Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
File: Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft (raw, json)
Hash identifier: ruVzarlCJPto0x8qf9M5weNyt3z7xtSUD9dWwefsMds=
Subject key identifier: 8F:06:FC:AF:B6:CC:46:1E:57:76:5D:B6:C3:BA:E3:AB:D5:4C:ED:C6
Authority key identifier: 36:B7:6D:DD:F8:E3:30:46:33:9E:86:56:52:14:4C:45:3B:60:57:50
Certificate issuer: /CN=36b76dddf8e33046339e865652144c453b605750
Certificate serial: 01A17DE1252EAC0FB46C0C6FD20CF5BF538D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
Manifest number: 013F
Signing time: Tue 27 Oct 2026 15:01:09 +0000
Manifest this update: Tue 27 Oct 2026 15:01:09 +0000
Manifest next update: Wed 28 Oct 2026 15:01:09 +0000
Files and hashes: 1: Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl (hash: OdEgVr1cX6qPn2lnYyAidUZa+3vsmmdhKOeeKlZFN6Y=)
2: mmX_7osZyxuKHgrp5xtpjBXseIc.asa (hash: 6oK8ShjwFJPl0vg4dcL77DXZ1M2IE0dArmaOzK/T8ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:25:2e:ac:0f:b4:6c:0c:6f:d2:0c:f5:bf:53:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b76dddf8e33046339e865652144c453b605750
Validity
Not Before: Oct 27 15:01:09 2026 GMT
Not After : Oct 28 15:01:09 2026 GMT
Subject: CN=8f06fcafb6cc461e57765db6c3bae3abd54cedc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:00:2e:64:0f:9c:8d:36:ab:c3:0a:6d:c2:d5:
b1:98:5b:d5:62:ff:18:6e:c6:26:c4:3d:56:71:8f:
fa:1e:6b:1c:0b:95:5c:1a:c7:0d:f0:b4:56:03:41:
5b:0d:3e:8e:c2:75:cf:25:0e:b7:41:6a:a0:c6:ae:
8c:ee:76:49:34:3c:09:81:6a:73:4a:20:9d:4a:6d:
e8:2d:63:9e:6e:fc:85:d3:d7:be:8a:2d:97:a5:a9:
b9:8a:23:9b:03:2c:7b:ab:98:42:90:b3:ea:01:ee:
00:47:ec:76:2a:a1:22:4b:a8:3c:d4:61:ea:41:04:
d2:5b:19:71:42:71:ed:43:cf:c9:52:d8:b1:d4:e0:
cb:f2:96:07:61:7f:a8:4b:b8:ae:33:e5:08:9a:2b:
2e:ac:3a:ac:a9:37:70:9d:6e:d5:44:1a:e7:fe:b8:
c2:5f:80:a9:2d:47:ea:69:d1:38:85:30:a3:03:7a:
2b:53:dc:d3:9b:b7:9b:13:f1:88:d7:57:f1:3f:d9:
2e:57:99:33:79:c9:2b:af:14:f9:eb:33:cc:3c:06:
33:3e:b3:69:cb:8b:76:f9:1b:61:dc:4e:0d:98:58:
88:cd:46:95:48:99:1d:a5:aa:e1:fc:1f:c6:9a:2d:
14:6d:98:c7:5c:60:d0:2b:89:d7:03:65:ee:2a:b6:
0c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:06:FC:AF:B6:CC:46:1E:57:76:5D:B6:C3:BA:E3:AB:D5:4C:ED:C6
X509v3 Authority Key Identifier:
keyid:36:B7:6D:DD:F8:E3:30:46:33:9E:86:56:52:14:4C:45:3B:60:57:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:06:ea:1b:80:72:45:35:b6:06:22:4e:5f:c9:8f:82:fa:8d:
