Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
File: NkUaLqQK8XFeYxMWlGiZaspxu4o.mft (raw, json)
Hash identifier: np0S5S0T7INsdW9tN2WAdh2JRU8Ol497oeO6MDSGcU8=
Subject key identifier: 04:CF:2D:07:84:60:12:60:C1:55:09:91:39:7C:AF:3D:E5:A0:55:39
Authority key identifier: 36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
Certificate issuer: /CN=36451a2ea40af1715e6313169468996aca71bb8a
Certificate serial: 01A08AFA50594D713968ABFE87F2A69A014C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
Manifest number: 0F8D
Signing time: Thu 10 Sep 2026 11:00:55 +0000
Manifest this update: Thu 10 Sep 2026 11:00:55 +0000
Manifest next update: Fri 11 Sep 2026 11:00:55 +0000
Files and hashes: 1: NkUaLqQK8XFeYxMWlGiZaspxu4o.crl (hash: nPHBsP32ZSyriS1UfQ7n+E5xwNjvP5mV3Y0wSvNorWM=)
2: lBqk0ZJjhRTU5WPqZKy0Q75ijLY.roa (hash: umtk9WvPU6HXcHOoGpqTOSwBwsTaIlBi9j5sLa9RX78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:50:59:4d:71:39:68:ab:fe:87:f2:a6:9a:01:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36451a2ea40af1715e6313169468996aca71bb8a
Validity
Not Before: Sep 10 11:00:55 2026 GMT
Not After : Sep 11 11:00:55 2026 GMT
Subject: CN=04cf2d0784601260c1550991397caf3de5a05539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2d:c5:3e:2a:26:28:3f:7e:1e:b5:04:32:2d:
a7:e2:e5:31:9f:fe:5d:9c:6a:c2:8c:d3:cb:e2:50:
9a:bf:d8:de:10:0e:48:5f:6e:29:d3:3e:24:87:a5:
fc:e9:43:9a:63:95:80:e7:08:44:30:d2:f4:ce:ef:
13:37:d2:c1:dc:92:6e:cb:b6:cc:b9:93:ed:6a:88:
76:8e:e1:3c:07:32:04:42:a8:0d:7d:b5:d7:91:c9:
4e:76:33:2e:99:52:50:e9:9b:a9:82:79:36:7a:e9:
dd:30:9c:75:e2:73:64:cc:87:da:ed:4f:a7:4e:78:
03:f0:6b:34:b0:a0:d2:86:55:fe:1e:cc:a1:6c:87:
f3:29:62:61:72:95:4a:0c:1a:53:bb:20:cb:f9:0e:
5e:1e:ab:38:5c:6f:16:71:21:e9:db:7a:1c:19:e2:
d4:9f:6c:c9:2b:af:14:3f:33:94:15:d9:66:15:ab:
1a:e4:2c:eb:10:4a:17:ee:18:51:18:ee:9e:c3:b8:
f6:0d:89:3a:77:ae:e2:ea:69:a1:0b:1a:bc:f7:8c:
ca:55:85:82:cf:f3:82:18:1c:49:33:a9:a3:8e:d2:
8c:68:0c:ba:99:2d:4e:1f:44:2c:22:b5:0a:0f:ed:
8e:61:31:b6:05:95:ca:36:40:cc:44:06:12:c9:7c:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CF:2D:07:84:60:12:60:C1:55:09:91:39:7C:AF:3D:E5:A0:55:39
X509v3 Authority Key Identifier:
keyid:36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b0:38:5f:ee:d1:de:2b:15:fa:eb:25:23:7d:8c:49:7f:52:
2d:af:27:cd:af:1a:f5:05:db:ae:70:1b:56:74:69:7f:07:29:
