Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
File: NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json)
Hash identifier: d4lbpff8LzyWG0uzaqRAijA4JsISJ+L+hcuaurzSnmU=
Subject key identifier: 3B:60:51:B0:16:06:8E:EF:40:40:86:C7:2B:01:4F:A8:29:1B:96:A8
Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
Certificate issuer: /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Certificate serial: 01A0C47C5FD06D37D79E4177642AB9FCB62A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 15:01:20 +0000
Manifest this update: Mon 21 Sep 2026 15:01:20 +0000
Manifest next update: Tue 22 Sep 2026 15:01:20 +0000
Files and hashes: 1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: Xx4jgO9BbSU/7KllP6LZc5GNH95Eeo12ydYgT8DRvNk=)
2: t4BaHMc6yCVDE8J5UKYQE3HeSEk.roa (hash: a0O/Q/ykMMVF0x4s18Lt51/lK7kz7CmF4jPcpVsCuhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:5f:d0:6d:37:d7:9e:41:77:64:2a:b9:fc:b6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Validity
Not Before: Sep 21 15:01:20 2026 GMT
Not After : Sep 22 15:01:20 2026 GMT
Subject: CN=3b6051b016068eef404086c72b014fa8291b96a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:13:00:2e:ba:d3:11:60:da:a1:52:cf:5d:
f9:2d:7c:7d:4c:7c:0a:60:f4:4c:8d:73:48:0b:8c:
a5:36:46:ed:af:ae:15:78:21:c4:48:37:bf:7d:5c:
d4:da:54:2a:9c:f8:ec:47:7a:12:3e:da:83:1a:25:
b8:d7:5e:0d:2e:f9:f4:00:9d:0d:41:a7:34:c8:8f:
85:e3:64:f1:53:6d:d6:51:bc:1a:e4:63:84:5d:e7:
f4:bd:21:94:6c:7a:65:ae:1a:07:7b:bc:09:fd:46:
67:db:ed:64:e6:e9:72:fb:3a:bc:7f:35:a0:64:0b:
05:b1:46:a6:c7:42:f6:39:15:f3:15:3e:9d:de:e7:
d8:9b:82:55:45:bf:89:f8:fb:1a:87:29:1a:9c:bd:
b3:90:53:fc:a1:54:74:d0:53:c6:ff:31:81:f6:45:
8d:16:a7:ac:51:7c:a7:18:9f:32:da:a1:45:93:fa:
f0:a0:8a:9f:20:21:37:4d:b3:9e:55:56:0e:c0:c7:
94:30:ec:b9:3a:46:3c:8d:e8:34:0c:3d:78:67:f3:
ab:9e:03:a4:45:a2:8b:f9:00:c3:c7:45:63:88:b2:
50:73:5b:22:95:a4:73:d0:e7:24:4c:97:01:af:96:
23:0f:91:62:0a:2a:bb:62:f2:fc:b0:ec:69:eb:ba:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:60:51:B0:16:06:8E:EF:40:40:86:C7:2B:01:4F:A8:29:1B:96:A8
X509v3 Authority Key Identifier:
keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2d:e8:38:30:f0:53:a8:9e:19:75:bb:86:3e:7e:10:70:ec:
21:3e:de:61:64:a3:d7:74:10:fa:c6:4d:ce:e1:42:da:44:4e:
dd:c2:ac:31:96:0c:b8:36:88:e8:7a:c2:6d:89:db:2d:cc:e1:
8e:5d:36:0f:1d:21:c1:48:4f:18:2b:52:8e:68:2d:40:6e:de:
8b:24:18:58:9f:0e:16:42:2c:c2:c3:a8:4e:7d:04:f8:ac:c9:
7e:74:5f:c5:f9:98:cb:0a:6e:fc:58:8e:69:42:17:14:53:e6:
cc:a7:21:5d:50:1d:a9:d2:a4:9a:fa:6d:2e:89:93:e6:70:84:
06:41:fe:53:fc:8f:43:eb:02:e9:83:55:dd:ea:b5:17:0c:a3:
16:13:7d:b7:f3:e5:69:06:16:e5:65:50:63:83:58:04:5d:dc:
f6:53:75:f7:71:d9:6b:29:45:ff:9d:51:d5:9b:96:cb:b3:00:
a2:1f:e5:58:fa:a0:fb:59:74:55:2e:52:49:58:5c:3c:3c:58:
32:d4:51:27:51:2f:8a:93:37:2a:cc:4a:51:b3:2e:e5:6f:e2:
8b:6c:e4:eb:f9:4d:c2:e4:3d:44:8b:6b:59:c4:eb:33:6d:35:
a3:6f:62:08:3d:4a:08:4b:20:50:21:4d:81:ca:19:b1:5c:3d:
67:a2:32:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:03:21 2026 by rpki-client