be:a1:4a:f4:80:54:4a:44:e0:63:7d:0f:f7:1c:8a:c9:8a:4d:
fb:f2:c1:58:e3:b6:e6:f7:a0:4e:0e:bf:9c:12:19:a1:51:10:
96:94:5b:89:c7:83:12:4d:16:df:37:cc:47:23:01:3d:b6:bd:
08:69:06:56:12:f8:58:aa:79:3f:c9:a4:a3:be:1d:3c:a2:af:
15:ef:13:40:1e:c4:72:5c:0e:0c:b1:b5:ea:56:2e:d8:8b:b9:
d8:b6:af:10:05:36:87:54:0b:e8:48:40:b1:c6:2d:aa:9a:31:
94:9b:ee:78:fa:c1:56:19:8b:8c:87:96:d2:48:41:e1:31:5b:
cf:c3:c4:8c:09:0b:4a:90:e3:fc:cb:9c:20:59:a2:11:0a:9b:
73:4c:a7:49:1f:f0:eb:07:c4:cf:fb:be:c5:76:25:f6:51:ab:
0f:cd:3e:b7:80:c4:13:81:25:f8:73:44:57:87:3b:c7:66:6f:
28:f3:aa:2c:c7:7d:3b:73:d2:0a:0b:74:51:6e:3b:39:7b:19:
9f:5a:d1:c0:c6:6d:6e:d6:b5:9a:56:09:f2:a0:10:19:93:1e:
bd:ce:6e:db:91:32:56:42:bf:6c:45:c1:e6:3e:c2:8d:c1:3a:
74:0d:45:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF94SUurA+0bAxv0gz1v1ONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Yjc2ZGRkZjhlMzMwNDYzMzllODY1NjUyMTQ0YzQ1M2I2
MDU3NTAwHhcNMjYxMDI3MTUwMTA5WhcNMjYxMDI4MTUwMTA5WjAzMTEwLwYDVQQD
Eyg4ZjA2ZmNhZmI2Y2M0NjFlNTc3NjVkYjZjM2JhZTNhYmQ1NGNlZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wAuZA+cjTarwwptwtWxmFvVYv8Y
bsYmxD1WcY/6HmscC5VcGscN8LRWA0FbDT6OwnXPJQ63QWqgxq6M7nZJNDwJgWpz
SiCdSm3oLWOebvyF09e+ii2Xpam5iiObAyx7q5hCkLPqAe4AR+x2KqEiS6g81GHq
QQTSWxlxQnHtQ8/JUtix1ODL8pYHYX+oS7iuM+UImisurDqsqTdwnW7VRBrn/rjC
X4CpLUfqadE4hTCjA3orU9zTm7ebE/GI11fxP9kuV5kzeckrrxT56zPMPAYzPrNp
y4t2+Rth3E4NmFiIzUaVSJkdparh/B/Gmi0UbZjHXGDQK4nXA2XuKrYMRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8G/K+2zEYeV3ZdtsO646vVTO3GMB8GA1UdIwQY
MBaAFDa3bd344zBGM56GVlIUTEU7YFdQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnJkdDNmampNRVl6bm9aV1VoUk1SVHRnVjFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8zYzBjOTAtMGEyZi00MTkxLTg0MTgt
Y2FmOWEyMGU1ODZmLzEvTnJkdDNmampNRVl6bm9aV1VoUk1SVHRnVjFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8zYzBjOTAtMGEyZi00MTkxLTg0MTgtY2FmOWEyMGU1ODZm
LzEvTnJkdDNmampNRVl6bm9aV1VoUk1SVHRnVjFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwbqG4By
RTW2BiJOX8mPgvqNvqFK9IBUSkTgY30P9xyKyYpN+/LBWOO25vegTg6/nBIZoVEQ
lpRbiceDEk0W3zfMRyMBPba9CGkGVhL4WKp5P8mko74dPKKvFe8TQB7EclwODLG1
6lYu2Iu52LavEAU2h1QL6EhAscYtqpoxlJvuePrBVhmLjIeW0khB4TFbz8PEjAkL
SpDj/MucIFmiEQqbc0ynSR/w6wfEz/u+xXYl9lGrD80+t4DEE4El+HNEV4c7x2Zv
KPOqLMd9O3PSCgt0UW47OXsZn1rRwMZtbta1mlYJ8qAQGZMevc5u25EyVkK/bEXB
5j7CjcE6dA1Fkw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 20:33:54 2026 by rpki-client