Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
File: Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json)
Hash identifier: 0K1JRg8PddBW8NTGHXAO4IBOms7VtrId7rWLlirkGSY=
Subject key identifier: 13:D6:D8:FF:34:08:75:20:CE:33:6B:8A:DE:E2:37:F7:26:FC:21:CC
Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Certificate serial: 01A0CE9192E7EC5C2177A943B90F40D55EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
Manifest number: 0DB6
Signing time: Wed 23 Sep 2026 14:00:41 +0000
Manifest this update: Wed 23 Sep 2026 14:00:41 +0000
Manifest next update: Thu 24 Sep 2026 14:00:41 +0000
Files and hashes: 1: HTK96uRhaCPEIKPa_uJkVUtYSro.roa (hash: YJYJVj428OJsUTfvfAdi4uBETofBiuE9K+NdS6ELexs=)
2: JQ2CDROzVuWPqXgateu16umo7lg.roa (hash: hQj8e4a5l+cytVF32sZTUFxC34J67XezC9sSXBkuvQg=)
3: Nd50iVrPYors-OE3V9sF40Sl2Ws.roa (hash: 8W9R9422ra+klJo6tlOJASq6q8gfKHZchw1aKhxM8nI=)
4: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: /k+a2zTxmM1A8udJrjxkniXR3BME0pxxSjnzw8A4CTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:92:e7:ec:5c:21:77:a9:43:b9:0f:40:d5:5e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Validity
Not Before: Sep 23 14:00:41 2026 GMT
Not After : Sep 24 14:00:41 2026 GMT
Subject: CN=13d6d8ff34087520ce336b8adee237f726fc21cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:42:1f:98:8e:f6:b6:a7:a6:f3:ff:cf:bb:
53:18:96:66:6a:00:e5:3e:2e:83:c9:8d:b7:bc:b5:
c7:0f:6a:9d:50:77:e7:25:a9:c1:e5:64:9e:83:b3:
ad:9c:10:7e:26:fe:db:0d:51:12:ce:03:78:1b:93:
03:a3:96:9a:11:05:5e:eb:8d:63:ed:8d:07:e9:33:
d3:f1:d2:33:23:4c:ea:83:e2:8a:eb:29:b8:ae:b2:
c9:ae:44:72:ec:2b:77:95:7c:24:d7:e3:ff:e0:8d:
ae:0d:65:fe:a1:f4:91:30:64:7a:83:ae:be:c9:b4:
73:ae:8f:66:08:af:1e:41:5f:ec:1d:f9:d8:39:9c:
3b:2d:82:f3:54:8f:1f:63:40:99:0f:89:15:02:be:
44:64:cb:5e:cd:b7:08:5c:86:45:80:e9:14:20:67:
83:f4:0a:d5:e6:a6:d3:38:bc:bf:8f:76:0c:b6:a0:
0f:02:c1:22:4c:f9:f4:be:70:9e:12:14:ad:69:c0:
54:94:0c:30:ca:38:d8:e6:69:3c:98:7b:71:f5:b2:
e9:df:c4:86:32:b5:c0:3d:fd:01:ff:b8:ab:01:91:
1c:5e:9f:53:ca:9a:f5:c6:16:dd:f1:fd:54:ca:d5:
fd:9d:47:aa:29:41:a9:00:46:e0:dc:e1:3d:d1:7f:
2d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D6:D8:FF:34:08:75:20:CE:33:6B:8A:DE:E2:37:F7:26:FC:21:CC
X509v3 Authority Key Identifier:
keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:77:89:ae:a8:49:46:02:ba:a0:ef:d6:ef:54:68:50:b1:d1:
55:dd:5f:36:4f:59:2e:43:f4:e7:82:94:f2:37:2d:7d:ec:f1:
9f:ae:c1:8d:77:c3:a2:bc:75:68:a6:ba:78:ba:a8:5e:62:c7:
44:4f:c9:df:c4:c1:4d:79:00:ea:fa:4d:a2:e9:7a:ee:e7:04:
2b:f5:fc:d8:4e:cb:be:9d:cf:83:74:e6:9f:c6:5f:46:5a:5c:
61:da:7b:e2:da:bd:d5:f8:86:49:a1:ee:f8:67:3a:eb:38:1b:
79:d6:26:f9:d3:fb:c4:a0:82:1b:e7:40:37:2f:90:cc:b8:bf:
ad:bd:f7:c7:12:f2:6e:c3:b7:c6:36:03:31:e5:79:9c:25:3f:
14:9b:7f:8d:43:aa:c9:c1:48:63:08:ac:1c:24:07:84:da:14:
bb:0e:14:bb:3f:f6:7b:70:41:27:7f:ac:bd:44:cc:28:e4:ae:
d6:de:66:cd:8a:19:b2:f5:58:77:76:14:17:30:7e:f6:bd:81:
15:d9:28:59:21:a6:96:89:16:2d:2c:f1:c3:a3:3e:90:f7:c3:
19:f1:17:90:33:0e:9c:0b:76:2b:6e:a9:4d:5d:73:90:d5:a8:
70:46:3b:54:48:94:71:ff:ab:f3:b7:b9:67:f7:ed:d0:fb:26:
3e:66:63:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:50:05 2026 by rpki-client