Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
File: Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft (raw, json)
Hash identifier: N+4s5qhbaI3uJA0RO+5uNFyHFMOg48k7fh3pAE1HMIs=
Subject key identifier: 61:86:3C:53:CA:97:D4:A2:71:AC:2E:AF:2C:F4:80:BD:3C:54:9B:57
Authority key identifier: 36:CF:B3:97:5B:BD:5E:F8:7B:29:C3:DC:4A:4B:98:EA:5C:25:C4:44
Certificate issuer: /CN=36cfb3975bbd5ef87b29c3dc4a4b98ea5c25c444
Certificate serial: 01A17EBD20F39AFAC9DEA9B003282EC5E8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
Manifest number: 11AE
Signing time: Tue 27 Oct 2026 19:01:26 +0000
Manifest this update: Tue 27 Oct 2026 19:01:26 +0000
Manifest next update: Wed 28 Oct 2026 19:01:26 +0000
Files and hashes: 1: Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl (hash: 3leTlqjSsO3GYNWHZoBLLMq8vwy9WwjermZuJrcKue0=)
2: XzoObcvIrvpe4E-joQhgqkoGqLA.roa (hash: S6Kp+ZpIF7hLDvCfmvBbRJUrOU1sswfc6F+dvz5fqJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bd:20:f3:9a:fa:c9:de:a9:b0:03:28:2e:c5:e8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfb3975bbd5ef87b29c3dc4a4b98ea5c25c444
Validity
Not Before: Oct 27 19:01:26 2026 GMT
Not After : Oct 28 19:01:26 2026 GMT
Subject: CN=61863c53ca97d4a271ac2eaf2cf480bd3c549b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4f:e5:78:fc:9c:53:97:83:4f:e1:3b:1e:aa:
7d:66:0d:ac:da:63:e5:ef:b1:23:ea:4c:0d:61:86:
04:48:ae:7f:81:15:21:93:8e:6d:f2:22:68:75:9f:
ef:7c:07:31:d6:0c:25:32:f3:50:be:a8:50:1c:22:
30:02:52:da:f2:01:9c:bd:67:dc:a5:36:a5:d5:cf:
de:48:e1:6d:70:8d:33:0e:cf:7b:0e:7b:88:95:cd:
1b:5d:d6:79:c5:ac:52:30:d4:78:ca:3d:fc:0c:13:
84:bd:11:ae:75:e0:96:60:49:06:85:ce:59:03:5c:
56:96:1a:05:97:ce:da:48:fb:8a:ba:07:8f:32:17:
a6:73:53:04:87:08:b7:e3:17:f0:bc:d6:4a:f7:61:
a6:2a:b2:32:60:3f:82:61:60:5f:ef:7a:0a:87:57:
ad:2c:4d:a1:1a:37:63:d9:03:ca:0b:a7:de:f1:9c:
43:2e:91:cc:8c:a2:50:af:ea:a6:21:8b:32:03:b5:
db:af:b6:e4:bf:ed:4d:ba:4f:ba:a8:f2:58:4e:79:
b6:09:2c:50:6b:d6:0e:c9:9d:ea:c5:09:25:25:03:
c7:08:da:52:0b:9b:df:19:b3:00:cd:92:dc:25:2b:
3c:17:1b:9c:1b:ba:a3:c7:34:6f:13:e0:c2:d7:97:
06:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:86:3C:53:CA:97:D4:A2:71:AC:2E:AF:2C:F4:80:BD:3C:54:9B:57
X509v3 Authority Key Identifier:
keyid:36:CF:B3:97:5B:BD:5E:F8:7B:29:C3:DC:4A:4B:98:EA:5C:25:C4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2c1061-db25-44bd-804c-a14dcee57e74/1/Ns-zl1u9Xvh7KcPcSkuY6lwlxEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6a:0d:0f:22:3a:59:f4:1c:12:82:3f:7d:c0:62:9e:a1:36:
06:ed:74:ef:3a:d7:20:b6:5d:6c:9b:4d:bc:66:7f:b9:3f:62:
df:bb:52:5c:2e:cc:dc:34:70:b6:cf:a1:d3:d6:de:08:b0:87:
53:ba:e1:9c:dd:c5:ae:fc:3a:e5:43:aa:61:2f:49:a5:9a:5d:
b1:fa:7a:56:e8:7f:e9:75:63:22:46:a0:b4:8a:88:e7:eb:01:
13:0c:e0:2b:9a:c0:32:08:3a:48:dd:ed:53:ea:8a:88:9b:36:
fe:5c:25:b8:2b:12:c8:9c:0f:d2:bc:fe:cb:b6:ff:a6:9a:88:
c0:dc:33:91:b6:b6:02:14:59:5f:00:5b:cf:30:fa:e8:cb:13:
7b:36:91:1e:b0:fc:ec:bc:59:2e:2a:61:97:0f:fc:0e:c5:f7:
e3:22:8f:17:4f:42:c9:72:62:04:62:77:5f:3e:6b:f1:16:c0:
ea:82:98:d5:4f:40:87:3e:99:c8:91:82:a4:89:fe:ad:92:dd:
44:70:ce:ff:39:42:84:0d:d8:de:9a:84:ec:b7:60:d6:ba:8e:
1f:9a:8b:87:71:59:ef:c4:15:0f:ee:89:ab:63:ca:40:3a:a7:
14:73:ac:90:fb:02:c5:54:38:c6:b5:89:8f:d7:3c:c8:3e:7d:
b5:0d:be:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:02:50 2026 by rpki-client