Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
File: Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft (raw, json)
Hash identifier: Jcd5MQ5VyYN7DCoSAyNZLsf2/vsg9nmXoswrlUgT1pY=
Subject key identifier: 87:58:E4:09:28:08:31:8D:AE:25:B5:AA:C5:6E:EB:00:EF:DC:DA:89
Authority key identifier: 36:B7:6D:DD:F8:E3:30:46:33:9E:86:56:52:14:4C:45:3B:60:57:50
Certificate issuer: /CN=36b76dddf8e33046339e865652144c453b605750
Certificate serial: 019F8F7F094A7855A35E99B4A3FEEF53BF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:35 +0000
Manifest this update: Thu 23 Jul 2026 15:01:35 +0000
Manifest next update: Fri 24 Jul 2026 15:01:35 +0000
Files and hashes: 1: Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl (hash: pS2Za4hrykNsdbMAOprHWZcPaBoE9C8BxBswu/VMeBs=)
2: mmX_7osZyxuKHgrp5xtpjBXseIc.asa (hash: 6oK8ShjwFJPl0vg4dcL77DXZ1M2IE0dArmaOzK/T8ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:09:4a:78:55:a3:5e:99:b4:a3:fe:ef:53:bf:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b76dddf8e33046339e865652144c453b605750
Validity
Not Before: Jul 23 15:01:35 2026 GMT
Not After : Jul 24 15:01:35 2026 GMT
Subject: CN=8758e4092808318dae25b5aac56eeb00efdcda89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:95:b2:0a:00:da:7c:8c:29:e7:fb:b5:63:
74:2c:8c:44:77:ee:26:35:ff:83:ae:4f:7a:60:7d:
6e:8c:52:5e:0d:00:21:c4:6a:75:c7:c9:48:fb:15:
02:78:4f:c4:ea:7d:94:5b:7a:6e:4e:c9:2a:aa:76:
c9:91:c6:fd:4a:9c:c3:82:98:59:f1:d2:c1:de:dd:
41:23:2b:83:14:04:79:be:de:e2:c8:cf:3f:07:7d:
8e:29:db:d0:6e:69:03:20:72:77:6a:77:22:1c:8d:
a8:0e:f1:9f:43:1b:3b:b8:25:9e:c6:05:d3:25:a3:
ee:b5:ac:2e:c9:f8:3d:23:d1:69:bf:58:96:8e:40:
80:ba:66:68:37:d6:1e:ab:27:85:43:f5:c7:85:0e:
6f:af:fc:e7:de:bd:96:71:95:32:6c:7b:2a:f7:c7:
ba:36:e7:8c:84:59:1e:73:65:49:de:b7:bb:aa:7a:
17:81:75:87:86:a5:71:07:de:c8:9c:0f:18:7d:40:
27:74:e4:30:3c:36:63:2e:d7:a3:f5:db:32:f7:30:
9f:42:99:bf:06:35:d2:22:a3:89:76:84:fc:75:af:
c2:28:e2:46:ed:28:f0:73:83:57:ec:c3:82:86:6e:
f7:29:6d:b1:16:7d:2d:25:83:7b:7c:64:a4:97:2d:
c3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:58:E4:09:28:08:31:8D:AE:25:B5:AA:C5:6E:EB:00:EF:DC:DA:89
X509v3 Authority Key Identifier:
keyid:36:B7:6D:DD:F8:E3:30:46:33:9E:86:56:52:14:4C:45:3B:60:57:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:01:0c:73:af:01:19:1d:c2:eb:01:6d:b0:d3:c6:0f:6e:3a:
1c:ae:23:92:7a:35:ef:06:ae:8a:24:f7:cc:bb:f5:a1:6f:01:
ec:62:c7:a1:11:34:fd:74:a7:7f:68:63:b9:39:b0:0a:85:02:
0b:58:f4:49:dd:d7:92:73:a1:cc:f1:6e:2d:e1:93:b8:b1:27:
3a:03:37:53:84:0a:51:55:3a:b0:ae:42:c0:9c:40:d0:34:e4:
a8:45:6b:e1:14:c0:56:6b:e9:5d:5c:4b:2a:62:15:0a:c8:59:
4f:1a:62:81:76:58:7c:20:7b:a6:c3:2a:a7:2d:f9:73:43:7b:
a3:a8:48:a5:85:cb:0c:5d:b5:85:11:7c:9a:2d:6a:52:7f:1c:
72:ac:79:ca:f9:78:70:aa:96:d0:8f:19:b2:ea:be:cf:34:9d:
c4:90:a5:9d:12:a8:0b:67:24:4c:27:a6:af:0c:9f:30:59:5d:
f0:71:29:fe:fc:8f:bc:4f:b8:73:04:c7:6b:56:7e:96:4b:c3:
4b:25:35:24:65:18:2a:50:95:89:36:c1:d3:7b:f9:61:38:d9:
98:e3:54:37:2e:67:4d:7d:bd:aa:a9:e9:54:25:a0:cb:87:2e:
59:9a:d9:20:82:79:00:bb:b8:c7:0e:b7:5a:b3:86:4b:b2:6e:
5a:e9:7e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:58:04 2026 by rpki-client