Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: hTwuHPtT7kr0GmMU+fSdLRcgdcbd5wMrsfltRdHPmmc=
Subject key identifier: A6:D0:02:EA:F7:3F:B5:70:48:CC:92:DC:B1:03:83:55:F6:DC:43:9B
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 019E1F47CC28A8B5231920F3DDE3EE80A3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 12F8
Signing time: Wed 13 May 2026 03:00:59 +0000
Manifest this update: Wed 13 May 2026 03:00:59 +0000
Manifest next update: Thu 14 May 2026 03:00:59 +0000
Files and hashes: 1: 43mZhZr44AIFJcFlEmjkEL_Qzjo.roa (hash: GwcZdDMV/aXs2RqaKWm3srdiDr2ZSWOLhYiN6xh8X/w=)
2: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: YheekcoSlpfmfk8U0CUVzeWMpwa7ZXiw9VAGGZqo+rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:cc:28:a8:b5:23:19:20:f3:dd:e3:ee:80:a3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: May 13 03:00:59 2026 GMT
Not After : May 14 03:00:59 2026 GMT
Subject: CN=a6d002eaf73fb57048cc92dcb1038355f6dc439b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:d4:0b:80:32:42:4d:38:83:c1:e8:b9:25:
2d:c1:36:1a:2f:f1:4b:5b:68:84:d0:c3:8d:d8:95:
5a:8b:13:1e:c1:8f:d6:ee:2d:40:ce:63:2c:04:6b:
9d:11:7d:c9:d5:12:54:ad:a6:36:06:8c:25:ec:cd:
55:8a:c8:e3:37:33:82:a8:64:43:de:d6:5b:43:f6:
95:4f:25:fb:9c:ed:1f:81:e6:5a:d1:a4:7b:51:c1:
94:d2:33:72:eb:d3:60:59:a4:75:f9:e7:05:84:4f:
a6:46:6f:6b:50:7a:f7:84:9b:f3:cd:5d:59:9a:6a:
18:90:1e:a5:19:43:0c:0d:98:88:6a:06:61:c8:e2:
d2:8b:49:88:bc:9d:cd:d9:5f:8f:c4:44:5b:39:a0:
af:0d:52:fd:5a:b0:4b:93:2c:0d:4d:d1:7d:cd:82:
b0:ab:43:7e:f4:9f:a5:0b:5b:89:57:72:58:ea:d5:
b9:4d:b5:a8:dd:74:d3:07:dc:23:a2:d6:34:95:f2:
7f:11:3d:70:94:88:37:3b:71:d7:3d:01:4e:fa:ca:
71:d4:e4:29:db:7d:d1:9d:73:95:12:e4:21:4c:d9:
e5:d5:e5:37:e7:f7:14:06:e1:4b:eb:51:32:92:ed:
5b:ad:e7:6c:1c:e6:99:f9:7f:19:55:24:1b:a9:c6:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D0:02:EA:F7:3F:B5:70:48:CC:92:DC:B1:03:83:55:F6:DC:43:9B
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ba:85:b3:cf:31:d0:e1:4b:4e:fe:e0:b4:07:24:22:09:b2:
20:6b:30:f9:9b:c4:e3:71:a6:5d:39:a9:b7:e7:14:b0:4a:09:
54:f8:dc:7c:fd:e5:7f:93:ef:81:85:6f:e9:70:96:11:4d:80:
00:de:c9:69:8f:02:e9:12:65:fd:83:4c:d3:38:c5:93:3f:5d:
3b:9b:08:ee:50:7c:a0:b0:ef:32:70:00:9f:4a:b4:d8:c9:3b:
fa:78:a3:39:65:5c:b1:5d:6c:e5:0d:ea:62:7c:1b:a3:80:e1:
0c:80:47:12:77:65:ca:09:8e:47:cf:6e:07:ea:42:ac:2c:c0:
86:a1:15:fa:a4:13:5d:22:78:6f:35:02:eb:eb:d3:4a:23:e3:
50:51:54:e5:f3:da:88:1d:20:7c:bf:58:c7:d8:73:68:90:7c:
4f:67:8a:5b:1c:3e:ed:4c:98:62:35:47:e9:c8:28:d5:30:6f:
67:3b:1b:27:90:51:94:00:d2:a5:15:5a:05:7c:a0:6e:64:de:
15:9d:98:a5:02:d2:6b:ac:af:79:12:85:0f:3b:2d:41:61:46:
e1:88:a7:c4:d2:3f:55:ba:09:4d:10:cc:90:0b:2d:17:30:8c:
e7:b3:2f:c3:18:a3:83:45:d5:54:8c:74:61:23:c9:cc:c6:83:
62:18:05:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:32:17 2026 by rpki-client