Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
File: NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft (raw, json)
Hash identifier: A0JBpIrFNd32GTy/TfwGKxLowqK7UwSxSAVyfrw7uio=
Subject key identifier: B2:27:00:1D:FF:3A:6E:3D:DA:4B:5C:18:3A:1D:0C:4B:F2:37:8A:86
Authority key identifier: 36:59:E4:47:FC:9D:C8:9E:D9:A4:95:17:13:B4:38:AF:3C:0A:49:B6
Certificate issuer: /CN=3659e447fc9dc89ed9a4951713b438af3c0a49b6
Certificate serial: 01A06D94D2E07D3A993BA46B58F0916FC421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
Manifest number: B2
Signing time: Fri 04 Sep 2026 18:01:04 +0000
Manifest this update: Fri 04 Sep 2026 18:01:04 +0000
Manifest next update: Sat 05 Sep 2026 18:01:04 +0000
Files and hashes: 1: NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.crl (hash: S/qBnPNE/Gy7yK8apgXnH95jLqaQsXlUM9d/Zd3QvgI=)
2: WmmN1DdlCh77kpHlvKNTzADRn-U.asa (hash: T1JY/s5t5/6ecgMyVxHLaTo0nrOIsGOVd3OH5s3qJ3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:94:d2:e0:7d:3a:99:3b:a4:6b:58:f0:91:6f:c4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3659e447fc9dc89ed9a4951713b438af3c0a49b6
Validity
Not Before: Sep 4 18:01:04 2026 GMT
Not After : Sep 5 18:01:04 2026 GMT
Subject: CN=b227001dff3a6e3dda4b5c183a1d0c4bf2378a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:56:1d:74:2f:af:65:1e:fb:5b:a4:67:b0:
44:c0:0c:f7:db:0f:0a:c1:22:92:a1:86:63:16:c9:
a1:18:1a:d2:68:5c:62:05:0f:7b:0b:56:6a:c7:aa:
35:4e:2d:99:6e:92:8f:8f:3e:fc:d1:10:03:f9:32:
a2:f3:0e:d7:49:51:a6:0b:df:fe:30:8f:6f:00:21:
67:c0:34:ef:09:d1:c0:fa:e3:61:e5:f4:5b:fd:64:
45:77:fe:63:65:16:bd:e0:06:8d:38:20:3e:49:06:
a6:38:53:77:25:a7:a3:82:59:f5:c3:f4:70:d6:e0:
d8:39:35:14:f9:08:10:06:37:86:a8:26:7f:c8:72:
dc:45:7f:b2:4e:7c:63:ea:de:a7:a8:8c:0b:c2:31:
62:b2:af:68:d8:e2:00:0c:87:94:67:28:c6:26:36:
51:84:6d:f7:d0:be:66:ad:10:b1:ae:85:85:8a:a6:
69:6f:75:0e:fa:db:48:b1:6c:88:a2:e5:60:8d:1c:
22:51:05:45:9d:35:7e:ed:1c:fc:9c:54:ec:0e:e6:
09:90:f4:af:2f:e7:18:74:97:60:d7:9b:45:c4:be:
4b:89:c9:9c:55:90:aa:10:d2:76:77:37:82:e2:7a:
0b:45:1d:0e:a8:12:07:ee:68:3c:34:6d:4e:2b:0c:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:27:00:1D:FF:3A:6E:3D:DA:4B:5C:18:3A:1D:0C:4B:F2:37:8A:86
X509v3 Authority Key Identifier:
keyid:36:59:E4:47:FC:9D:C8:9E:D9:A4:95:17:13:B4:38:AF:3C:0A:49:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:84:5e:5c:87:7d:e2:a7:5c:7c:8e:10:da:cb:56:68:de:95:
90:b1:1e:46:85:06:14:53:36:d8:c1:fd:71:88:70:a1:a8:0f:
6b:e7:3b:3f:19:58:a4:ca:e9:80:18:d8:15:cd:4c:ee:43:b8:
f2:eb:65:b9:4b:bb:6e:8b:59:16:de:e9:5b:a9:44:1d:5f:e2:
eb:36:0d:ac:b6:45:19:e5:90:e5:e0:e1:fc:55:ce:bc:fc:43:
e6:05:5b:c9:fc:3b:d8:45:c7:a6:bd:1f:05:08:e6:88:a0:ea:
23:53:0f:b0:f5:c9:38:f7:cd:dc:ba:e7:68:dd:9c:75:7b:5d:
39:30:d8:5a:13:1a:60:5e:93:6f:5c:c3:10:65:af:04:7d:bb:
aa:8c:69:d5:15:f1:f3:7a:d0:e1:57:ca:7d:4b:3d:e9:04:80:
42:2d:39:ff:57:ee:83:7c:32:f3:87:d6:1d:5d:6b:f1:aa:f7:
1e:fd:4a:41:d1:87:b2:9c:20:9f:dc:96:8a:ab:a2:c3:90:6f:
f6:56:0d:cc:3f:ff:35:08:82:a3:e6:06:47:cf:72:55:f0:02:
c8:8a:77:61:ac:ed:50:da:84:aa:41:bc:33:2f:59:83:b0:4e:
84:73:7d:09:dd:cf:f5:38:5d:ab:3d:fb:ba:84:d9:3e:cb:69:
2f:a5:ce:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:04:17 2026 by rpki-client