Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
File: NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft (raw, json)
Hash identifier: KLFiwgZejiH1TCb3bECBrGME2WCr7p3nEJpzSWKJuVU=
Subject key identifier: 3A:70:6B:F9:66:9B:9F:64:3E:9C:9C:12:B1:3B:0C:3E:0B:8F:65:7C
Authority key identifier: 36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
Certificate issuer: /CN=36135f13abf02fa3fca505d568816afc59334916
Certificate serial: 01A18F791AAC7A2BAED88EAAD47558F2A55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
Manifest number: 0320
Signing time: Sat 31 Oct 2026 01:00:40 +0000
Manifest this update: Sat 31 Oct 2026 01:00:40 +0000
Manifest next update: Sun 01 Nov 2026 01:00:40 +0000
Files and hashes: 1: NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl (hash: XzmV2gx0r4kfVqoJHjxZIby04EEZ33AQytVH5Wv44yw=)
2: RHxOXhbADUbC_oKF4PQ6sLf8f9U.roa (hash: KcDTJae6aVfPcRbFgH91KX6JaFgZ6GmXwYl1pNFHpOM=)
3: Ux15_f21f5m4FEwsehwwJpF7eyg.roa (hash: O+6kt63ebzWPfLmcRxNHSLUa9ESjOp8DHk/Yuz0h0Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:79:1a:ac:7a:2b:ae:d8:8e:aa:d4:75:58:f2:a5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36135f13abf02fa3fca505d568816afc59334916
Validity
Not Before: Oct 31 01:00:40 2026 GMT
Not After : Nov 1 01:00:40 2026 GMT
Subject: CN=3a706bf9669b9f643e9c9c12b13b0c3e0b8f657c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:fc:5d:8b:33:01:f4:2f:a5:cd:19:bd:82:
6c:53:73:29:78:b3:89:9c:75:cd:6b:88:4b:90:13:
8a:28:5e:14:02:e8:2e:c5:81:6d:f5:76:61:ec:79:
7f:61:ec:72:5d:a9:ef:24:07:17:c5:58:49:f7:dc:
5a:2f:55:58:59:12:8d:57:ec:83:d0:fa:5f:3c:6d:
70:a9:51:ed:d7:fc:92:0f:69:b3:0c:4c:ed:8d:9d:
88:8e:a7:a3:32:00:6c:9f:f3:fa:fb:d4:52:3a:e5:
3f:fb:89:b2:47:28:23:08:c8:da:86:2d:63:91:06:
66:d0:e6:60:1d:b2:68:cb:0a:8e:d6:6c:7a:31:a5:
dc:4b:f0:46:4c:e4:b5:d4:27:f0:a2:08:b7:98:08:
2d:80:c8:20:bd:e2:bd:94:06:2b:73:28:ec:70:55:
05:f5:3d:73:92:3c:88:c8:2a:2a:d9:ae:f6:4d:fe:
dd:e1:79:d4:09:da:7b:03:a8:0e:1f:4d:ef:f5:e6:
d7:a1:a8:9f:b0:4c:fc:89:ad:79:97:5b:0b:1d:f6:
fc:54:62:c3:70:5b:b1:ae:8e:d7:b1:ea:c1:1f:08:
2d:ce:e1:86:d3:73:97:e5:51:bd:3d:61:7d:ea:ad:
19:9e:45:2c:89:00:2c:83:e4:f3:73:be:dd:93:2c:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:70:6B:F9:66:9B:9F:64:3E:9C:9C:12:B1:3B:0C:3E:0B:8F:65:7C
X509v3 Authority Key Identifier:
keyid:36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:86:5b:c5:74:32:8d:92:92:fe:d1:94:2f:aa:00:73:78:c9:
46:94:e1:a8:38:b1:c3:7d:5f:3b:52:45:07:fa:32:50:d0:53:
c6:9f:5c:c4:55:9c:5d:d2:3a:8f:e7:a5:22:dd:06:c4:77:70:
d9:25:01:69:36:9e:12:ac:3d:61:d5:0e:33:1e:6d:a8:53:14:
b9:78:fb:20:4a:ec:51:a9:c0:f2:cb:2c:e7:3b:62:36:bb:42:
fa:ee:12:67:e9:08:0d:c9:1e:cd:5f:18:93:ce:8a:4d:03:c0:
d3:a9:b9:59:b3:5c:52:de:6e:0d:79:04:50:b3:8b:62:1c:bf:
08:62:8d:72:39:5c:ab:76:7f:4e:18:0a:6d:cb:a2:72:6e:ce:
68:e8:6f:f1:b7:95:62:f5:61:86:f9:90:29:6a:10:a9:16:ed:
a0:de:c4:50:b0:3c:1b:c8:06:9b:5c:f3:f2:f1:8e:f6:9c:ce:
70:19:84:a5:95:55:cd:9c:d4:3d:3e:4a:64:65:05:0f:d6:d0:
e3:c2:f6:c0:57:74:4b:64:99:76:2d:9a:d7:ff:54:87:84:3c:
2a:90:6d:e9:80:59:82:7e:85:0a:aa:79:f2:fa:c7:5a:52:c5:
23:cb:84:c8:09:bc:39:67:23:ae:d3:0b:b0:39:a3:d6:bd:17:
29:af:28:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:07:17 2026 by rpki-client