Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
File: NsyAK-a0xAEMds6OSE5N5_VUey8.mft (raw, json)
Hash identifier: 79DfUZRyrfuaywkHOZ3knhkyL72xnaTg+YnMRIXAQYg=
Subject key identifier: 8E:8A:1C:BB:32:53:19:CB:44:89:E1:72:83:E2:24:E0:C7:B8:30:9C
Authority key identifier: 36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
Certificate issuer: /CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Certificate serial: 01A0CC6C1EF45D5518352563455CADC99BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
Manifest number: 10AB
Signing time: Wed 23 Sep 2026 04:00:32 +0000
Manifest this update: Wed 23 Sep 2026 04:00:32 +0000
Manifest next update: Thu 24 Sep 2026 04:00:32 +0000
Files and hashes: 1: NsyAK-a0xAEMds6OSE5N5_VUey8.crl (hash: 4Sn2MPKhfibrQWb5RnH1l0LDt9UoTDDU2SlNJqZW80I=)
2: aGJMNViunI3sW8LPBTbWuO2JMU4.asa (hash: IYFle/3hjx48l13pLg/VjqdcHmOV1LkxhQSSbNvNDQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:1e:f4:5d:55:18:35:25:63:45:5c:ad:c9:9b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cc802be6b4c4010c76ce8e484e4de7f5547b2f
Validity
Not Before: Sep 23 04:00:32 2026 GMT
Not After : Sep 24 04:00:32 2026 GMT
Subject: CN=8e8a1cbb325319cb4489e17283e224e0c7b8309c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:33:6d:db:5f:f4:62:95:9c:e5:4b:a6:a9:
7c:b7:1e:4e:46:83:37:04:53:7c:74:52:61:fa:85:
de:b3:64:71:8a:80:2a:7d:e7:ed:5a:f3:ea:34:c8:
1c:a3:87:26:99:fe:31:91:87:b2:e9:5d:76:0a:d1:
c6:81:a8:4e:82:a2:dd:d4:8a:2d:55:ed:e6:0c:40:
14:62:74:70:e8:19:9d:ee:8c:83:8f:e7:d9:c7:f0:
5c:67:1a:3d:34:d1:6d:09:76:1d:2c:ae:6a:06:50:
96:e5:69:27:8d:f9:3f:50:0f:79:32:f3:c4:fa:64:
00:48:db:2c:a8:47:f4:6b:f1:17:12:88:1b:64:99:
6a:26:d7:0f:31:41:61:20:e8:cd:08:b2:3d:6a:9f:
fa:67:5b:29:0b:b1:f0:fa:ce:5d:7a:18:e6:48:7d:
a7:e5:5f:40:5b:10:88:f2:ca:bf:fa:b1:e6:0b:da:
a6:01:f0:3b:50:6b:ca:ad:57:41:7e:48:68:89:74:
b1:c6:f4:63:1d:3c:d9:bd:30:ab:cf:1c:fc:33:3e:
4c:8a:9e:33:76:01:c3:f6:55:b0:f8:0c:1c:56:ab:
00:00:f2:b0:f0:61:e9:64:ec:73:45:3e:7d:05:44:
df:81:ce:5f:86:c8:09:17:d1:50:17:c8:77:80:79:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8A:1C:BB:32:53:19:CB:44:89:E1:72:83:E2:24:E0:C7:B8:30:9C
X509v3 Authority Key Identifier:
keyid:36:CC:80:2B:E6:B4:C4:01:0C:76:CE:8E:48:4E:4D:E7:F5:54:7B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsyAK-a0xAEMds6OSE5N5_VUey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/51ca35-e3a1-4574-bf4c-8aba85cbd818/1/NsyAK-a0xAEMds6OSE5N5_VUey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d9:aa:59:ed:4f:6c:30:ed:7d:15:aa:ca:3d:d6:f5:8d:c3:
3d:b7:11:f1:cc:d7:65:18:54:c6:26:17:a3:90:8f:9a:ec:34:
39:74:7d:46:19:f9:9e:bf:7d:c4:08:fc:a7:78:fa:f5:78:d7:
c7:2d:e9:82:6e:aa:02:cc:f0:21:43:6f:31:de:b9:60:d8:d1:
c0:88:4b:fe:0a:e4:b2:13:4c:c3:8f:56:08:21:fe:02:b5:25:
5e:83:91:fb:c0:05:a9:23:e7:84:7a:b0:0e:9f:f7:bb:4b:0e:
4a:6e:d9:2f:e1:be:f0:85:41:e1:ca:73:2b:f9:ab:f5:c3:38:
b5:3a:e5:a9:e2:34:08:52:6d:19:f3:f2:9f:e1:84:eb:2d:4e:
d6:c2:a8:86:eb:f4:fd:06:46:6d:b9:4c:19:18:02:0e:70:75:
d2:ca:c8:27:65:83:4f:ee:16:c4:a4:fa:d6:0f:af:fe:bc:52:
f7:2a:ad:24:b7:f4:40:47:8b:d0:46:91:33:d3:f6:88:20:86:
3e:b5:e5:ab:d1:1c:ee:27:da:9b:08:bb:52:9b:11:51:70:b7:
93:ad:93:ca:fa:4b:2a:56:7a:ec:20:23:d5:61:5f:f0:30:33:
89:34:5b:7e:b4:bc:74:3b:38:6a:0a:19:26:68:91:26:b6:e3:
b4:cd:c9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:36:28 2026 by rpki-client