Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: XM/kMqAju3Gbr/BiHAl8gZGzgCl4Nusv0iSsa4a5VAo=
Subject key identifier: 59:EC:B4:7A:E5:28:55:E7:AE:F3:8B:AD:5C:7C:83:EE:A0:B9:A2:67
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 01A0D2A5CF38DB18917C2786CE7DD61B1F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 145E
Signing time: Thu 24 Sep 2026 09:01:16 +0000
Manifest this update: Thu 24 Sep 2026 09:01:16 +0000
Manifest next update: Fri 25 Sep 2026 09:01:16 +0000
Files and hashes: 1: 43mZhZr44AIFJcFlEmjkEL_Qzjo.roa (hash: GwcZdDMV/aXs2RqaKWm3srdiDr2ZSWOLhYiN6xh8X/w=)
2: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: 6QCWIyxqcQmAV8XL+68DJnBWQHkkPbEMMPomeQ+WK10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:cf:38:db:18:91:7c:27:86:ce:7d:d6:1b:1f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: Sep 24 09:01:16 2026 GMT
Not After : Sep 25 09:01:16 2026 GMT
Subject: CN=59ecb47ae52855e7aef38bad5c7c83eea0b9a267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:25:66:57:f3:e6:ed:ff:95:db:24:4c:23:
10:8f:5c:1a:27:23:0c:90:ed:a5:fa:08:ba:8b:6e:
e9:1c:9d:9c:90:fb:72:24:07:d6:13:13:37:3a:19:
b9:94:3d:01:82:ca:ec:a2:5b:07:53:b9:57:bc:41:
e0:76:24:0c:f5:ec:19:55:e1:d9:88:8d:c9:de:99:
81:02:66:d8:d1:c1:e1:46:e7:65:69:ec:5c:53:da:
e5:08:d3:4e:23:61:7e:7a:84:7b:64:9e:1b:fd:fc:
6c:7e:f1:ab:91:e9:bb:56:59:7a:17:78:c9:ed:28:
6e:6d:e0:80:b3:e7:63:6b:bd:cb:ae:7e:c3:c9:0b:
69:de:35:cc:8d:ac:4f:fc:fc:00:81:65:a4:7a:a1:
70:83:3d:8b:c8:4c:f4:c7:e4:f5:c6:f5:f7:99:b9:
11:b2:e6:8f:d1:d6:64:6a:1d:4f:20:6a:a5:71:ba:
1e:42:ff:2e:fc:1d:75:0b:7a:d4:0e:b0:12:48:5f:
32:52:0a:fe:42:2d:05:b2:80:a9:cc:c4:c0:e7:9e:
12:b3:2c:fc:8b:2a:5d:5c:c7:35:a6:06:07:93:16:
62:00:c5:0a:63:bb:3b:3a:05:a1:7c:12:2f:17:63:
74:46:5f:86:84:47:d6:cc:ca:88:9f:83:7e:d0:aa:
4c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EC:B4:7A:E5:28:55:E7:AE:F3:8B:AD:5C:7C:83:EE:A0:B9:A2:67
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e7:79:a6:10:06:ef:dc:da:55:56:16:57:7d:d8:6e:8b:e7:
9f:c7:30:b4:ff:3c:95:8f:ce:63:9f:26:73:69:3c:e6:a6:23:
9d:68:9c:72:ac:52:06:c7:fb:52:a8:55:40:a9:2b:86:55:73:
8b:d9:e0:34:d2:e7:f8:fb:f1:80:93:ed:e4:3c:e6:b0:72:d6:
73:c3:0f:3d:0d:ec:b0:61:99:f4:d3:bd:63:02:eb:27:ae:0d:
01:3f:37:e8:9d:35:32:3f:4b:f7:44:16:75:d3:99:80:3c:35:
b6:cd:5b:2c:cf:95:3c:82:e8:de:b5:c8:27:87:8a:08:f6:7a:
1c:ce:6c:6c:28:d5:59:48:6f:f4:2d:69:ae:15:01:1a:1d:93:
12:1d:82:2d:f1:8b:d3:b5:86:fb:b4:91:d0:87:87:11:1c:35:
fd:3f:17:9a:72:b5:22:71:dd:a6:55:bd:db:3e:45:db:3f:cd:
a8:82:16:e0:c7:b8:10:e4:4d:be:c4:06:ef:99:a9:a8:0b:13:
f5:02:28:92:99:65:4e:84:19:b7:48:0e:ed:7e:b7:88:c6:d4:
e9:db:d9:ec:ac:c5:8a:a7:2f:d0:14:b8:0f:a3:3d:01:e6:1b:
e2:d6:fb:55:13:2b:7a:32:04:9d:ba:fa:e4:28:49:7d:23:74:
cb:e1:77:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:12:40 2026 by rpki-client