af:50:ec:73:82:3d:98:0d:fc:01:56:27:59:75:f3:41:44:fe:
86:84:42:59:36:6f:b9:ea:ad:74:98:e5:4c:2d:57:35:87:da:
ef:b6:7a:88:9d:a7:69:ec:57:d6:47:4b:6e:e8:02:c1:1e:7d:
f6:3b:de:02:b1:2a:1b:0b:c1:ce:fb:7d:b2:50:b7:66:07:19:
78:70:6b:8c:35:68:21:a3:6a:3e:6c:02:ae:ab:79:bc:bc:03:
ab:e1:ae:cc:ef:e7:c7:e8:1f:b9:ed:59:2d:93:98:57:72:b6:
84:55:78:d5:e8:90:7e:f1:a1:8c:be:2c:17:ae:8f:13:51:31:
5e:36:cf:fd:ac:28:35:06:d1:a1:25:e2:14:f3:24:ee:e3:14:
32:0c:be:64:18:3c:df:8a:0b:fc:66:ba:80:e3:5c:19:82:29:
93:c6:48:23:86:d6:27:f8:13:84:7d:6d:7a:fb:79:8b:fd:d1:
bf:1b:df:e4:82:9c:42:09:e3:93:1c:59:25:5d:d3:c8:58:f0:
1e:5d:ee:d9:50:fd:f0:8e:1b:c4:07:db:95:4d:23:92:74:e6:
a5:ab:56:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+lBZTXE5aKv+h/KmmgFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NDUxYTJlYTQwYWYxNzE1ZTYzMTMxNjk0Njg5OTZhY2E3
MWJiOGEwHhcNMjYwOTEwMTEwMDU1WhcNMjYwOTExMTEwMDU1WjAzMTEwLwYDVQQD
EygwNGNmMmQwNzg0NjAxMjYwYzE1NTA5OTEzOTdjYWYzZGU1YTA1NTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7S3FPiomKD9+HrUEMi2n4uUxn/5d
nGrCjNPL4lCav9jeEA5IX24p0z4kh6X86UOaY5WA5whEMNL0zu8TN9LB3JJuy7bM
uZPtaoh2juE8BzIEQqgNfbXXkclOdjMumVJQ6Zupgnk2eundMJx14nNkzIfa7U+n
TngD8Gs0sKDShlX+HsyhbIfzKWJhcpVKDBpTuyDL+Q5eHqs4XG8WcSHp23ocGeLU
n2zJK68UPzOUFdlmFasa5CzrEEoX7hhRGO6ew7j2DYk6d67i6mmhCxq894zKVYWC
z/OCGBxJM6mjjtKMaAy6mS1OH0QsIrUKD+2OYTG2BZXKNkDMRAYSyXzl4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATPLQeEYBJgwVUJkTl8rz3loFU5MB8GA1UdIwQY
MBaAFDZFGi6kCvFxXmMTFpRomWrKcbuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmtVYUxxUUs4WEZlWXhNV2xHaVphc3B4dTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84YjM4MjItNmVhYS00M2EyLTlhMzIt
YmUzMDhjMTJmN2JjLzEvTmtVYUxxUUs4WEZlWXhNV2xHaVphc3B4dTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS84YjM4MjItNmVhYS00M2EyLTlhMzItYmUzMDhjMTJmN2Jj
LzEvTmtVYUxxUUs4WEZlWXhNV2xHaVphc3B4dTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbA4X+7R
3isV+uslI32MSX9SLa8nza8a9QXbrnAbVnRpfwcpr1Dsc4I9mA38AVYnWXXzQUT+
hoRCWTZvueqtdJjlTC1XNYfa77Z6iJ2naexX1kdLbugCwR599jveArEqGwvBzvt9
slC3ZgcZeHBrjDVoIaNqPmwCrqt5vLwDq+GuzO/nx+gfue1ZLZOYV3K2hFV41eiQ
fvGhjL4sF66PE1ExXjbP/awoNQbRoSXiFPMk7uMUMgy+ZBg834oL/Ga6gONcGYIp
k8ZII4bWJ/gThH1tevt5i/3Rvxvf5IKcQgnjkxxZJV3TyFjwHl3u2VD98I4bxAfb
lU0jknTmpatWPA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:11:27 2026 by rpki-client