Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: 9TpysmpyY0DBBCn/YTMoxk9QKqpXeC4USRmv57+XLAE=
Subject key identifier: 68:9A:D0:F0:5A:97:A6:D9:1E:E8:2B:DD:B1:1E:80:F4:8B:90:9D:C3
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 01A1347E894A8BF993198A41378ACE65B8AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 1180
Signing time: Tue 13 Oct 2026 09:01:10 +0000
Manifest this update: Tue 13 Oct 2026 09:01:10 +0000
Manifest next update: Wed 14 Oct 2026 09:01:10 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: usNa5CS3Fo9w/VkYAqSUlXcMsTBe5JsV2CXkWhk8fd8=)
2: d4grg2tvuefsoHmD0ZdaVonf75c.roa (hash: OXvdnvF2UW52gDEgFTfQ3VspznPh5gZEegyP1xQRgjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7e:89:4a:8b:f9:93:19:8a:41:37:8a:ce:65:b8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Oct 13 09:01:10 2026 GMT
Not After : Oct 14 09:01:10 2026 GMT
Subject: CN=689ad0f05a97a6d91ee82bddb11e80f48b909dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:00:29:c8:f4:ea:73:5d:b2:59:57:5e:27:
3e:aa:23:f9:12:80:f0:7f:4b:26:47:fc:59:36:5c:
d5:5e:06:07:09:5b:ab:ee:d9:a7:04:82:7e:f1:19:
9c:e8:3f:88:f1:87:70:91:ec:36:c7:8f:cc:1b:77:
f6:86:78:05:0b:90:c7:55:70:13:20:24:75:82:a6:
98:bf:a0:22:cd:30:fa:0a:df:92:ef:c6:e9:54:df:
e9:0a:4b:2d:b8:41:b8:8b:f8:18:97:90:a1:f0:b4:
7e:7f:59:dd:19:bf:cd:5c:82:45:7f:82:cd:9c:44:
b4:14:5e:fc:f4:a1:0f:c4:d8:2e:ea:26:43:f5:6d:
82:b4:e2:fe:bb:a7:18:ce:97:ea:03:02:e5:8c:42:
67:6e:47:93:cc:fa:cf:0a:cf:ae:66:0d:69:a7:d1:
4a:b0:6c:ff:c1:71:cb:90:9f:82:6e:f8:0e:7b:dd:
dd:4c:d0:db:13:84:4c:ff:f2:ef:fd:6e:ab:87:a4:
20:60:8f:b0:dd:2b:2c:dd:63:12:ac:33:40:24:7a:
05:c3:aa:89:48:1a:e6:99:5c:83:df:9e:20:8b:b5:
48:d4:11:92:fb:93:15:33:b9:4e:c2:a1:f1:65:88:
f1:a8:52:c7:49:3a:7c:df:19:83:3a:72:75:d7:b4:
3d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9A:D0:F0:5A:97:A6:D9:1E:E8:2B:DD:B1:1E:80:F4:8B:90:9D:C3
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e2:26:32:e7:eb:1e:b4:1e:8b:97:70:85:9c:0f:93:f3:90:
0a:51:54:b2:20:be:6b:a8:bd:de:a1:0b:0b:14:cc:36:91:db:
72:30:3a:fc:1d:75:3f:a8:94:2c:ac:e3:9f:9d:d6:7d:23:25:
40:89:38:e2:63:0c:10:b5:9c:92:d5:b5:be:a4:d2:5d:1c:4c:
e3:9f:39:ed:10:81:c0:54:a1:93:84:3a:6a:db:97:73:bc:41:
65:cd:1a:5e:a0:bd:ac:6b:fd:1f:37:bb:17:19:0d:83:4c:dd:
64:7a:e0:48:6f:22:9b:0b:03:c4:a0:39:11:cf:0f:03:05:ac:
3c:c4:89:70:99:60:87:ba:6a:56:f1:9d:bf:57:14:2e:72:b3:
32:86:5d:e6:13:92:e2:cd:e5:a7:67:7c:23:25:88:b0:f0:ef:
38:c4:39:78:65:f3:0d:e6:fe:e9:0f:24:c0:f2:15:76:f1:a8:
6f:95:a3:17:2e:ac:a8:6b:2e:7d:f6:c7:e9:e1:72:74:ff:4a:
25:ee:9c:e4:61:d8:85:09:d8:f5:52:53:0d:67:d0:ba:71:98:
30:fb:9e:f1:18:7e:15:e1:c0:9a:e7:8c:09:b9:28:cd:4e:39:
b6:39:6d:87:dc:88:02:a9:8f:28:46:71:03:53:6e:9f:1f:ae:
73:92:81:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:32:44 2026 by rpki-client