Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
File: NutRbqkC2WStsqptytmh3A9bfv4.mft (raw, json)
Hash identifier: pW4rZJ4CEQOH5gDsgRZsJb+dJlN0s1Wdx5oZVNO3s8M=
Subject key identifier: 3E:B8:87:60:1B:77:4F:88:AA:E1:DC:E9:E9:C9:21:34:5E:2C:08:6F
Authority key identifier: 36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
Certificate issuer: /CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Certificate serial: 019F932434433CBCF1CC241BA08CAD2BEC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 08:00:50 +0000
Manifest this update: Fri 24 Jul 2026 08:00:50 +0000
Manifest next update: Sat 25 Jul 2026 08:00:50 +0000
Files and hashes: 1: NutRbqkC2WStsqptytmh3A9bfv4.crl (hash: foPE1ElMCWGBThBtB7EQhSvJjRMX4X7A8kKeu+lwRaU=)
2: YlXedLCyqhXrfS6xWyQ0uTsUI3U.roa (hash: F80TY0fOITpa/Bk+EYhgg41ne6mDHfXgDtH94lguM+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:34:43:3c:bc:f1:cc:24:1b:a0:8c:ad:2b:ec:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Validity
Not Before: Jul 24 08:00:50 2026 GMT
Not After : Jul 25 08:00:50 2026 GMT
Subject: CN=3eb887601b774f88aae1dce9e9c921345e2c086f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:f4:7e:5d:67:95:cb:28:ee:4e:72:bd:66:
cf:5d:88:93:46:30:ae:5f:33:f4:7a:54:05:05:2f:
2f:0d:2e:0d:62:37:36:33:12:7e:d8:62:3d:b5:51:
36:3c:fd:c8:89:32:89:41:be:60:e7:7f:e2:72:7e:
ab:84:1b:69:0e:1e:dd:16:2d:ae:03:2c:d6:e7:61:
05:66:9c:a2:9c:3c:60:7f:53:33:12:d8:08:20:ab:
81:a6:90:ec:46:d6:77:3d:23:cd:92:75:11:58:e9:
db:f6:ec:e5:97:d1:8f:15:4e:66:64:f6:3f:a4:1a:
83:2e:fc:db:14:c4:a2:0d:d4:0e:3d:9d:64:72:a9:
1c:38:9f:b0:c4:9a:cd:57:ca:34:5c:9b:57:22:fc:
6d:c8:54:7a:7f:f8:90:3e:23:f6:f0:b3:a0:90:6b:
f4:43:28:ff:1b:4c:48:4d:43:c2:0c:f4:c2:75:3a:
5d:27:11:ec:2c:f6:77:c8:60:96:d1:b8:76:2b:2e:
61:96:dd:7f:24:fa:63:87:31:e0:51:3b:d1:b6:9b:
23:9b:29:fc:6c:4f:d0:6a:b7:2e:8a:95:7d:06:55:
90:1c:29:09:fa:fb:68:59:a5:3f:56:ce:e3:23:81:
f0:62:3f:02:4f:73:fb:41:31:09:f4:9a:a5:ad:2a:
8d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B8:87:60:1B:77:4F:88:AA:E1:DC:E9:E9:C9:21:34:5E:2C:08:6F
X509v3 Authority Key Identifier:
keyid:36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:40:7b:c8:f5:ef:eb:9d:92:85:7e:0a:82:fe:c9:33:3a:e0:
e5:5f:c5:11:cd:84:a8:88:6f:7a:1b:ae:22:d4:df:e6:c6:cc:
0f:6d:0e:9f:b3:5a:9b:2e:47:8b:0b:92:b5:ca:a8:9e:18:56:
fc:44:aa:9e:f4:58:db:24:d8:ae:a6:c9:55:14:17:8c:5a:85:
dc:79:40:54:a7:ac:5e:c8:bb:58:8e:e4:6b:29:c0:b1:dc:2c:
21:2c:81:05:27:b6:a1:d3:66:44:aa:0f:10:98:4b:12:15:1c:
b0:bb:26:84:b3:5f:09:95:3e:f5:a1:08:e7:50:7a:ed:58:a5:
16:e3:dc:37:39:75:9e:a8:f6:de:90:33:57:63:09:5f:a6:77:
59:e4:d8:c8:e2:7f:b6:46:dd:de:fd:c5:58:50:20:dc:03:f7:
74:d5:01:c2:12:dd:56:0f:ed:36:5a:fc:2b:f8:57:42:ec:59:
a8:85:51:59:3c:1b:b8:55:0e:19:ea:b7:4d:99:c4:22:a2:c6:
94:cb:23:04:58:de:09:3b:9b:3e:41:e3:38:dc:fc:6a:04:7f:
b8:00:e0:ad:26:f3:23:df:41:9c:c1:a7:fc:ac:36:8f:78:34:
62:fe:d7:4c:b5:b4:2e:e2:0f:f5:5d:09:5c:ad:34:87:3b:66:
84:f1:4b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:15 2026 by rpki-client