Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
File: Nl81kB17-TkbVrA0VzsklXS66S0.mft (raw, json)
Hash identifier: t0ot+zs+S+DzXy0aDPS+g2FhK0d96N9C3OcgQqKyTEQ=
Subject key identifier: AC:5E:7D:72:A3:42:1D:FE:A4:72:BF:5B:1F:89:4D:B1:C8:D9:74:01
Authority key identifier: 36:5F:35:90:1D:7B:F9:39:1B:56:B0:34:57:3B:24:95:74:BA:E9:2D
Certificate issuer: /CN=365f35901d7bf9391b56b034573b249574bae92d
Certificate serial: 019FA2CE85B96F4E82DE28CE35551ACBFDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nl81kB17-TkbVrA0VzsklXS66S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:01:11 +0000
Manifest this update: Mon 27 Jul 2026 09:01:11 +0000
Manifest next update: Tue 28 Jul 2026 09:01:11 +0000
Files and hashes: 1: HmeltJqoGqK5DZzHGOZCGQrGqZs.roa (hash: vtN0gPmhpBlauaDksKBhqQJB3xkxqncdATCbp7ofHWY=)
2: Nl81kB17-TkbVrA0VzsklXS66S0.crl (hash: W7cRQJpBwFqwyTdLK7+XWkkDu823K1hrhS+3UaK8m40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nl81kB17-TkbVrA0VzsklXS66S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:85:b9:6f:4e:82:de:28:ce:35:55:1a:cb:fd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=365f35901d7bf9391b56b034573b249574bae92d
Validity
Not Before: Jul 27 09:01:11 2026 GMT
Not After : Jul 28 09:01:11 2026 GMT
Subject: CN=ac5e7d72a3421dfea472bf5b1f894db1c8d97401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:70:df:22:5c:b6:da:ed:59:66:c6:e7:42:
f3:00:1e:93:a0:1b:a2:23:d7:fb:f4:2e:7b:09:b1:
39:17:7b:cd:5f:fb:8e:73:dd:32:78:ca:04:a3:a7:
46:f0:04:1f:57:bb:37:f1:cc:38:7d:62:aa:d6:4c:
9f:f1:8d:b3:69:d4:bf:0e:4b:de:6d:33:5e:f7:73:
73:a9:b1:ce:2d:eb:f4:f6:95:d1:ac:4c:8c:54:e4:
3e:39:72:7c:af:d2:bf:a5:a7:17:0e:44:98:ef:5e:
8d:bf:6c:98:7b:96:85:0e:fb:ae:f9:38:d2:78:99:
26:74:38:69:57:c9:63:ac:ee:1c:0c:31:2a:f9:b5:
64:30:e6:87:5b:c1:04:cd:24:b5:08:25:9d:f0:88:
f2:88:5f:a3:c3:63:81:f8:26:ff:bb:a0:bb:3c:f1:
18:d7:6a:70:f1:fd:4b:24:19:27:80:02:da:11:74:
16:9d:3b:cc:6c:68:ab:bc:ed:18:4a:48:3d:b6:3b:
b8:32:00:1e:23:93:7a:91:0c:96:6e:fb:2f:f7:1d:
fb:72:3d:33:59:4b:da:16:51:e3:87:0e:e5:3a:01:
dc:06:8c:61:5d:72:38:d8:54:22:00:40:ed:fb:31:
35:e8:51:d6:b4:d7:69:4d:85:6d:68:a9:53:77:7d:
4d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5E:7D:72:A3:42:1D:FE:A4:72:BF:5B:1F:89:4D:B1:C8:D9:74:01
X509v3 Authority Key Identifier:
keyid:36:5F:35:90:1D:7B:F9:39:1B:56:B0:34:57:3B:24:95:74:BA:E9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nl81kB17-TkbVrA0VzsklXS66S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:98:7b:e3:e4:1c:7c:03:05:25:fc:7d:d9:2a:92:8b:29:c3:
1e:aa:ac:c1:40:80:a5:ed:09:cd:6c:d1:89:72:4d:33:89:6d:
bb:4b:6e:21:4e:f4:b8:47:73:06:33:6c:f7:6f:c4:48:3f:02:
83:81:41:ef:65:f6:63:5d:53:26:b8:96:41:8a:fa:aa:c0:0f:
f7:74:d1:79:bb:eb:6c:a6:5a:91:ed:2e:fc:a4:36:e5:aa:b2:
cb:47:7a:26:f2:d6:1e:e6:e7:79:ab:04:54:16:42:9e:8d:33:
45:83:be:be:0a:49:92:57:a5:df:47:58:f7:be:ae:b4:26:8d:
4a:28:bf:62:1e:30:c8:7c:63:52:fc:4b:36:04:9a:04:fc:fe:
8a:d8:92:31:bd:c4:02:0c:88:22:34:d6:b5:ba:11:7c:86:48:
c3:5a:06:61:55:e6:bb:3c:43:56:63:04:c0:7f:19:dc:f2:32:
c7:59:30:b0:91:5e:c4:07:cd:e4:93:bb:49:14:7e:14:3e:86:
1a:a9:11:61:48:7d:09:91:82:bb:ec:16:9b:9a:a8:8c:47:a3:
88:e2:e7:55:ce:25:40:84:19:bc:4e:95:ec:ca:f7:ac:23:0b:
56:fc:f6:d5:cd:02:3e:39:59:0d:15:4b:f2:3a:18:a7:34:45:
e3:b8:10:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:37:19 2026 by rpki-client