Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
File: Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft (raw, json)
Hash identifier: PfOpk41QrWsBJJH50CKPcVRq6L5A9qRvrYN/bLo9UPc=
Subject key identifier: 0D:8B:98:D9:19:03:B8:43:B9:90:0B:93:34:CC:82:C3:0F:E3:ED:4A
Authority key identifier: 36:B7:6D:DD:F8:E3:30:46:33:9E:86:56:52:14:4C:45:3B:60:57:50
Certificate issuer: /CN=36b76dddf8e33046339e865652144c453b605750
Certificate serial: 01A08C7B6C46EB8499D647FD8B674AE69DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:33 +0000
Manifest this update: Thu 10 Sep 2026 18:01:33 +0000
Manifest next update: Fri 11 Sep 2026 18:01:33 +0000
Files and hashes: 1: Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl (hash: uzBFjCO52/Z9qYzzZyjZ026PbBFj8LfSTwB2UXruKCc=)
2: mmX_7osZyxuKHgrp5xtpjBXseIc.asa (hash: 6oK8ShjwFJPl0vg4dcL77DXZ1M2IE0dArmaOzK/T8ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:6c:46:eb:84:99:d6:47:fd:8b:67:4a:e6:9d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b76dddf8e33046339e865652144c453b605750
Validity
Not Before: Sep 10 18:01:33 2026 GMT
Not After : Sep 11 18:01:33 2026 GMT
Subject: CN=0d8b98d91903b843b9900b9334cc82c30fe3ed4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:68:e8:e5:09:89:4e:7f:3c:72:c4:80:a5:
5f:52:0d:ac:a9:8a:ec:20:29:c3:38:55:50:cd:ca:
a6:82:e2:11:39:e0:47:90:84:f4:33:09:04:f0:8a:
41:d3:22:c0:92:45:da:65:7a:73:6b:50:eb:44:20:
35:9f:e9:e0:36:f7:1a:aa:c2:4d:31:5c:76:ff:66:
56:03:ef:fa:37:2d:64:93:3d:87:a9:df:fd:b0:7b:
59:92:53:8d:5a:1b:60:79:9b:01:cb:e1:75:ef:88:
c4:7e:35:e5:5c:d0:9e:a6:75:ee:1b:5d:6c:81:85:
92:ee:a2:62:cd:0a:a4:29:01:09:b3:2c:ed:d7:55:
22:58:a3:0a:e7:97:3b:f6:df:9d:35:a2:47:0d:a2:
d9:38:12:c4:12:00:1f:c6:0e:f8:51:90:7b:94:c9:
e4:f1:bc:c9:a8:61:49:e7:41:87:46:f5:b0:4d:92:
50:ac:9b:ce:1f:d0:98:ff:88:1b:77:c4:59:1c:5f:
b5:45:d6:75:28:ad:d1:00:d4:54:f5:6a:00:7d:8d:
6f:74:d3:fd:68:3d:9d:f7:43:8a:5e:bd:bf:d6:36:
2c:04:bd:fb:03:5c:89:7e:5f:d4:34:71:ab:f6:64:
a2:25:4c:61:43:52:12:7e:3c:ce:cd:34:7b:fe:ae:
1d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8B:98:D9:19:03:B8:43:B9:90:0B:93:34:CC:82:C3:0F:E3:ED:4A
X509v3 Authority Key Identifier:
keyid:36:B7:6D:DD:F8:E3:30:46:33:9E:86:56:52:14:4C:45:3B:60:57:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8e:3f:79:57:17:67:38:d7:9f:67:3f:0f:e7:44:af:8e:1a:
b2:75:4f:bc:e5:9d:b2:ec:13:7c:8e:70:e7:71:2f:21:7c:89:
b1:e2:8a:92:0e:63:d6:39:80:36:97:be:58:93:79:af:3b:79:
3b:ac:f2:83:af:54:12:76:f0:d4:1f:60:4e:f4:0c:a8:25:2b:
e3:8d:35:81:a7:72:06:41:82:03:30:69:57:48:cd:72:f8:00:
ae:a6:50:ac:18:1a:1c:97:c7:91:11:43:1e:38:17:33:6a:fb:
a7:77:e2:b4:95:0c:e5:df:ca:29:50:ea:d2:65:28:8b:11:c5:
90:e4:43:5d:1d:79:71:09:24:d3:76:a0:57:a3:90:e9:dc:8d:
47:d2:e0:37:43:d1:ed:2e:b1:5a:60:bb:e9:7f:43:58:70:c7:
6a:5d:39:ec:7f:78:ae:b9:d6:84:6a:45:d0:d0:d5:93:46:d4:
e6:58:49:12:81:a8:dc:69:7b:b0:5a:06:20:12:a9:29:ab:0b:
be:e4:7c:08:8a:bb:62:2c:bf:e0:59:ed:93:19:48:cd:7f:9b:
6a:c0:94:66:6d:17:1f:49:02:0e:74:10:cd:03:e8:5c:c2:fe:
df:1d:71:cd:01:c6:d7:80:a4:ad:e7:70:6d:61:dd:ac:74:2a:
be:31:95:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:34:30 2026 by rpki-client