Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
File: NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft (raw, json)
Hash identifier: kcOLpjP/RJ7m13z1Iqry9t9OoQO+hzoWaDTj5CcydIM=
Subject key identifier: 13:12:CF:52:22:B8:40:07:9B:B0:EB:90:B0:8A:CE:BC:10:7D:AC:C9
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 01A0D3F03E82CDC3AC174DCCCE9710CDBF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
Manifest number: 10D5
Signing time: Thu 24 Sep 2026 15:02:12 +0000
Manifest this update: Thu 24 Sep 2026 15:02:12 +0000
Manifest next update: Fri 25 Sep 2026 15:02:12 +0000
Files and hashes: 1: NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl (hash: GXjEby/r0QAZOPFskAdvdq991kzOmDgtGkV89NmIDjA=)
2: OyB8W9_wA5wbpLXiXUV8OttkP34.roa (hash: 0Tul/Q70maJ+aYBSNOe7pTN1kLta1YDTWvdIAUQpUg4=)
3: To1bIGbGp5M1LHEOYaAsoYMvFHM.roa (hash: J8108bKHwwomV0pOsdiePFOse+rC/Obmy+4s0xm8yGA=)
4: mnDV37o17I0BMCtvgbbSLcAn6Bc.roa (hash: Zf56A5N3eze8bYTELdKSyu3EXVQqDU3l8BuGCW7L2tc=)
5: so34H4EHsb2bvFRzdgNld87kNq8.roa (hash: tntM2l7FDBGtsKGRGPXiqst0BOOsbh2THcmt/BZuxRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:3e:82:cd:c3:ac:17:4d:cc:ce:97:10:cd:bf:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Sep 24 15:02:12 2026 GMT
Not After : Sep 25 15:02:12 2026 GMT
Subject: CN=1312cf5222b840079bb0eb90b08acebc107dacc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:5c:22:2b:54:94:d0:56:fc:e8:48:37:5e:
d1:0a:bd:8d:7a:53:66:2c:2e:af:af:91:ca:6d:f3:
c7:4d:41:7a:40:f7:2d:0c:61:14:64:5a:59:89:9d:
b0:a0:ad:cd:cf:c4:ae:d1:0b:4b:dd:34:aa:78:2b:
21:1e:59:b7:4c:8e:8a:58:d3:f8:06:31:3b:d0:04:
e7:2a:37:82:47:76:91:50:99:51:e0:48:9d:c2:61:
56:98:ca:e4:35:d5:0b:96:e4:91:e0:f5:1c:fd:27:
a2:93:9e:16:f5:a7:91:69:94:71:8f:d4:f0:49:46:
cc:f5:5a:7e:db:c7:62:4e:8e:ca:0d:ca:bc:2e:2d:
ff:7a:28:60:cd:59:7b:df:40:ec:30:8a:4b:2f:50:
d7:72:b8:51:a2:5b:ca:00:c8:25:5b:27:1a:83:fa:
f8:99:11:fe:f3:74:e1:c3:bc:ee:91:b5:5b:8a:b5:
70:f6:41:a5:dd:22:38:bb:85:04:a7:82:d1:85:30:
4f:63:e6:f3:c8:11:c6:c0:26:a1:3b:cf:54:c8:ac:
29:12:d9:ff:80:7c:18:c5:14:c5:ee:75:9d:1b:eb:
8d:48:da:85:20:c4:d0:2f:3c:46:cb:8b:33:78:e0:
4e:3a:db:cc:4f:8a:cf:b0:e4:e6:bc:f9:8b:41:fc:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:12:CF:52:22:B8:40:07:9B:B0:EB:90:B0:8A:CE:BC:10:7D:AC:C9
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f4:44:46:d2:6a:70:eb:ef:da:e2:e1:ba:d8:e7:5c:dc:bc:
59:bf:06:21:b9:4c:a2:35:da:41:6a:12:2b:c5:99:25:48:1e:
f6:8d:5a:0c:2e:d1:30:3d:7e:f9:89:01:dc:9a:cd:50:80:9e:
38:38:34:ae:26:9b:d1:f1:3c:16:57:23:58:4a:f5:d2:23:e6:
b6:ac:64:40:c3:ae:f7:78:19:47:8b:69:51:05:a5:6a:38:94:
41:d1:6b:39:bc:b6:53:0b:a9:a0:0c:08:54:c0:cf:13:3c:9f:
5c:66:17:11:4d:94:22:c6:a1:86:d1:12:f9:0c:b1:48:97:e5:
50:d4:36:dd:04:d2:ed:a1:13:9e:a9:c0:68:81:4b:c0:5b:93:
29:ad:1f:de:c1:d3:43:ed:b5:4e:0b:ff:de:21:a1:ae:20:3a:
5e:f1:74:4b:60:05:70:6a:cc:56:81:d4:b2:b7:6d:04:93:ba:
5c:0b:1b:8f:9b:29:6b:95:01:66:71:bd:40:01:ab:78:38:e9:
4f:82:07:7e:b8:31:94:25:17:eb:15:39:06:71:e7:8a:e4:c3:
c7:a7:85:c5:46:2d:0e:db:f0:d8:9f:f8:c6:c5:1f:d4:35:fa:
47:95:2f:c0:ce:2c:6f:93:76:8c:56:01:ea:10:f9:84:fd:f7:
15:8d:ee:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:05:02 2026 by rpki-client