Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: hO4kkBdvErTt6ytC/lmtbdQBVdxuwrsuZs7P8DKhbJ4=
Subject key identifier: 40:C0:31:73:B0:31:7E:69:99:38:A4:D5:0A:84:CF:67:17:1A:19:87
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 01A020552023CAEF699F35513FD31DDBF89B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 10F1
Signing time: Thu 20 Aug 2026 18:00:44 +0000
Manifest this update: Thu 20 Aug 2026 18:00:44 +0000
Manifest next update: Fri 21 Aug 2026 18:00:44 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: pZE6H0wx6IwevHAVwbZ4r3bFSm9s8USUkT29qGFE6YU=)
2: d4grg2tvuefsoHmD0ZdaVonf75c.roa (hash: OXvdnvF2UW52gDEgFTfQ3VspznPh5gZEegyP1xQRgjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:55:20:23:ca:ef:69:9f:35:51:3f:d3:1d:db:f8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Aug 20 18:00:44 2026 GMT
Not After : Aug 21 18:00:44 2026 GMT
Subject: CN=40c03173b0317e699938a4d50a84cf67171a1987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:9f:62:c0:42:b7:7f:d8:e4:d1:72:a7:78:
c9:67:71:c3:b5:bd:6a:32:22:cd:01:a1:a6:6b:8e:
32:17:c2:8c:6d:41:56:50:0f:f1:48:0b:2c:c0:60:
8c:01:eb:91:31:49:77:f3:c3:1e:d8:62:9f:04:6e:
72:d9:78:c6:6f:4a:1c:44:70:1b:f2:2b:96:95:1a:
a3:e5:9b:84:c4:88:6d:36:01:2a:39:4d:ff:02:f3:
bc:6b:d1:89:43:c4:db:5a:e0:11:7e:84:3e:61:eb:
9d:4c:64:f7:79:79:75:95:49:63:4a:fc:e6:8b:11:
a1:96:86:17:58:c4:01:7a:d9:3c:de:b3:1d:28:d6:
b4:39:88:10:60:c3:4d:10:35:7e:30:0a:6a:bb:51:
dc:bb:3b:41:54:a4:8e:e5:c3:7e:6d:8c:33:bb:35:
b2:d9:5a:6f:65:e5:82:44:48:95:29:69:d0:b5:23:
a6:f0:cf:ad:c7:29:12:d1:57:f2:55:cc:c0:09:11:
60:42:54:7c:ec:0e:ac:58:1f:c7:ef:fc:5e:60:59:
7e:2f:34:4a:f9:45:58:f9:59:93:da:7f:74:6f:e9:
2d:fe:08:8f:78:bd:d0:df:19:ab:ef:07:ff:91:ba:
4d:1d:32:75:44:92:7c:27:7a:67:58:2b:94:f5:df:
70:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C0:31:73:B0:31:7E:69:99:38:A4:D5:0A:84:CF:67:17:1A:19:87
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ad:df:65:96:c4:1c:79:6b:a6:21:8a:14:91:e0:e2:ce:0e:
1c:1c:0d:8a:2e:f2:fa:21:77:4e:c3:78:c9:57:cd:c2:fe:f9:
15:90:9d:00:3f:f0:55:6b:b4:54:a3:69:e6:5f:82:78:ae:05:
5a:7a:9c:26:08:e2:6d:0e:1d:6d:d4:b4:fd:7b:16:89:e9:02:
20:1a:aa:82:db:31:86:0e:5b:df:4f:45:1c:aa:1c:72:1e:69:
c9:fa:68:1e:3e:ed:6c:90:75:1b:0f:2d:22:aa:a3:b1:43:15:
4f:56:96:ca:ec:23:a8:b3:5e:d0:43:96:68:f4:40:77:05:bb:
65:c6:ea:76:c3:60:f1:19:49:dd:fc:bc:cd:3e:2e:cd:42:c0:
8f:b0:1b:5d:aa:99:11:e8:f6:2e:84:5d:7a:9e:b2:ab:30:80:
3e:2a:49:c6:f4:3b:c9:c1:d1:d1:bc:ee:10:39:36:b8:81:8d:
78:1e:de:71:fc:6b:2f:30:35:6c:ee:61:e4:08:e5:2c:4b:37:
f8:8f:a2:09:51:ca:59:ec:58:aa:49:e1:9d:b5:a6:1b:89:95:
40:d3:3a:aa:e8:35:13:07:44:8d:80:9d:97:c5:75:c9:fc:f5:
9a:c8:d1:a4:2b:33:12:4b:1d:5b:d9:f7:d0:34:83:0d:07:09:
42:2f:62:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:24 2026 by rpki-client