Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.mft
File: NUgzKLASxNGWj8IF3gJK8vmx2rw.mft (raw, json)
Hash identifier: LEe7udJwuQb+mm8QkXo0NpiHWwC9cL+6G3RDbiQMWQM=
Subject key identifier: B7:E0:7C:29:A5:5F:89:16:D6:01:D7:16:7E:F0:59:FB:EB:48:66:41
Authority key identifier: 35:48:33:28:B0:12:C4:D1:96:8F:C2:05:DE:02:4A:F2:F9:B1:DA:BC
Certificate issuer: /CN=35483328b012c4d1968fc205de024af2f9b1dabc
Certificate serial: 01A17B84A430F53C1BCBB87315E96ED6ED74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUgzKLASxNGWj8IF3gJK8vmx2rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.mft
Manifest number: 0763
Signing time: Tue 27 Oct 2026 04:00:52 +0000
Manifest this update: Tue 27 Oct 2026 04:00:52 +0000
Manifest next update: Wed 28 Oct 2026 04:00:52 +0000
Files and hashes: 1: NUgzKLASxNGWj8IF3gJK8vmx2rw.crl (hash: ad1z1QOcZdZEgNvbkpGrGGttPfGAmAo2CCW4FVIKBcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUgzKLASxNGWj8IF3gJK8vmx2rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:a4:30:f5:3c:1b:cb:b8:73:15:e9:6e:d6:ed:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35483328b012c4d1968fc205de024af2f9b1dabc
Validity
Not Before: Oct 27 04:00:52 2026 GMT
Not After : Oct 28 04:00:52 2026 GMT
Subject: CN=b7e07c29a55f8916d601d7167ef059fbeb486641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:53:b0:58:70:4c:98:dd:6d:85:be:eb:be:
4e:c6:34:8b:05:c5:1d:d1:c5:99:dc:17:41:d6:d7:
fc:3b:0e:6a:3c:da:7e:9d:37:c0:50:31:a0:7f:42:
6b:f0:99:23:aa:a9:c5:11:ec:15:c6:6a:55:24:e2:
27:44:8e:a8:2e:64:13:b9:ed:65:c0:ec:e6:9c:1e:
1b:8e:75:3b:04:5c:84:4e:35:5b:41:c7:d8:be:a9:
a7:50:35:1c:40:1e:0b:f3:56:24:fe:8e:7b:57:60:
f5:0a:d7:e7:fe:8c:75:fd:bc:91:db:ae:f2:85:19:
57:fc:7c:c5:07:c1:e1:79:54:79:ff:b7:b9:40:06:
82:7e:58:2e:21:5f:82:75:36:fc:21:1c:6d:6b:99:
2c:48:70:04:56:52:b4:c7:ff:85:fe:aa:19:f2:4d:
e5:c3:32:e4:6c:55:ee:c5:8e:33:db:69:ec:51:96:
b1:93:51:68:0f:ac:b0:01:ba:47:ee:59:83:0d:2f:
c7:b8:fa:7a:f0:c8:76:3e:59:75:a2:4c:0a:cf:96:
b4:b5:c1:93:b5:fa:48:fe:82:10:01:01:59:4b:e8:
c7:90:7c:89:5b:e2:8e:65:ec:fa:80:1a:44:14:bd:
c1:73:08:16:74:ac:66:07:2c:a5:fd:27:62:89:76:
0e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E0:7C:29:A5:5F:89:16:D6:01:D7:16:7E:F0:59:FB:EB:48:66:41
X509v3 Authority Key Identifier:
keyid:35:48:33:28:B0:12:C4:D1:96:8F:C2:05:DE:02:4A:F2:F9:B1:DA:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUgzKLASxNGWj8IF3gJK8vmx2rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:46:02:79:0f:14:8e:d1:25:86:74:6a:5b:58:42:c5:b6:20:
77:7e:fb:04:8d:41:4e:88:37:9f:b1:cc:fe:b4:d3:48:83:ab:
cb:83:31:2d:51:8d:a7:ae:2b:44:15:cb:f3:4a:35:d1:1c:93:
26:56:f2:4e:f2:8f:a6:71:b1:32:e8:78:f4:87:96:bd:48:21:
b9:5c:19:9b:4c:97:ef:84:ab:7d:45:71:34:72:49:2a:c1:cc:
11:a3:0e:5f:fd:da:f1:9b:f1:6a:97:f9:d1:a9:76:a1:c3:dd:
c5:83:42:ac:5e:3a:cf:39:56:69:b0:a0:fa:70:bc:2a:75:36:
0c:82:03:73:26:30:e7:e6:b9:af:09:e9:d9:6e:1e:53:7d:5b:
21:58:86:39:c3:21:f3:50:77:7b:ef:aa:6b:ee:5c:0a:e3:3f:
d0:b2:58:82:5a:d3:d4:a9:56:55:6b:8d:58:8b:94:17:b1:74:
c7:43:d5:02:0f:cc:e3:15:8d:88:46:2a:c9:62:d9:0c:0b:85:
28:9b:b4:ab:42:7c:c5:b4:29:24:f4:b0:1d:1d:e1:61:f7:16:
35:a5:ea:2f:9f:4e:fb:fe:e6:a0:10:c7:9c:79:87:5d:53:6f:
1b:a1:ea:d6:1f:6e:30:b0:78:27:31:16:74:02:00:a9:13:77:
a8:ad:6d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:49:47 2026 by rpki-client