Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: gGNd5jMU1GLFU7bnVULbShgBBl4bHUOu3SvzJqamYVU=
Subject key identifier: 9A:67:28:75:95:3E:D0:78:7B:64:7E:D5:BB:35:46:54:73:A7:A1:0B
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 019CF7CE89E6F51063B2D9C8759C02F253DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 125F
Signing time: Mon 16 Mar 2026 18:00:33 +0000
Manifest this update: Mon 16 Mar 2026 18:00:33 +0000
Manifest next update: Tue 17 Mar 2026 18:00:33 +0000
Files and hashes: 1: 43mZhZr44AIFJcFlEmjkEL_Qzjo.roa (hash: GwcZdDMV/aXs2RqaKWm3srdiDr2ZSWOLhYiN6xh8X/w=)
2: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: WX60BDR5XMx2sH50jqZMmFrNGDfi/DhR/KBLXLDWhB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:ce:89:e6:f5:10:63:b2:d9:c8:75:9c:02:f2:53:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: Mar 16 18:00:33 2026 GMT
Not After : Mar 17 18:00:33 2026 GMT
Subject: CN=9a672875953ed0787b647ed5bb35465473a7a10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:0f:bd:a9:0a:91:7d:d2:16:60:f6:5f:0d:
d5:07:e5:2f:06:8f:f2:25:18:16:1d:ba:61:c3:2c:
93:93:fb:21:ac:21:60:43:f6:fa:6f:35:a3:55:fa:
0c:53:06:5c:77:63:42:6d:f4:93:d8:98:2b:26:cd:
00:1d:d1:cd:b1:da:e5:e2:16:c2:94:09:7f:e1:45:
0b:fa:67:1a:dd:5a:8a:12:3b:55:51:42:77:fd:d7:
a2:2a:83:09:27:60:08:2f:01:38:24:21:0b:f0:7b:
21:e1:29:ea:56:62:21:5c:2b:ab:d4:f3:84:cd:e6:
e8:20:47:47:3d:c3:21:6b:19:f7:80:42:44:64:6d:
bb:bc:f2:05:72:f3:93:bd:bc:44:6b:c8:11:5a:1d:
d3:79:ea:13:ab:6a:b3:25:a7:dd:3f:36:93:3c:b2:
a9:e6:02:18:77:f6:11:75:96:16:cc:21:41:c4:61:
14:0c:c7:35:27:d4:db:7d:5d:a0:9d:07:fa:b3:96:
b0:79:03:5d:63:e5:38:56:92:fb:73:8a:40:24:f1:
77:de:cd:1f:5f:2d:12:71:55:e2:85:2f:eb:d4:42:
a6:2d:2a:4e:8d:4b:e7:fc:64:5e:3c:91:a5:8e:37:
1a:d1:89:40:49:86:40:64:08:09:2e:3e:25:9c:97:
20:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:67:28:75:95:3E:D0:78:7B:64:7E:D5:BB:35:46:54:73:A7:A1:0B
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:65:27:a4:91:69:eb:1c:1d:d5:22:c3:a7:c3:6e:eb:13:f4:
c9:f6:03:67:ee:94:b2:d9:da:fe:6a:2b:1c:98:06:10:78:8a:
15:95:df:ee:04:e7:85:e6:11:b6:b2:dc:56:0f:ac:d5:12:74:
19:b6:db:27:6d:32:0f:62:04:92:39:b0:82:50:0f:33:be:1f:
e3:00:07:e8:ad:7b:2e:30:e2:3c:99:99:89:7f:6c:cf:89:a1:
76:04:e8:fc:b0:d8:9a:9d:8a:2a:e1:8c:cd:b3:e1:27:a1:53:
a2:66:91:79:b1:3a:b9:a4:7a:67:52:d4:0e:23:ef:70:4c:1f:
7d:15:a6:a4:d6:13:31:8b:7c:2e:c2:aa:d6:19:99:2a:6f:c2:
38:ee:3c:39:f1:73:2b:2e:5c:96:f9:e5:c5:fa:be:cd:3f:18:
f0:26:8a:ca:a4:19:b8:12:60:ea:39:61:32:8e:e8:41:b9:ef:
e1:d0:24:67:0e:18:1b:ca:99:1c:c6:ee:3f:9f:90:ee:ed:82:
00:c2:89:ce:9e:35:d7:80:b9:74:d5:fa:8f:80:5c:84:e5:ef:
e8:e3:50:2b:5b:a0:a0:63:70:ef:74:22:5f:99:0a:69:02:ec:
bd:10:23:93:43:9a:ff:33:7a:26:52:a6:80:a5:32:d0:2a:3a:
6e:84:29:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 04:02:37 2026 by rpki-client