Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: pTKg2aM3RfOj8Sra6olfQC38dsIPCqfad6tLqZE3T2Q=
Subject key identifier: 6C:B6:34:FC:CB:4F:97:64:A2:02:04:6D:7F:4D:5A:4E:16:4C:0D:23
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 019F92112953405A6D4975AA9D81DB35568C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 13B8
Signing time: Fri 24 Jul 2026 03:00:25 +0000
Manifest this update: Fri 24 Jul 2026 03:00:25 +0000
Manifest next update: Sat 25 Jul 2026 03:00:25 +0000
Files and hashes: 1: 43mZhZr44AIFJcFlEmjkEL_Qzjo.roa (hash: GwcZdDMV/aXs2RqaKWm3srdiDr2ZSWOLhYiN6xh8X/w=)
2: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: noreERbFC6ztZJ9yutZydxofIWTPM2CVVgbgUBPNeKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:29:53:40:5a:6d:49:75:aa:9d:81:db:35:56:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: Jul 24 03:00:25 2026 GMT
Not After : Jul 25 03:00:25 2026 GMT
Subject: CN=6cb634fccb4f9764a202046d7f4d5a4e164c0d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c2:f4:4c:76:cf:07:e0:2f:2c:cd:7e:3d:5a:
d2:0d:4b:df:fb:5a:22:a4:ec:3d:7c:d9:1a:7e:8a:
8a:a6:ad:6e:7d:46:34:45:23:86:d6:77:1a:91:f8:
cd:ea:b7:b3:e8:5c:c3:bf:06:96:ac:d8:45:49:43:
1d:15:1a:8c:5d:84:73:dc:94:93:85:9b:9e:a4:ee:
ab:5f:82:f5:7f:e6:f7:fa:9a:0e:72:f2:22:b6:d7:
19:7b:86:76:25:c2:a6:2d:09:8c:8a:53:fb:b5:79:
03:19:bd:e3:cd:58:53:6b:d9:cc:a4:1e:37:9f:2e:
4b:97:40:c7:a6:8a:84:5e:8b:25:01:00:a6:9b:f9:
14:c2:7c:b5:a3:c6:eb:7d:76:61:4e:f8:c9:d0:6e:
47:ef:36:1f:d8:8a:71:04:1c:5e:8f:de:35:e1:a4:
7b:41:02:8e:e6:09:fb:b4:c8:b0:9e:6d:04:73:35:
74:4b:74:18:42:c5:2c:f4:bc:dc:45:8b:0a:34:05:
90:56:55:e4:14:11:1c:3c:67:bf:e6:2d:3e:3c:d3:
c7:cf:45:f6:41:d6:89:82:eb:1e:ce:c1:ff:c1:23:
47:33:74:a3:9b:92:17:7c:b7:72:5e:f4:7e:96:d6:
20:bb:f3:d4:fd:ea:ef:4e:a8:84:56:12:65:b7:94:
83:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B6:34:FC:CB:4F:97:64:A2:02:04:6D:7F:4D:5A:4E:16:4C:0D:23
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e7:23:bd:ac:a2:d3:f0:7f:71:bc:f6:ac:37:d5:4a:43:10:
cf:eb:d6:c0:a9:a3:18:81:e7:13:95:96:8e:da:9a:09:ee:93:
a5:11:03:e4:4e:b9:15:be:b7:44:6f:38:20:16:7a:1d:36:bc:
1b:d5:74:15:9c:67:4c:a4:0c:9f:0b:c8:55:51:fa:ce:27:9e:
1a:90:2f:3b:04:8e:fb:c1:83:99:5e:55:1c:6b:11:e6:96:51:
49:5f:3a:5a:82:ef:42:2e:af:c7:83:7d:8f:50:4b:53:08:3b:
6a:cf:a2:d5:1d:19:8b:0a:c5:d9:86:08:7c:ef:4c:3d:05:dd:
e6:8c:59:b8:38:78:cb:2c:66:da:f8:93:42:20:f1:9a:74:6e:
15:8f:41:84:3c:74:7c:36:df:40:96:d2:f7:be:40:b0:3e:2f:
38:4b:9d:f1:0d:4f:11:4e:49:48:b1:16:e7:a6:96:54:7f:68:
27:c0:a2:08:07:ab:3c:48:c3:15:92:d3:b8:e2:9d:07:91:e3:
13:4d:0d:93:b2:f6:35:69:fa:0f:65:d5:23:13:0a:3a:93:79:
6d:95:59:5b:1f:ad:b6:03:e4:20:7d:db:26:45:45:32:c6:66:
39:80:ce:96:65:bd:2e:24:9a:b9:8e:77:8e:e7:c4:ea:35:d9:
02:6a:68:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:38 2026 by rpki-client