Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
File: NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft (raw, json)
Hash identifier: ozGqv/reIHEt11s1jReq9RNyHI3Fpw3vfgai601O6ns=
Subject key identifier: 13:B7:2A:F5:52:72:EF:96:1A:C9:D8:09:A3:A6:BD:05:07:EE:C9:3B
Authority key identifier: 36:59:E4:47:FC:9D:C8:9E:D9:A4:95:17:13:B4:38:AF:3C:0A:49:B6
Certificate issuer: /CN=3659e447fc9dc89ed9a4951713b438af3c0a49b6
Certificate serial: 01A1347E970FA6936A8CA8A672035CD752CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
Manifest number: 0119
Signing time: Tue 13 Oct 2026 09:01:13 +0000
Manifest this update: Tue 13 Oct 2026 09:01:13 +0000
Manifest next update: Wed 14 Oct 2026 09:01:13 +0000
Files and hashes: 1: NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.crl (hash: sx4axxi6fbljGMlR7jjF+NqLQQCaWQrY6lnllebyfJU=)
2: WmmN1DdlCh77kpHlvKNTzADRn-U.asa (hash: T1JY/s5t5/6ecgMyVxHLaTo0nrOIsGOVd3OH5s3qJ3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7e:97:0f:a6:93:6a:8c:a8:a6:72:03:5c:d7:52:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3659e447fc9dc89ed9a4951713b438af3c0a49b6
Validity
Not Before: Oct 13 09:01:13 2026 GMT
Not After : Oct 14 09:01:13 2026 GMT
Subject: CN=13b72af55272ef961ac9d809a3a6bd0507eec93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:08:99:f8:44:b9:18:f1:d1:0d:69:9d:8d:
0d:de:65:13:0c:e1:24:f9:01:8c:5e:a4:53:84:48:
65:50:15:ed:49:82:73:86:9b:6d:91:51:76:41:1f:
a7:8a:af:df:9c:88:9a:a4:a3:85:2f:2b:2c:70:95:
c6:0d:11:86:d2:12:6f:0e:9a:f6:ad:98:bf:86:9d:
1e:a2:41:9d:34:81:2f:43:be:eb:4f:74:1f:11:0f:
98:67:25:b2:cc:e2:e5:d4:77:42:02:56:4d:60:6c:
c9:ff:35:1d:e0:b1:2f:d2:f8:8e:5a:cc:28:1e:ba:
f5:46:27:12:d1:fe:bb:f2:76:77:51:4c:c0:6e:5f:
e5:44:04:50:e2:28:4a:4a:87:c4:a7:a1:2d:f1:8b:
39:e9:90:46:dd:d2:fd:2a:34:39:73:5d:55:ea:3d:
ea:b8:36:36:ae:1d:15:c2:31:17:c9:77:e3:9c:37:
35:94:1f:3e:99:83:8a:88:82:b6:78:69:41:27:1f:
de:d9:31:34:0b:65:a1:7d:47:26:b7:6c:6c:20:db:
a0:d9:ba:3b:96:de:20:e0:ea:95:14:61:ae:43:16:
9a:1d:ad:20:25:8c:b8:5d:18:9a:f2:88:7e:27:84:
ad:5f:80:16:27:c7:5b:51:5b:d3:88:45:29:96:10:
a9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B7:2A:F5:52:72:EF:96:1A:C9:D8:09:A3:A6:BD:05:07:EE:C9:3B
X509v3 Authority Key Identifier:
keyid:36:59:E4:47:FC:9D:C8:9E:D9:A4:95:17:13:B4:38:AF:3C:0A:49:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:87:3a:d6:5c:e0:5e:9c:6d:8e:82:97:ee:5c:1c:63:4d:f9:
80:20:7b:2d:10:ba:df:58:3f:49:f5:2b:ae:c4:13:af:a0:d5:
23:9b:7c:eb:64:29:30:87:90:07:13:eb:21:b0:2b:25:5a:64:
54:75:57:e3:2e:78:9a:7f:3c:95:07:cf:d3:22:7f:e8:6a:3b:
6d:97:c0:45:60:68:39:88:00:c2:ac:3f:30:8d:8d:f7:27:8a:
38:1c:e9:78:de:97:5c:99:61:e4:87:a5:4e:7b:8d:c0:21:27:
bf:4f:8f:30:e5:3d:8d:6e:d9:fc:5e:ba:12:a8:33:47:a1:b0:
c2:fd:d3:86:b8:96:0a:29:e7:2e:fa:1d:45:22:90:0a:6f:8c:
f4:af:18:80:e0:27:ac:93:bf:ca:42:b8:b8:71:17:3b:08:0d:
5f:d8:76:a4:32:a4:a6:bf:f9:ae:5f:dc:47:a1:de:77:d3:95:
18:dd:7d:a8:ca:d3:bb:49:e7:03:b3:74:2f:78:fc:88:74:34:
55:a4:05:d4:75:c7:ba:fe:78:d5:2e:37:af:f2:b5:67:cc:01:
32:59:a6:c3:a4:f2:10:59:3d:7d:43:a5:53:eb:8e:d9:51:0d:
b8:05:87:53:74:cb:2b:3b:d7:d0:49:b8:26:3a:a2:aa:d1:59:
38:3d:8c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:49:58 2026 by rpki-client