Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: BMxPYEJrtBMMMKxZIP2u7ubPIHLc9P3RKmABwgW0aQw=
Subject key identifier: 2E:9B:40:1A:0B:6D:08:73:53:A9:C4:B1:75:50:93:4D:75:10:10:89
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 01A0306D48B6005D3DFCA94E4E8B46330158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 140A
Signing time: Sun 23 Aug 2026 21:01:03 +0000
Manifest this update: Sun 23 Aug 2026 21:01:03 +0000
Manifest next update: Mon 24 Aug 2026 21:01:03 +0000
Files and hashes: 1: 43mZhZr44AIFJcFlEmjkEL_Qzjo.roa (hash: GwcZdDMV/aXs2RqaKWm3srdiDr2ZSWOLhYiN6xh8X/w=)
2: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: uscpJVHK0TI1ftCuiD2HA6j8GtpqyTSvkreI3UUccoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:30:6d:48:b6:00:5d:3d:fc:a9:4e:4e:8b:46:33:01:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: Aug 23 21:01:03 2026 GMT
Not After : Aug 24 21:01:03 2026 GMT
Subject: CN=2e9b401a0b6d087353a9c4b17550934d75101089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:07:df:b3:44:0e:5b:39:03:8e:d1:35:3d:
0d:74:5b:db:c0:f0:76:cb:07:58:06:f9:16:23:ec:
c5:9d:3c:7f:f3:44:0b:f2:01:ac:59:68:fb:5e:22:
5e:e0:18:a6:dc:6d:74:77:77:10:01:ab:5b:44:0d:
54:8c:5f:92:71:57:3e:ff:ca:d9:a5:53:de:7a:54:
7b:64:d5:e6:c4:9f:17:d4:e0:84:9a:7a:8e:10:19:
2b:79:73:c2:79:e4:42:36:0a:20:cf:69:cd:86:9f:
5d:03:aa:93:39:82:1b:bd:e5:b2:18:a0:58:ee:b0:
40:19:4a:d2:18:cc:eb:89:38:cf:5e:c7:f6:e0:11:
99:29:85:20:64:80:ea:04:ec:3e:95:24:9d:73:b2:
db:7e:f2:42:af:2c:cf:f7:64:ce:0e:7a:f4:7c:ad:
14:ad:71:30:8e:c6:91:81:f2:60:47:69:c5:ca:ba:
c6:3f:83:f9:ff:af:2a:be:98:2a:5f:a0:62:2b:66:
93:ed:03:84:92:b7:f0:b0:13:2f:ae:aa:12:dc:e4:
77:79:01:c6:1c:ed:16:de:9d:75:45:df:73:f9:d4:
bd:ce:4b:08:65:d1:ad:96:8a:38:83:34:a7:42:26:
97:d2:ec:ff:ab:53:73:0c:f4:bd:95:02:23:c4:9e:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9B:40:1A:0B:6D:08:73:53:A9:C4:B1:75:50:93:4D:75:10:10:89
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0a:56:01:7e:e3:9c:3c:f9:8d:a0:a4:c2:5d:80:da:64:9c:
52:fc:65:67:f0:68:72:f9:ee:d7:9d:4e:47:68:a9:19:97:10:
20:55:88:38:8c:52:2f:e1:f9:69:57:36:16:0a:13:52:f7:1a:
1b:f8:d7:c5:32:64:cf:f7:5b:2f:aa:af:8c:fc:0c:53:cf:7e:
9a:60:1b:93:33:6e:b1:9b:2a:57:15:80:82:70:ba:90:57:6c:
b9:79:d0:9e:59:4a:47:a3:26:c4:c8:cd:b4:d9:59:f8:c1:f7:
fa:77:76:bd:3a:f8:c3:9e:16:bb:a6:b9:5f:d4:8d:ac:31:bb:
40:0a:62:01:2f:02:52:95:b9:79:e0:a2:7e:d2:44:ed:83:57:
e6:da:96:b0:73:f2:e7:82:da:d2:48:54:23:38:cc:06:64:37:
a4:bb:b1:5a:f9:a9:ab:96:95:88:b6:fa:01:b7:e2:1a:b8:19:
2a:cb:c4:af:c1:7a:0e:e7:5d:41:61:11:32:1d:d7:11:80:6e:
ad:b2:b6:36:08:65:cd:fa:48:7c:1a:a8:d8:d3:72:0b:9c:4a:
d1:b0:1c:7f:88:de:79:97:d6:d1:23:aa:ac:c0:27:2a:2e:d2:
94:10:de:af:9b:2b:f2:fe:c7:1b:a3:23:11:d9:33:a1:12:2c:
46:09:ec:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:49:55 2026 by rpki-client