Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
File: NufP3RKRk-IZw3ASHKFiUOQptYs.mft (raw, json)
Hash identifier: FhVcPpeyHfjxE5G//oJyTOV3Ig+MD95Q1DzSrpstSmo=
Subject key identifier: 32:A1:AB:51:11:6A:78:98:0E:4F:20:D8:EC:EF:14:CA:1C:1C:15:4A
Authority key identifier: 36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
Certificate issuer: /CN=36e7cfdd129193e219c370121ca16250e429b58b
Certificate serial: 01A0D4942C7E262553CC479BA388978A3811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
Manifest number: 145F
Signing time: Thu 24 Sep 2026 18:01:15 +0000
Manifest this update: Thu 24 Sep 2026 18:01:15 +0000
Manifest next update: Fri 25 Sep 2026 18:01:15 +0000
Files and hashes: 1: 43mZhZr44AIFJcFlEmjkEL_Qzjo.roa (hash: GwcZdDMV/aXs2RqaKWm3srdiDr2ZSWOLhYiN6xh8X/w=)
2: NufP3RKRk-IZw3ASHKFiUOQptYs.crl (hash: KE9QUIriMdSFjfPOEVbLfDCJlz/2PyojyQGiBUyQpEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:2c:7e:26:25:53:cc:47:9b:a3:88:97:8a:38:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e7cfdd129193e219c370121ca16250e429b58b
Validity
Not Before: Sep 24 18:01:15 2026 GMT
Not After : Sep 25 18:01:15 2026 GMT
Subject: CN=32a1ab51116a78980e4f20d8ecef14ca1c1c154a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:5d:68:da:11:ef:8c:e3:a4:87:9b:2e:72:
b7:d6:e1:c4:07:6d:8d:34:20:08:22:d3:52:e5:71:
3c:c8:9a:3c:63:b1:a7:ad:de:5e:4f:eb:34:19:63:
d1:bf:e1:cb:23:00:d3:41:a8:eb:7e:c5:d5:40:1a:
74:0b:fb:51:04:bd:12:83:ad:12:81:89:f7:fd:ef:
99:82:94:12:a7:83:ee:0b:e5:6b:c3:c8:97:4a:58:
0e:3b:34:d2:54:01:39:11:08:cb:c2:c0:8f:c4:2e:
44:c7:1f:c3:cb:72:63:0b:e4:b7:9f:a9:a7:b0:c1:
8e:5a:c8:66:11:6f:d0:55:ba:b7:b8:8d:a0:07:b0:
0f:1a:aa:d8:54:dd:65:db:15:79:67:90:b0:bb:e8:
e7:e3:69:92:ee:9d:e0:50:ec:04:10:4d:9f:13:f7:
8f:a0:0c:6a:e7:ee:d1:4b:21:99:df:2e:f9:65:2f:
31:e3:55:b4:48:a0:70:96:14:b9:82:8e:04:71:c2:
71:66:f3:08:99:fe:87:dd:2d:a1:c8:1e:3a:61:de:
e7:fa:2f:fc:07:ae:5c:69:14:2c:c8:8f:89:4d:cd:
f0:a0:4a:d6:5a:b9:e8:8b:7e:db:29:2b:2e:f7:d3:
ee:df:56:81:6e:d8:68:54:fb:e5:cd:c3:ee:c8:bb:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A1:AB:51:11:6A:78:98:0E:4F:20:D8:EC:EF:14:CA:1C:1C:15:4A
X509v3 Authority Key Identifier:
keyid:36:E7:CF:DD:12:91:93:E2:19:C3:70:12:1C:A1:62:50:E4:29:B5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NufP3RKRk-IZw3ASHKFiUOQptYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3555e0-9443-4e63-a89b-dd17bfd67cd3/1/NufP3RKRk-IZw3ASHKFiUOQptYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cf:da:14:d9:7e:f1:f0:46:07:a2:dd:6e:ff:76:44:43:8a:
56:84:16:c4:b3:74:ad:50:56:d0:4f:f2:a2:c8:6f:ae:75:ab:
2e:7f:2f:e3:23:4f:e8:91:1e:a4:8d:16:12:26:63:52:27:80:
ce:9f:96:b7:98:36:50:8d:67:41:39:5b:d7:2c:28:0c:db:13:
36:61:45:f5:ad:85:08:db:5d:f3:12:d6:8a:b6:79:0c:08:ed:
9f:64:ef:19:0d:a4:df:01:ed:f8:06:66:ae:db:c1:64:47:2e:
d7:90:d4:da:44:11:6e:6f:7a:e2:7e:da:a3:37:98:8e:da:79:
62:68:df:13:cb:ac:3c:4c:ce:89:7c:2b:6e:06:86:b9:2f:8b:
7e:8a:02:b6:04:f6:90:4b:7c:f0:0b:90:20:f8:b7:76:92:15:
ed:0a:aa:02:fc:33:ba:25:35:8e:fb:54:cd:71:09:39:d2:7a:
44:59:b5:45:68:cc:14:3d:36:bc:f2:eb:38:49:13:d2:ed:db:
fe:fa:97:0d:cf:4c:54:6c:72:97:45:d6:a1:c0:6e:08:0e:47:
68:bf:86:bd:59:29:e1:e6:45:bf:76:e8:83:a6:33:e7:b0:c8:
b2:df:08:07:6e:63:7b:8c:39:4a:72:4c:a0:29:d3:a9:6b:26:
fa:f9:a3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:00:46 2026 by rpki-client