Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.mft
File: NbLSnrKr4I5ed1l40ACmPQ5uyEo.mft (raw, json)
Hash identifier: GXaDC9pTVB7epBa8+oK71L+6qiGjq6gGRxz/O40UH1s=
Subject key identifier: 8A:E7:C5:72:8E:D7:2A:E4:64:20:CF:E4:19:21:76:E3:18:B2:D9:D0
Authority key identifier: 35:B2:D2:9E:B2:AB:E0:8E:5E:77:59:78:D0:00:A6:3D:0E:6E:C8:4A
Certificate issuer: /CN=35b2d29eb2abe08e5e775978d000a63d0e6ec84a
Certificate serial: 01A0B5E400D76FAED1A946A40D2C7A2AFC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbLSnrKr4I5ed1l40ACmPQ5uyEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.mft
Manifest number: 80
Signing time: Fri 18 Sep 2026 19:00:13 +0000
Manifest this update: Fri 18 Sep 2026 19:00:13 +0000
Manifest next update: Sat 19 Sep 2026 19:00:13 +0000
Files and hashes: 1: NbLSnrKr4I5ed1l40ACmPQ5uyEo.crl (hash: mjFiSb8QohVKad577/tIkBg7rA245mlxpkcKLUJFim0=)
2: oV7oEBtVkW-ZG0CNfBXZibq26cI.asa (hash: mCEcA0bMAnu7Jp7d+IWKI+vKl49ls8wLdVUMkuF36Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbLSnrKr4I5ed1l40ACmPQ5uyEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:e4:00:d7:6f:ae:d1:a9:46:a4:0d:2c:7a:2a:fc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b2d29eb2abe08e5e775978d000a63d0e6ec84a
Validity
Not Before: Sep 18 19:00:13 2026 GMT
Not After : Sep 19 19:00:13 2026 GMT
Subject: CN=8ae7c5728ed72ae46420cfe4192176e318b2d9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:93:ac:3b:4f:e6:ff:94:76:d0:a8:ad:12:c3:
fa:13:29:ea:b8:5a:79:50:e4:05:72:9f:c8:d8:63:
19:d7:c1:15:8b:85:61:5e:9f:fa:f4:d9:e8:1c:81:
a7:8e:ac:0f:e2:c8:27:ff:f1:e2:53:74:ea:0e:00:
4b:49:9f:b4:65:99:43:88:f0:80:1c:33:74:68:c2:
5f:3f:4e:b1:6c:ce:2a:e3:10:13:36:86:1f:d8:83:
7b:be:8e:6e:97:9b:f6:f5:d5:f0:7d:47:73:81:5e:
32:08:0b:14:b1:40:8d:7f:df:f1:58:3c:83:c6:b1:
4d:70:96:3c:b0:7a:cf:52:aa:12:ad:b0:8d:e9:9f:
16:ea:e4:14:1e:28:00:f4:23:45:98:95:01:82:58:
ce:2d:5e:0f:b4:15:b7:43:a1:f1:b6:2c:bc:3a:ef:
23:12:a6:d0:10:d9:23:af:1f:fd:6f:be:16:03:3c:
ee:28:b2:dd:cf:2e:e9:ad:7c:e7:0c:73:87:c0:81:
29:be:ff:f1:93:c2:ff:2c:32:0a:70:08:0f:aa:9c:
95:2b:78:c0:d2:b0:49:a0:74:02:06:6e:f5:c2:b1:
17:03:5c:23:32:93:06:17:20:11:c3:be:2f:ee:2b:
17:da:94:57:55:30:06:0a:ee:60:18:00:3d:83:3b:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E7:C5:72:8E:D7:2A:E4:64:20:CF:E4:19:21:76:E3:18:B2:D9:D0
X509v3 Authority Key Identifier:
keyid:35:B2:D2:9E:B2:AB:E0:8E:5E:77:59:78:D0:00:A6:3D:0E:6E:C8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbLSnrKr4I5ed1l40ACmPQ5uyEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3a48c0-54b3-4c08-bfbe-1f36e6baf5fb/1/NbLSnrKr4I5ed1l40ACmPQ5uyEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6a:aa:8a:5e:0e:eb:91:cf:15:81:ae:62:24:8f:bb:f3:03:
4c:10:a8:8f:33:5d:13:59:dc:c8:57:b5:b9:76:0d:c6:43:f3:
c6:3b:e1:5e:20:32:b4:77:60:bf:18:a1:63:08:48:59:65:bd:
ca:aa:4f:38:96:77:cc:f4:d5:f8:d4:ea:15:15:75:38:a0:9e:
f1:51:67:9d:cb:1c:d4:23:f1:25:e0:66:a4:33:a5:87:3e:9b:
9f:a6:07:3c:34:f1:f1:6c:48:b4:ee:01:ee:30:63:58:89:ae:
cc:4d:48:27:9e:d8:bc:fb:6d:9e:9b:5e:9e:ab:44:2c:c7:c4:
cf:fe:61:ff:c0:2d:33:48:43:c1:16:08:05:38:9c:42:2f:13:
4e:5b:fd:14:28:56:53:94:de:19:eb:2d:55:bd:68:89:62:d8:
77:a2:75:ec:12:28:17:6f:c9:ab:8d:8f:9a:44:cb:06:7a:60:
9f:96:bd:64:93:fb:6e:07:d1:cb:a5:cb:75:ba:00:08:94:32:
e7:75:9c:0b:54:0c:78:2d:d5:88:fd:fa:ff:a7:8d:1d:86:b8:
05:69:b9:6f:91:96:66:da:e9:1e:65:fe:f2:f0:45:be:00:46:
59:7e:6f:18:25:ee:c5:60:37:d9:d1:84:2b:1b:6f:e4:50:a4:
27:ab:db:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:58:44 2026 by rpki-client