Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
File: NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft (raw, json)
Hash identifier: qEL9thShTvBXkHdJdA2m5Tzir8zqmkHp/LvpUzvCwAA=
Subject key identifier: 84:04:03:0B:E3:26:CF:9A:25:5D:A7:8C:BA:4D:8B:58:CE:F3:C7:5D
Authority key identifier: 36:59:E4:47:FC:9D:C8:9E:D9:A4:95:17:13:B4:38:AF:3C:0A:49:B6
Certificate issuer: /CN=3659e447fc9dc89ed9a4951713b438af3c0a49b6
Certificate serial: 019F85D6636466AF4C2E71E28B0F3940D53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:00:47 +0000
Manifest this update: Tue 21 Jul 2026 18:00:47 +0000
Manifest next update: Wed 22 Jul 2026 18:00:47 +0000
Files and hashes: 1: NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.crl (hash: gbaKQWHZFUGOl6c/owsSLWjg/wjZjstglwn9Xrpk2gE=)
2: WmmN1DdlCh77kpHlvKNTzADRn-U.asa (hash: T1JY/s5t5/6ecgMyVxHLaTo0nrOIsGOVd3OH5s3qJ3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:63:64:66:af:4c:2e:71:e2:8b:0f:39:40:d5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3659e447fc9dc89ed9a4951713b438af3c0a49b6
Validity
Not Before: Jul 21 18:00:47 2026 GMT
Not After : Jul 22 18:00:47 2026 GMT
Subject: CN=8404030be326cf9a255da78cba4d8b58cef3c75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:a6:04:c1:d2:d2:1d:fe:30:4f:34:a8:77:
89:0f:43:2d:a1:d2:0e:80:f7:cd:24:b4:fb:0a:0d:
7e:20:a1:05:e3:30:49:b6:12:91:f1:33:60:eb:22:
59:ee:2c:64:15:59:1b:54:19:2b:57:e3:ed:56:9c:
73:fa:a6:d5:b0:48:a7:b0:c5:bf:ae:39:b0:39:2f:
3e:c5:32:a9:b9:36:5e:6d:30:d8:33:aa:e9:ad:aa:
bc:d6:1f:b3:21:e5:64:cf:ca:c5:dc:5b:18:cc:d0:
69:8a:f6:1a:e3:80:e4:b3:d6:ce:e0:44:58:98:72:
3a:18:0b:f8:74:46:b9:e9:f3:a3:81:5e:64:67:d3:
8e:26:4f:9b:96:51:26:46:a7:bf:62:5e:e3:d3:5d:
9a:de:f9:25:c9:1a:06:6a:7b:f7:b5:7b:31:93:2c:
a1:74:cc:ae:32:77:28:30:18:63:a4:1e:85:cb:a2:
84:51:5c:53:a8:a3:5c:2d:fa:2e:ec:b8:51:ea:1f:
f5:c0:41:42:a0:6a:b5:2e:10:48:7f:1f:bc:fa:37:
0b:66:89:f3:56:be:ba:83:b7:68:aa:93:bc:59:ab:
df:bc:e7:e3:84:8d:4b:d3:c3:8a:f4:28:45:5e:42:
f2:f3:9e:ae:f7:4c:f4:b4:8a:a1:9b:1b:de:39:e5:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:04:03:0B:E3:26:CF:9A:25:5D:A7:8C:BA:4D:8B:58:CE:F3:C7:5D
X509v3 Authority Key Identifier:
keyid:36:59:E4:47:FC:9D:C8:9E:D9:A4:95:17:13:B4:38:AF:3C:0A:49:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bf:85:4a:ad:4f:19:6d:ad:87:43:ab:9f:06:21:09:d7:9e:
a9:8a:0b:27:91:65:1e:7a:8d:08:1b:f1:55:52:27:37:49:b6:
d4:c2:94:9a:db:ef:2a:6b:1b:96:dd:a6:cf:c9:d1:1a:3c:27:
b9:88:76:9a:1d:ad:05:85:ef:8c:e0:d7:d9:d5:0f:ab:c1:a2:
54:5d:49:4d:9e:c2:f6:a4:6a:1c:39:56:77:8b:d3:79:c8:06:
b5:8f:0d:31:71:28:8a:0f:0b:4b:54:5c:28:81:d8:77:d5:de:
34:93:54:1c:58:32:16:b1:f2:01:c4:32:dc:ff:a8:59:4a:bb:
fb:80:29:40:e0:ac:0f:1c:3a:84:38:9f:37:3c:cf:33:b3:81:
d5:4d:61:1b:4d:f2:0e:a9:c1:2c:8a:82:c1:55:97:62:d2:8b:
7d:69:f6:3f:73:21:8a:7f:57:f8:b7:5a:a5:72:28:16:52:ef:
5c:a4:6c:89:99:19:7b:10:a7:98:97:bb:9c:6f:b1:02:2d:88:
fd:01:fb:a4:3d:7a:86:ab:38:84:68:0d:b1:d7:42:05:63:c4:
07:46:49:33:aa:b3:6e:0c:6e:b5:31:c6:b0:b0:d9:f5:0c:38:
e3:b1:29:06:07:45:4f:e9:e6:86:2b:6e:dd:0d:7a:d9:ef:5c:
70:c6:f7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:12:30 2026 by rpki-client