Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
File: Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft (raw, json)
Hash identifier: NYK58h1H+FfGQ9xlPAKlFYHJhgaSwtpUhsDzdPPuKFQ=
Subject key identifier: 93:52:8A:21:9E:3D:A3:45:12:60:05:AB:8D:5B:F3:F7:14:51:0C:65
Authority key identifier: 36:B7:6D:DD:F8:E3:30:46:33:9E:86:56:52:14:4C:45:3B:60:57:50
Certificate issuer: /CN=36b76dddf8e33046339e865652144c453b605750
Certificate serial: 01A17BF21D6447E744A6F200D5EA63E87E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
Manifest number: 013E
Signing time: Tue 27 Oct 2026 06:00:27 +0000
Manifest this update: Tue 27 Oct 2026 06:00:27 +0000
Manifest next update: Wed 28 Oct 2026 06:00:27 +0000
Files and hashes: 1: Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl (hash: oWrLGMS+qyg+JnLRlIerhrGAjD+pPqJT1vIogn6AwAI=)
2: mmX_7osZyxuKHgrp5xtpjBXseIc.asa (hash: 6oK8ShjwFJPl0vg4dcL77DXZ1M2IE0dArmaOzK/T8ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:1d:64:47:e7:44:a6:f2:00:d5:ea:63:e8:7e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b76dddf8e33046339e865652144c453b605750
Validity
Not Before: Oct 27 06:00:27 2026 GMT
Not After : Oct 28 06:00:27 2026 GMT
Subject: CN=93528a219e3da345126005ab8d5bf3f714510c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:26:9e:ca:3c:ef:c7:12:82:21:20:92:15:a5:
ab:7e:89:a7:95:b2:ce:ad:53:77:6b:90:52:3f:61:
67:09:34:c2:5e:c4:ac:46:4e:c7:d3:d2:bc:50:22:
dd:a4:5e:50:54:4e:18:f1:87:f6:67:31:31:0a:ee:
aa:b0:45:ba:a8:64:f8:a1:0a:79:32:4c:a2:cd:2d:
fc:ac:1d:9d:b7:26:3b:44:e9:7f:5b:0c:d4:e9:cb:
a0:04:13:e4:5d:14:e0:ff:23:75:43:50:00:34:29:
41:e0:81:ac:51:72:21:54:08:97:fa:f5:30:e9:57:
61:06:ae:8e:1f:1d:0c:4f:bc:55:cd:83:26:07:c1:
6b:a0:27:f8:f6:f8:d8:4f:5b:3f:41:ad:d2:01:af:
28:10:d1:97:69:95:b0:5c:b1:14:c4:16:e6:00:3e:
97:6e:2f:4b:5b:13:83:62:53:52:3b:c7:fa:f8:4b:
0c:96:97:ea:99:5a:26:60:b5:62:ca:6e:93:ea:86:
b2:a1:e8:5b:75:26:14:e3:5a:70:a2:37:de:90:38:
a3:31:a0:6d:c6:25:ff:43:19:aa:4d:27:55:74:89:
be:73:21:2f:b7:31:57:b3:e8:a3:1a:d3:93:d6:78:
25:6c:cf:ec:42:cc:34:2e:7b:7a:94:22:71:a5:c0:
6f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:52:8A:21:9E:3D:A3:45:12:60:05:AB:8D:5B:F3:F7:14:51:0C:65
X509v3 Authority Key Identifier:
keyid:36:B7:6D:DD:F8:E3:30:46:33:9E:86:56:52:14:4C:45:3B:60:57:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d2:5b:99:d7:63:19:f4:d3:8c:d5:96:59:f6:0a:c2:dc:3b:
64:e1:5b:ee:39:a6:57:8f:c7:3d:21:89:5d:29:57:06:84:23:
42:d7:e7:4b:c4:34:ce:30:c0:26:4d:3e:d4:44:65:2b:30:68:
24:6e:17:36:99:d6:d5:5f:48:3f:69:36:19:e4:7b:8d:95:f3:
95:09:bc:31:1a:d3:b8:72:fb:3f:49:f7:86:f8:db:d6:62:fb:
91:63:6e:9d:d5:c7:05:a7:e3:83:20:0b:c0:1a:7b:3c:65:f3:
f9:11:ac:d8:9b:c2:ef:48:97:a6:bb:8a:eb:36:8c:f4:10:75:
9e:66:e9:3d:69:09:ed:05:2c:db:4c:43:80:b3:aa:c2:c5:d5:
54:1e:00:3c:24:6f:d7:ae:07:ba:40:ff:9a:20:b8:22:30:2e:
a1:d0:fe:8d:43:85:e2:51:f3:6e:44:ea:6a:c8:73:e3:ed:b2:
91:5b:68:85:25:12:7a:22:31:ec:9e:7f:41:a5:d3:47:84:b5:
03:b9:a8:df:2f:4a:18:46:25:ae:fd:c0:9e:a1:11:6f:aa:e9:
c0:5f:24:d3:84:a5:ac:aa:05:b6:ad:37:58:f6:15:1c:56:79:
7a:2c:37:df:c7:d6:fc:3e:81:4f:e7:fb:36:c6:95:89:64:4e:
2f:64:87:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:21:36 2026 by rpki-client