Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
File: NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft (raw, json)
Hash identifier: hJJZlYSJ7bsvKbFJwPs7Ryatl1uzljRp8bNzzdeXJH0=
Subject key identifier: E9:BC:ED:CF:FD:E4:69:B3:9D:04:8B:C2:0C:41:E8:48:23:F6:AD:5E
Authority key identifier: 36:59:E4:47:FC:9D:C8:9E:D9:A4:95:17:13:B4:38:AF:3C:0A:49:B6
Certificate issuer: /CN=3659e447fc9dc89ed9a4951713b438af3c0a49b6
Certificate serial: 01A17DE1DC4691830DD7451BED60F14E24B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
Manifest number: 013F
Signing time: Tue 27 Oct 2026 15:01:56 +0000
Manifest this update: Tue 27 Oct 2026 15:01:56 +0000
Manifest next update: Wed 28 Oct 2026 15:01:56 +0000
Files and hashes: 1: NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.crl (hash: qiE5Png8wvEhQio7rcLcb/QZT+X7zCD9BukEsJbJvBA=)
2: WmmN1DdlCh77kpHlvKNTzADRn-U.asa (hash: T1JY/s5t5/6ecgMyVxHLaTo0nrOIsGOVd3OH5s3qJ3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:dc:46:91:83:0d:d7:45:1b:ed:60:f1:4e:24:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3659e447fc9dc89ed9a4951713b438af3c0a49b6
Validity
Not Before: Oct 27 15:01:56 2026 GMT
Not After : Oct 28 15:01:56 2026 GMT
Subject: CN=e9bcedcffde469b39d048bc20c41e84823f6ad5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b8:fb:d7:9c:11:47:d1:98:e0:40:cc:a4:4f:
fc:34:9c:6d:f0:6b:1b:92:a2:5e:e9:1e:72:f8:e3:
34:07:d6:43:4f:b9:5f:b5:ec:2b:1f:6f:9f:26:c9:
f2:5e:4c:e2:39:ee:66:ed:cb:f8:34:05:2f:02:9b:
d4:af:4e:03:d8:f4:99:da:4e:62:96:8e:93:76:6d:
08:12:aa:fc:74:9d:7f:dd:25:b5:3b:2f:dc:5d:d0:
33:05:55:5c:5b:ff:eb:d5:1e:59:c7:a2:2d:64:a9:
d5:65:68:9c:c8:0d:61:3a:c0:6e:65:f6:b2:8a:f0:
6d:81:8a:7b:2d:84:cb:c9:70:c1:49:14:66:9e:3c:
44:68:82:e9:a8:84:f3:b3:5e:1f:6c:ab:38:d8:24:
80:bb:ca:cd:b2:58:7d:6d:24:c2:70:f3:32:d7:26:
6e:40:64:53:03:b7:9f:aa:ff:31:eb:ff:d0:4d:34:
13:5e:6a:7a:b8:be:70:67:2c:15:59:c6:ff:92:e5:
35:53:64:74:24:27:8b:cc:ca:4d:f5:31:b6:00:98:
0a:05:cd:78:8a:6c:c6:60:a6:93:c5:a3:41:09:f9:
08:8e:1c:65:24:83:dc:a6:69:58:ca:4c:96:1f:34:
9d:88:37:c5:21:58:0c:71:24:13:b4:70:51:82:7b:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BC:ED:CF:FD:E4:69:B3:9D:04:8B:C2:0C:41:E8:48:23:F6:AD:5E
X509v3 Authority Key Identifier:
keyid:36:59:E4:47:FC:9D:C8:9E:D9:A4:95:17:13:B4:38:AF:3C:0A:49:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7b:76:a6:62:32:0c:20:0e:24:7d:22:18:d9:e8:80:37:17:
5d:a2:b2:1b:26:59:b2:e0:62:0e:74:4d:e6:e5:12:a5:4b:9f:
55:a9:9e:6f:13:02:51:7d:04:c6:11:93:58:32:7c:50:56:ea:
99:40:e1:0a:51:a2:98:d7:ff:f5:b3:23:9f:1e:17:bd:96:ef:
cc:f4:75:54:9b:1b:7e:f9:c2:b9:8a:5b:46:62:47:67:08:53:
7d:dc:51:03:77:76:a5:b4:49:53:b7:c7:d7:34:72:09:d7:06:
01:d6:0f:e2:74:02:41:f0:c1:1f:bb:fb:e9:a7:16:fb:7a:63:
ba:ab:10:01:47:c7:85:14:40:30:af:55:d9:88:19:61:47:4b:
28:76:f7:28:ef:50:a5:05:6c:df:aa:f0:18:83:58:1e:c3:d6:
9d:21:e1:5f:94:ce:7b:e4:8d:b9:6d:f3:47:9e:ca:18:92:a3:
46:cb:7e:b4:fe:c2:71:cf:ea:09:90:8b:14:99:8d:8d:95:3b:
de:63:2a:55:d1:ee:81:e8:9a:dc:7a:c3:e5:db:76:21:a6:cf:
b9:4c:54:4a:4b:05:44:7f:ed:1d:7b:5c:8f:40:ca:43:2e:12:
46:57:0b:9a:c2:b7:c2:8c:e5:6f:5d:f3:47:5c:3b:53:9d:5b:
c5:c7:e2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:40:15 2026 by rpki-client