Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
File: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json)
Hash identifier: poPNdbF19deW0r9ISY95xeRa5DBEfWek7BWNiEhtKfI=
Subject key identifier: 15:56:E5:56:B5:FE:60:F7:82:89:2A:C5:44:BE:94:F5:90:63:8C:9B
Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
Certificate issuer: /CN=36be697c8489f482220f5c4064babe4c83c419d6
Certificate serial: 01A107A5DE21F07FC3458EAA5CB460E503C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
Manifest number: 0F17
Signing time: Sun 04 Oct 2026 16:01:12 +0000
Manifest this update: Sun 04 Oct 2026 16:01:12 +0000
Manifest next update: Mon 05 Oct 2026 16:01:12 +0000
Files and hashes: 1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: 6b3jdvtgJA5XBm2Ny9j69Pmvuk+dt45jIt/FONYOb18=)
2: V7ehPHGc-IPjCptiIqNGOp1gBiE.roa (hash: J/1jCxZxkRbRLNpc2zFMuakcbWm535PWrbp1jxC/YvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:a5:de:21:f0:7f:c3:45:8e:aa:5c:b4:60:e5:03:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6
Validity
Not Before: Oct 4 16:01:12 2026 GMT
Not After : Oct 5 16:01:12 2026 GMT
Subject: CN=1556e556b5fe60f782892ac544be94f590638c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:b6:1d:7a:16:ed:6b:c1:fd:c6:40:f8:7e:
ae:87:2f:f0:1c:20:ca:ea:f3:11:cc:a3:f4:98:0f:
e7:d6:6b:81:55:27:cd:be:c8:3e:6e:4d:ea:c8:e0:
c2:22:6c:1c:05:62:fb:a8:a6:80:1d:da:76:97:f0:
cc:1e:35:a7:4f:0c:fd:1b:c2:27:73:dd:57:6d:fb:
3b:63:23:62:03:72:00:24:07:7f:ca:e4:80:62:0f:
cb:45:79:de:f6:ba:d8:e5:c8:2d:b4:dd:9f:c1:2c:
c0:07:89:7e:a2:03:d2:84:ca:3c:7b:61:66:4c:89:
ea:74:2f:80:f3:55:44:60:40:09:68:59:13:d8:99:
4f:7f:72:57:28:10:9f:5d:e2:8a:11:a7:59:8f:5e:
cd:d7:92:e6:21:43:6a:51:4c:61:1f:4c:68:0f:96:
75:47:01:cd:22:60:09:33:6d:74:70:9c:9f:ed:94:
b9:62:e6:b0:05:ca:d2:6f:1d:54:8e:8b:8e:e6:e8:
db:c1:33:1e:ce:39:d4:8d:f9:74:57:da:55:93:7f:
34:42:14:3c:0a:67:f5:75:43:6e:6e:66:5d:09:37:
da:74:16:bf:5c:80:5e:e8:6d:b5:d7:09:7b:2d:1b:
16:48:1e:85:f3:6e:16:8d:ad:26:1f:c1:f8:65:0e:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:56:E5:56:B5:FE:60:F7:82:89:2A:C5:44:BE:94:F5:90:63:8C:9B
X509v3 Authority Key Identifier:
keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fc:a4:a8:72:5d:24:92:fe:e1:c4:b2:8d:5d:51:35:c5:80:
2f:c4:64:c5:da:ad:b6:ac:19:20:9a:72:d8:52:a9:bf:87:f1:
0a:19:3c:fb:b9:4f:05:b9:32:fd:5b:92:8f:51:5f:3c:33:2f:
e9:c3:70:72:cf:a1:4e:25:ea:51:c3:9d:b3:68:71:65:4f:45:
69:4a:88:e5:fc:25:b6:6e:20:12:ea:d1:b9:3c:18:84:6a:fa:
67:28:d8:a4:7b:59:47:5f:d9:34:7e:54:d4:75:d0:63:68:7a:
2d:f3:3c:1a:ba:17:36:4e:8b:9b:6a:bb:f2:2a:f5:39:5f:a4:
7c:59:2d:5e:07:0a:c0:0b:a7:b3:53:38:bf:04:ac:25:64:47:
d8:df:35:d7:f5:3f:8d:05:78:0f:26:e0:3f:4c:29:99:a8:de:
6a:cf:26:63:c2:ee:cd:5e:63:e6:b2:53:dd:be:ac:58:f9:eb:
a8:2e:7d:56:6a:ff:64:72:e8:7b:cb:f9:46:71:25:1c:e5:9c:
98:50:cb:d6:3e:62:0b:7a:d3:9b:d5:5d:2a:2d:d8:29:28:f8:
0b:c9:ee:7f:0a:84:99:06:d3:c8:fb:af:08:60:46:e7:73:a8:
d5:4e:86:7e:5f:99:f3:fd:9c:46:0d:2d:50:93:42:a3:e1:45:
5e:65:0e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 02:39:36 2026 by rpki-client