Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
File: Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft (raw, json)
Hash identifier: inrCfYACLAt+kkupIPfRwHM0qgLOCv36qBpMdwM3vuA=
Subject key identifier: 3B:68:35:81:3E:47:64:04:C9:9C:DA:38:C7:4A:B7:6C:E8:D8:0A:9C
Authority key identifier: 36:B7:6D:DD:F8:E3:30:46:33:9E:86:56:52:14:4C:45:3B:60:57:50
Certificate issuer: /CN=36b76dddf8e33046339e865652144c453b605750
Certificate serial: 01A0E1756AD63A24ED7DC76118BC775782CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:02:43 +0000
Manifest this update: Sun 27 Sep 2026 06:02:43 +0000
Manifest next update: Mon 28 Sep 2026 06:02:43 +0000
Files and hashes: 1: Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl (hash: 9SK9XRpyI2FI1eQBAdqI6yRrN62s7A7MqF3mbxgpu0s=)
2: mmX_7osZyxuKHgrp5xtpjBXseIc.asa (hash: 6oK8ShjwFJPl0vg4dcL77DXZ1M2IE0dArmaOzK/T8ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:75:6a:d6:3a:24:ed:7d:c7:61:18:bc:77:57:82:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b76dddf8e33046339e865652144c453b605750
Validity
Not Before: Sep 27 06:02:43 2026 GMT
Not After : Sep 28 06:02:43 2026 GMT
Subject: CN=3b6835813e476404c99cda38c74ab76ce8d80a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:c1:05:3c:e9:37:6a:f6:3b:c1:b4:f6:58:
01:9d:e3:45:b4:58:ac:30:71:d6:3f:8f:69:55:97:
1b:ac:ed:96:2d:49:d0:4e:82:e6:ae:cd:aa:25:04:
8a:e3:d2:08:66:81:6f:17:52:47:ea:38:ef:0e:10:
45:05:e8:9e:c9:c6:d2:67:12:cf:f0:2e:e6:79:43:
5f:f1:78:a7:50:c3:4b:5b:78:ba:20:e7:da:38:0d:
48:41:3b:5c:2d:0c:7b:3f:89:bb:ee:33:dd:b6:c1:
56:58:1a:99:76:38:f7:26:00:f5:32:0f:aa:fb:a3:
e8:18:22:23:0a:26:9e:4b:3d:cf:cf:a1:9a:08:1a:
ae:a2:4f:2e:92:a0:ea:c0:2c:c1:7a:f7:9a:a8:97:
3b:ca:3c:f8:bc:2c:5e:70:77:93:fe:c2:78:c5:f3:
73:16:cc:26:95:9b:50:53:8e:b2:6b:b6:39:ef:bb:
b5:29:56:2b:bf:c4:41:8b:33:78:52:a9:c8:10:29:
cc:e0:b5:45:a6:17:bc:83:2c:56:1b:83:9d:11:6b:
61:5e:1d:d1:4c:15:7b:7f:10:e5:81:ed:4b:5b:6a:
c0:03:fe:85:f3:ce:45:05:1b:6b:81:3d:bf:48:ea:
c3:30:e8:86:40:ed:ed:69:83:ec:0b:95:47:de:2a:
60:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:68:35:81:3E:47:64:04:C9:9C:DA:38:C7:4A:B7:6C:E8:D8:0A:9C
X509v3 Authority Key Identifier:
keyid:36:B7:6D:DD:F8:E3:30:46:33:9E:86:56:52:14:4C:45:3B:60:57:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nrdt3fjjMEYznoZWUhRMRTtgV1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3c0c90-0a2f-4191-8418-caf9a20e586f/1/Nrdt3fjjMEYznoZWUhRMRTtgV1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:92:5c:63:02:2d:e2:b4:ca:8d:ed:36:49:0d:19:cc:cd:94:
69:f2:91:44:e6:15:12:2c:b5:1f:38:89:1c:6c:80:db:cf:eb:
66:4e:fa:fc:6b:34:fa:92:62:63:e0:c8:bc:e6:7a:6b:ce:d1:
66:dd:b5:9a:af:78:4d:52:c7:a3:df:63:29:eb:d3:4a:d9:15:
1f:04:f6:a6:95:43:b8:80:23:00:2d:19:1c:52:f3:45:22:5b:
ba:d8:55:21:9b:b8:e8:16:64:2f:28:d1:4e:00:dc:9a:f9:98:
e0:1d:d7:28:37:f8:3c:cb:72:df:c6:d3:e1:9a:5c:29:a2:32:
f5:68:ab:6c:46:83:1d:29:c4:b2:61:6a:aa:74:5b:b9:ba:f0:
7a:da:37:17:4e:ba:fc:39:26:ba:b0:a9:e3:b4:4d:6d:b3:38:
25:c3:1e:a3:f3:c0:1c:0e:a6:21:67:de:3d:be:d5:5f:81:ab:
d1:83:39:2d:29:55:ec:85:af:c1:0c:53:02:fd:3f:d7:80:5f:
e8:c5:8c:50:71:51:6d:6a:6b:96:e8:68:30:1e:b4:6c:08:80:
da:6d:12:30:a9:89:25:95:ea:f0:4d:c3:e7:9b:73:46:49:c6:
dc:07:93:b2:e5:04:5a:79:56:42:fe:63:66:50:fb:02:f8:b3:
c6:3b:dc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:53:42 2026 by rpki-client