Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
File: NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft (raw, json)
Hash identifier: WGNDGdsWCgYekDRKZl+a3vgH9c1/KfBuTRSUeV7a0M4=
Subject key identifier: BF:DF:CE:7A:1C:CB:DF:90:2F:27:31:BD:0C:18:D3:70:56:58:11:14
Authority key identifier: 36:59:E4:47:FC:9D:C8:9E:D9:A4:95:17:13:B4:38:AF:3C:0A:49:B6
Certificate issuer: /CN=3659e447fc9dc89ed9a4951713b438af3c0a49b6
Certificate serial: 019F8F7EF1DADB85844F6B6D8EEC904586FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:29 +0000
Manifest this update: Thu 23 Jul 2026 15:01:29 +0000
Manifest next update: Fri 24 Jul 2026 15:01:29 +0000
Files and hashes: 1: NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.crl (hash: pup7oaXCFhTQkY7qKyQQIbiSz1Skf1Vazlb2P29OcEI=)
2: WmmN1DdlCh77kpHlvKNTzADRn-U.asa (hash: T1JY/s5t5/6ecgMyVxHLaTo0nrOIsGOVd3OH5s3qJ3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:f1:da:db:85:84:4f:6b:6d:8e:ec:90:45:86:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3659e447fc9dc89ed9a4951713b438af3c0a49b6
Validity
Not Before: Jul 23 15:01:29 2026 GMT
Not After : Jul 24 15:01:29 2026 GMT
Subject: CN=bfdfce7a1ccbdf902f2731bd0c18d37056581114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:26:2e:76:9d:a2:c7:df:35:78:5e:26:e0:9d:
2d:75:ef:ce:97:da:c0:78:a1:5b:03:ad:dc:02:59:
b7:78:61:15:0d:9e:84:5d:5a:4d:01:7e:a1:9f:11:
2e:b1:ff:24:e5:48:69:41:34:4b:4e:3b:6e:85:76:
bc:73:53:94:74:49:f1:4b:41:5c:8e:93:2a:34:67:
33:a2:1b:bb:57:cc:fb:ea:1b:43:8f:c1:6a:5a:86:
50:72:da:3f:bc:6b:c7:f4:4e:6b:9d:14:f9:27:fa:
61:fa:18:39:f6:eb:d5:1f:3f:6c:75:e2:80:aa:0f:
bc:99:6e:bb:11:58:71:2e:03:53:e8:e7:1a:b6:c5:
11:c1:a1:bc:2d:ef:51:a6:53:73:c0:6b:b4:e9:7a:
7f:22:7a:fb:d0:b9:9d:8e:a4:8c:34:ab:fd:5d:f3:
5e:b6:1d:b7:8a:dc:a8:75:0e:62:bb:fc:06:22:0c:
62:e7:54:fd:37:c8:b5:6d:9f:6d:ef:63:09:11:12:
1c:d6:6b:50:34:e7:95:e4:02:89:20:f8:ad:f6:b8:
83:80:10:18:e7:9a:01:1b:5a:e5:d3:9d:6e:fd:23:
53:1b:fa:b3:d4:25:36:bd:50:b8:81:0b:cf:d3:74:
b6:aa:2e:06:6d:84:37:47:61:8c:0f:bd:27:1e:26:
2e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DF:CE:7A:1C:CB:DF:90:2F:27:31:BD:0C:18:D3:70:56:58:11:14
X509v3 Authority Key Identifier:
keyid:36:59:E4:47:FC:9D:C8:9E:D9:A4:95:17:13:B4:38:AF:3C:0A:49:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5855da-1cb4-4325-903c-7e021e92ba38/1/NlnkR_ydyJ7ZpJUXE7Q4rzwKSbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:96:9f:b0:ff:49:d5:fb:a7:49:2f:8a:eb:88:b7:23:68:ba:
10:5f:24:fb:f6:b7:4a:59:2b:00:0b:0b:0e:46:6d:94:e2:da:
99:b8:eb:fb:e5:a0:8d:b9:15:eb:97:ea:a6:a3:95:fa:e7:eb:
6c:58:1d:e0:73:71:67:7f:bb:5f:ef:cb:63:78:a3:03:c8:39:
44:d5:05:93:bf:e6:72:dd:f1:31:7a:8f:b0:2e:b8:ad:2c:19:
95:15:a0:7b:80:8b:c5:bc:f3:56:1e:b7:1f:13:6e:29:fd:a7:
41:31:f7:34:fe:44:66:da:1e:8b:71:eb:e3:df:de:78:2c:6d:
da:98:67:a5:82:d1:76:ef:da:5b:ce:e2:8d:41:19:0a:b2:d2:
ae:bb:66:a5:9a:e6:c4:40:fd:0b:c5:75:63:07:95:90:1b:8b:
67:a8:45:4a:ef:7b:76:cb:27:93:a1:95:b3:c2:af:c8:52:ec:
fe:89:a3:4a:1c:67:f4:7b:66:e0:f2:2d:b6:62:33:29:12:4d:
95:37:ba:1d:35:32:90:02:89:51:af:33:26:e1:ec:22:d6:d5:
0e:7e:21:5b:fd:c1:66:97:c4:bf:2d:69:05:a3:ed:7e:5d:4c:
55:7f:aa:54:0b:7a:8e:d0:80:0b:3e:e7:08:b2:ba:01:e4:71:
5b:7d:9c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:01:02 2026 by rpki-client