Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
File: Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft (raw, json)
Hash identifier: VpZsjftV3dUJdyDNszRl2RjcGISSiKRO4soqYvj9OGs=
Subject key identifier: C1:42:99:7C:ED:46:09:DB:DE:07:3B:C3:FD:32:1D:DE:30:25:B0:A8
Authority key identifier: 36:B7:6D:DD:F8:E3:30:46:33:9E:86:56:52:14:4C:45:3B:60:57:50
Certificate issuer: /CN=36b76dddf8e33046339e865652144c453b605750
Certificate serial: 019FA0E0EF048A5163CD2693C18FA772EE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:02:03 +0000
Manifest this update: Mon 27 Jul 2026 00:02:03 +0000
Manifest next update: Tue 28 Jul 2026 00:02:03 +0000
Files and hashes: 1: Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl (hash: 2I9k40IrCnAAlZ2XEXKwpPFMefcmc9F7es36exEERcc=)
2: mmX_7osZyxuKHgrp5xtpjBXseIc.asa (hash: 6oK8ShjwFJPl0vg4dcL77DXZ1M2IE0dArmaOzK/T8ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:ef:04:8a:51:63:cd:26:93:c1:8f:a7:72:ee:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b76dddf8e33046339e865652144c453b605750
Validity
Not Before: Jul 27 00:02:03 2026 GMT
Not After : Jul 28 00:02:03 2026 GMT
Subject: CN=c142997ced4609dbde073bc3fd321dde3025b0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:fa:60:11:95:56:21:51:eb:8d:ee:b6:d8:
8f:08:5c:e5:dc:e1:fd:49:fb:6f:1c:bb:68:fb:54:
0d:1d:92:88:11:ac:5d:ad:ee:ed:30:f1:ad:1d:65:
9f:ad:f6:92:dc:b1:b4:bf:ce:25:ba:56:8e:be:b4:
f2:b3:a0:f5:f3:6d:8a:9d:d9:9e:bb:e8:10:e4:0a:
ba:a0:13:83:24:46:4e:dd:9a:ec:66:6e:a0:a7:50:
13:9e:7a:a1:ca:0f:86:2d:fa:9b:3e:c8:7f:1c:af:
67:2d:65:cb:9f:ca:a2:3d:54:65:b3:44:16:04:ce:
ea:c3:87:b3:f3:b9:50:d0:58:ba:bf:c3:54:b2:6e:
e8:c5:88:88:b8:38:fe:a1:ab:36:ce:c7:10:77:99:
3e:1b:a0:cd:24:dc:53:64:34:fa:50:a2:85:99:01:
a7:04:ac:87:af:a1:74:f4:f3:4f:8a:d1:68:83:90:
ef:39:6b:31:31:55:02:ae:ca:2a:f0:06:6e:49:60:
0f:a7:32:17:59:10:79:d6:b5:34:36:52:45:ee:29:
13:cc:a6:d5:ab:05:80:fe:8e:fe:d5:26:60:b6:12:
69:77:6d:13:70:6a:e0:a5:23:36:e5:7f:9b:cd:7e:
00:6e:72:95:eb:73:81:aa:29:fc:2a:ef:ce:18:cf:
cb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:42:99:7C:ED:46:09:DB:DE:07:3B:C3:FD:32:1D:DE:30:25:B0:A8
X509v3 Authority Key Identifier:
keyid:36:B7:6D:DD:F8:E3:30:46:33:9E:86:56:52:14:4C:45:3B:60:57:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2b:66:c0:f6:d2:9d:e5:55:71:b9:05:a7:5f:87:90:d2:3e:
3a:fd:f2:16:c7:81:7f:f3:15:fd:76:24:ae:83:49:8a:a3:de:
12:57:18:6c:ee:71:d8:b1:22:01:81:d6:6a:e8:c0:d4:da:88:
92:77:1d:27:1b:4a:1a:c7:23:34:e7:0b:e5:18:3c:cd:25:e6:
fc:6a:43:50:4e:4f:6e:29:bc:7a:85:f5:31:25:a3:8b:41:f7:
6e:21:c9:2d:df:fb:07:69:74:d5:24:d4:d8:08:48:28:a9:8a:
9f:8c:a5:59:2a:ac:dd:5a:24:db:e2:52:fa:bb:04:23:e5:5d:
a6:16:b9:dd:93:7c:07:74:47:a4:4b:99:51:a8:91:f6:0b:82:
d8:9a:7a:8a:9c:d2:ff:c5:79:cd:1c:e5:d4:da:5d:e7:86:a6:
da:bc:4f:80:41:db:78:a8:9a:b4:a6:2f:95:22:16:e2:45:1b:
0d:f1:d8:fd:48:3d:3b:82:11:06:3f:49:91:36:1c:de:cb:cf:
c3:4b:1b:74:a1:25:60:1a:8a:c3:e0:e0:a5:13:6b:bb:d9:0c:
90:44:3b:6f:15:dc:43:86:a7:17:b1:66:80:b0:94:79:52:1e:
45:eb:5a:8f:01:48:be:53:b8:a7:55:b9:ef:03:70:95:5f:5a:
1a:a9:99:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:43:26 2026 by rpki-client