Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
File: Nl81kB17-TkbVrA0VzsklXS66S0.mft (raw, json)
Hash identifier: NlCRAv8i1sjADBeS1vUBf90GiVEdasei0qxPi3g8L4U=
Subject key identifier: 73:AB:8B:77:5B:69:69:7A:14:5D:19:AB:91:27:C9:64:F7:B1:1D:C6
Authority key identifier: 36:5F:35:90:1D:7B:F9:39:1B:56:B0:34:57:3B:24:95:74:BA:E9:2D
Certificate issuer: /CN=365f35901d7bf9391b56b034573b249574bae92d
Certificate serial: 01A181BDC66E52BB630D26AA36DF2CB156E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nl81kB17-TkbVrA0VzsklXS66S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:01:00 +0000
Manifest this update: Wed 28 Oct 2026 09:01:00 +0000
Manifest next update: Thu 29 Oct 2026 09:01:00 +0000
Files and hashes: 1: HmeltJqoGqK5DZzHGOZCGQrGqZs.roa (hash: vtN0gPmhpBlauaDksKBhqQJB3xkxqncdATCbp7ofHWY=)
2: Nl81kB17-TkbVrA0VzsklXS66S0.crl (hash: IFD8PT7/n2HpXJehX26ZwKrF9jtG+hbSorhhMbijfh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nl81kB17-TkbVrA0VzsklXS66S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:c6:6e:52:bb:63:0d:26:aa:36:df:2c:b1:56:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=365f35901d7bf9391b56b034573b249574bae92d
Validity
Not Before: Oct 28 09:01:00 2026 GMT
Not After : Oct 29 09:01:00 2026 GMT
Subject: CN=73ab8b775b69697a145d19ab9127c964f7b11dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:f5:c2:79:f2:82:4a:0d:54:b4:15:b2:3a:
62:2c:8b:11:b6:6b:a6:7c:86:23:24:70:dc:4e:10:
89:a3:39:12:30:c3:02:86:74:fb:8a:aa:64:1e:41:
03:54:40:86:49:0e:57:35:d4:9a:40:82:50:1c:ee:
25:7e:dc:de:4d:bf:f1:b3:70:1c:1c:4b:b6:a4:e7:
e1:b4:bd:d4:84:90:ab:a4:63:25:ae:fd:f1:2d:97:
8f:15:e4:a5:48:48:80:77:50:4f:8e:98:a2:de:1a:
ad:fe:a1:1c:50:66:84:c8:d4:24:33:a1:c6:55:b9:
4f:db:1e:70:6b:1f:4d:c8:20:ac:1e:d3:0f:e4:81:
7f:9f:b4:df:c7:ac:9d:ff:ce:01:29:f8:a7:93:ee:
c2:af:73:2b:a4:e7:ae:e1:99:1d:aa:33:c0:3e:f5:
2a:17:0d:e4:30:80:6e:9a:ff:50:ce:99:ae:a2:2c:
39:3e:66:30:49:5d:5e:a4:a9:39:1c:9b:42:07:db:
bb:26:42:af:c8:cc:ec:44:d4:19:fd:1d:9c:a8:04:
7a:c3:45:78:9e:db:c0:b4:04:f6:83:8b:36:11:63:
c8:5d:b7:d5:be:9a:bb:d6:9a:33:32:e5:21:9a:fa:
aa:f4:1d:8b:4d:92:cf:fe:21:34:5e:6a:cf:c1:d3:
fb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AB:8B:77:5B:69:69:7A:14:5D:19:AB:91:27:C9:64:F7:B1:1D:C6
X509v3 Authority Key Identifier:
keyid:36:5F:35:90:1D:7B:F9:39:1B:56:B0:34:57:3B:24:95:74:BA:E9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nl81kB17-TkbVrA0VzsklXS66S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bc:ad:a5:f5:1e:f6:46:b8:b5:7b:dd:d4:e3:a7:c8:1a:ce:
9a:4d:d6:70:78:c0:49:4f:8f:36:f0:87:91:fd:b1:82:62:e3:
61:c5:83:96:f8:06:04:95:ad:8e:db:e2:86:23:2f:52:43:58:
81:6f:63:19:b5:48:23:33:86:8d:93:ed:1f:dc:2c:8a:98:50:
20:aa:65:8b:86:a2:a9:26:68:d6:9e:45:b2:4a:46:d7:01:88:
dc:f9:0a:fd:12:de:6e:8a:21:7f:50:8f:e5:4d:41:03:73:8a:
a7:01:b6:41:a4:c5:71:97:7b:3f:22:67:91:a3:ed:21:95:46:
39:ca:70:b2:c8:65:4c:e1:7b:f4:b3:f2:9a:90:7e:c4:24:c5:
91:20:5e:d4:18:5b:cb:0f:bd:ef:ef:f1:57:f9:56:ee:ae:69:
ff:a9:d4:fa:1f:49:f1:ff:6f:d6:24:03:25:cb:c6:b2:c7:ef:
18:7d:0c:c7:b4:76:aa:b2:16:b6:e7:17:d0:f5:62:fc:30:b5:
5c:7f:de:23:49:f3:61:19:d9:b0:50:3d:4c:49:9b:12:1e:5c:
2c:f8:d2:c6:31:bf:9e:5f:ea:f4:81:44:74:04:3f:a2:8d:b2:
75:31:72:4a:10:20:93:29:93:23:77:fc:5c:ae:0a:4a:d6:4a:
8e:7c:48:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 17:29:52 2026 by rpki-client