Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: sqF3P+JMiHBhsm32DOIxGMchFJWYQIwUQLeAWB/+sEQ=
Subject key identifier: 6C:E9:66:9E:40:1A:91:FD:F0:9D:CC:17:C0:6D:86:52:87:4E:4D:5E
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 019F1C4497644BA9E99C2C31011CB1D9F7B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 137B
Signing time: Wed 01 Jul 2026 06:01:24 +0000
Manifest this update: Wed 01 Jul 2026 06:01:24 +0000
Manifest next update: Thu 02 Jul 2026 06:01:24 +0000
Files and hashes: 1: 43mZhZr44AIFJcFlEmjkEL_Qzjo.roa (hash: GwcZdDMV/aXs2RqaKWm3srdiDr2ZSWOLhYiN6xh8X/w=)
2: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: cvb1Pk3SbkkaQi+9sxB/jLvrUUMbk9IFmr/0EwkQbOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:44:97:64:4b:a9:e9:9c:2c:31:01:1c:b1:d9:f7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: Jul 1 06:01:24 2026 GMT
Not After : Jul 2 06:01:24 2026 GMT
Subject: CN=6ce9669e401a91fdf09dcc17c06d8652874e4d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:28:89:b9:99:8a:ae:97:58:f9:0d:50:ef:a4:
ca:cd:2a:4f:08:87:4c:ab:39:a9:3a:86:67:45:de:
89:43:08:d2:cd:56:e3:12:c6:2e:39:e0:1f:26:05:
c7:6a:9a:11:ab:21:91:5b:e8:88:8d:1c:66:41:18:
0e:34:69:87:b9:af:30:3d:13:f0:c7:7e:a0:91:69:
11:18:bb:66:ba:1b:1c:75:98:4f:b0:5f:b7:1d:c8:
1a:a0:8e:f8:96:87:0c:e3:9d:e8:f6:7d:03:a3:fd:
a5:76:66:c7:b6:93:58:14:5e:c8:3b:ba:b0:be:40:
ed:d7:06:5c:e5:01:81:6d:8e:47:6b:a7:c6:39:60:
16:b2:de:27:d6:42:f1:ae:fb:62:2d:f2:93:ec:db:
9d:9b:ad:68:cc:f4:a6:ef:39:d8:e4:a1:62:c6:ac:
33:9f:c6:8b:c8:93:d9:cb:5a:bd:7c:1e:74:89:57:
7b:26:7c:b5:f1:2c:7a:33:cc:5c:a6:0c:f3:b4:d5:
39:37:ea:c5:df:3a:ec:60:8a:c7:8b:65:ea:f2:3d:
a7:60:64:2d:a8:05:10:a6:79:3c:f1:df:30:ff:29:
a9:23:72:3e:31:5b:97:5b:78:f5:bd:4d:f1:8f:06:
7a:b9:b0:de:d2:56:85:dc:27:78:6f:2c:09:8a:fc:
e1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E9:66:9E:40:1A:91:FD:F0:9D:CC:17:C0:6D:86:52:87:4E:4D:5E
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6d:9d:22:55:3b:4f:8a:f5:f4:f9:d0:b7:f1:8d:19:cd:12:
a2:77:cf:ef:0d:8e:0c:52:1d:54:3f:77:c9:80:53:38:64:08:
12:db:f7:5b:1b:25:a8:4a:ec:50:e8:bf:0c:83:5c:d0:9c:c3:
3f:70:13:c0:d1:0b:a1:ff:b1:fc:ad:68:b0:00:6e:ad:0e:15:
19:c4:99:05:28:21:9c:54:58:b3:b7:38:d6:d2:5b:6d:b3:68:
f2:71:12:52:43:e6:14:b9:cb:91:62:46:55:bf:1f:d6:0b:3e:
53:fd:65:83:21:a4:d9:90:17:57:0a:99:0b:51:44:2c:06:b7:
ff:a8:c4:44:7d:6b:b4:48:f3:7a:83:9c:a4:0b:4d:40:8e:0b:
ac:da:90:4e:cf:74:22:6c:9f:b3:f0:60:33:8e:58:69:4a:94:
5e:54:c4:98:f7:1c:d2:86:3f:10:81:01:71:a4:a7:08:68:76:
c6:8e:da:b0:41:13:4c:23:34:9f:52:7b:5c:86:05:14:68:81:
40:ce:99:5b:d4:dd:15:99:67:53:48:5a:0a:63:5f:34:b8:db:
45:7a:f8:fa:1f:a8:c0:ae:6d:45:b5:0b:aa:50:90:d1:3f:10:
e2:a2:89:91:1c:a6:23:5d:24:ff:4a:f1:b4:ad:c0:25:fd:5d:
b6:41:0c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 14:49:49 2026 by rpki-client