Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: ixQBZOfs7KXPO0d6iQzZWgyUAYC+F0QI6G6VDs4eH30=
Subject key identifier: ED:D4:4D:F7:A4:71:D2:66:74:B1:EC:39:37:BA:CB:47:A1:5F:00:42
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 019DE17C7C1C2417F5ADFD46F413C424615E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 12D8
Signing time: Fri 01 May 2026 03:02:04 +0000
Manifest this update: Fri 01 May 2026 03:02:04 +0000
Manifest next update: Sat 02 May 2026 03:02:04 +0000
Files and hashes: 1: 43mZhZr44AIFJcFlEmjkEL_Qzjo.roa (hash: GwcZdDMV/aXs2RqaKWm3srdiDr2ZSWOLhYiN6xh8X/w=)
2: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: buR177RDKgw7xXnlYqDCLbPpE2Khhg9tn8eEZOTdQ4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 03:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e1:7c:7c:1c:24:17:f5:ad:fd:46:f4:13:c4:24:61:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: May 1 03:02:04 2026 GMT
Not After : May 2 03:02:04 2026 GMT
Subject: CN=edd44df7a471d26674b1ec3937bacb47a15f0042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6b:16:bb:95:ea:ae:1a:64:41:74:9f:e6:99:
8e:39:87:fd:de:e3:d8:60:44:ab:d0:e7:fd:46:4d:
86:f3:05:ae:68:e7:73:80:6d:5b:67:b6:0b:3a:5b:
83:21:da:64:f9:ea:ff:75:7b:1d:de:6c:8c:13:b1:
b4:4d:b6:f5:02:7c:d0:e2:21:82:f7:23:8e:ce:62:
06:08:01:34:30:db:10:8b:a4:cb:75:82:23:a9:00:
8c:23:9b:e4:e1:61:17:88:ef:63:5b:eb:b6:c4:74:
f7:99:f0:b0:09:cb:9e:33:75:9b:0c:ee:2e:3d:10:
57:8c:5a:bc:a7:4d:7d:68:dc:b2:4e:8c:96:54:6b:
d7:60:d4:64:c9:1f:08:61:81:38:80:92:e5:69:87:
3e:ef:b8:ad:40:bd:41:98:b2:eb:00:01:f9:0b:2f:
64:20:d0:41:b4:c1:86:57:6a:f8:6c:50:f9:32:4f:
5b:bf:d4:ba:73:f6:b9:84:4d:3b:9f:9b:e3:75:9b:
02:01:b1:ab:2e:2e:5c:5b:97:c6:10:08:d7:07:a1:
0a:92:87:17:dc:c6:92:b5:16:f6:68:65:77:e5:2f:
4f:29:b5:96:d3:e0:f7:1f:e3:c7:48:53:6b:17:59:
ea:05:24:07:c1:53:5e:c4:f6:08:6e:7e:26:bf:05:
8b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D4:4D:F7:A4:71:D2:66:74:B1:EC:39:37:BA:CB:47:A1:5F:00:42
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:dd:ee:b9:4c:85:79:9d:96:b5:91:1f:c2:d8:3c:04:de:be:
62:f1:c6:37:e4:1b:5f:7c:10:12:38:57:e9:da:a6:56:09:89:
cb:22:e2:da:11:f5:af:a7:1b:ce:20:48:a2:3a:e7:d9:9d:28:
c9:37:92:bf:2b:bb:ed:a4:a1:47:2e:d4:2a:74:06:b5:22:63:
48:94:b1:15:85:26:53:cd:1c:ca:85:92:75:ef:73:a6:99:c4:
c0:f5:ab:b5:3b:21:54:b4:bb:e1:86:65:18:2e:99:5e:9f:d7:
70:60:47:d4:e4:0b:06:a0:38:c6:96:4f:e0:95:61:36:02:2f:
46:11:69:3c:64:0d:ef:38:53:0b:bf:3b:01:1f:1e:d4:61:8a:
2e:82:5f:a9:63:a5:bf:3d:00:68:f6:c0:ee:50:3a:96:71:7f:
0a:f7:08:80:10:11:6e:fc:fd:8c:ea:1d:80:0f:75:ee:92:91:
b4:71:b7:dd:71:05:27:7f:78:3f:09:60:34:e3:76:33:15:6c:
14:76:88:8a:f5:3c:b1:97:64:1a:85:8e:4f:ec:b6:e8:c8:59:
0d:dc:47:7c:b8:7a:f4:71:7d:7b:ef:e6:db:3a:3c:86:3c:23:
f3:23:c0:e4:38:79:e3:47:28:ea:30:f1:18:72:24:05:28:4c:
4a:fb:b7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 10:20:34 2026 by rpki-client