
EyhjYjJiODdhMDg3MTE1MzY0OTE0MDU0YzhiZWFhMGI4ZTc4YjdmNDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Fb5I22swbGajujOO/Sah2xdmibA
WDDugESF951j0UeFOov6WfvR5kqD/0j+pNOP3pMxAGqfgf1xt/AxDiBGP6Zn/6N+
21+U4SnhF7+T75aWDEGoQYo3ZApj6ZLccpXfDfuZHL923yWvD3WOJPaPPRPWoRcx
MX25aJowyfOAfuTAW3HO7Uxv0kRBKOEID8k1cPoSlkFIx9DwTC0CFM7zZjatd1gr
HDUV4HN4ImESKXVY8Iu0tKV4SLpTnYrYe4DcRyOxOS8G01zHwPixgS4V1FSAbyC+
qYzpuTurb6trdksvt2EcUn6oIuXiFUThzu7uBPKJFQNQxRDUOQpxYxV7swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsrh6CHEVNkkUBUyL6qC454t/SDMB8GA1UdIwQY
MBaAFDZfNZAde/k5G1awNFc7JJV0uuktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmw4MWtCMTctVGtiVnJBMFZ6c2tsWFM2NlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80NmVkOGQtM2YyZi00NzNkLWJlZDUt
MGM2NmJkMzQwMTlhLzEvTmw4MWtCMTctVGtiVnJBMFZ6c2tsWFM2NlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80NmVkOGQtM2YyZi00NzNkLWJlZDUtMGM2NmJkMzQwMTlh
LzEvTmw4MWtCMTctVGtiVnJBMFZ6c2tsWFM2NlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJxBlHBj
3bMdvLdWc5Mp/lfntHTL9IrCuJMg/CyftRu39g8BOSgz0MLIjoaYdx9vwB23zaGO
ifhTqo735GWvGN35EoHF62sAUAnxRZPl+9GOCfMM6hk3EXFPsfdKeUYTSjzIdUdd
eo3ea1VoLUEanAujqmGSNAAVxJ8ckGC9zAd26F05J0TAmPy02Av5ERfo4qg1NuW5
hS+eMIsCuKe7pmLNKq+DkBL5VC/t945HAuOob9ViF75u5yAPBxJ4h/2sXjpdiLqo
y3g3agRb0SqbYDaKmzXbluGXaWlhPdMQWrOHzyaVipmQWrHLsH7yETJGIonolZgv
veeQLF9QbQjQUQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 20:41:46 2026 by rpki-client