Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
File: NutRbqkC2WStsqptytmh3A9bfv4.mft (raw, json)
Hash identifier: EhxjglzNDzJHk2/bNc7iYlh9iSANIXU8LRCEeW0x5cQ=
Subject key identifier: CE:F6:6B:9A:99:C1:7C:C2:23:4E:34:4E:1D:AA:74:73:49:07:BA:F2
Authority key identifier: 36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
Certificate issuer: /CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Certificate serial: 01A0F67B7E01D0AD95700C3B115438DF6A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
Manifest number: 1A11
Signing time: Thu 01 Oct 2026 08:01:23 +0000
Manifest this update: Thu 01 Oct 2026 08:01:23 +0000
Manifest next update: Fri 02 Oct 2026 08:01:23 +0000
Files and hashes: 1: NutRbqkC2WStsqptytmh3A9bfv4.crl (hash: e94f+PI7FQfOBxJDHdUfSbmlPMcyZgA5bl/R0fypqBk=)
2: YlXedLCyqhXrfS6xWyQ0uTsUI3U.roa (hash: F80TY0fOITpa/Bk+EYhgg41ne6mDHfXgDtH94lguM+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:7b:7e:01:d0:ad:95:70:0c:3b:11:54:38:df:6a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Validity
Not Before: Oct 1 08:01:23 2026 GMT
Not After : Oct 2 08:01:23 2026 GMT
Subject: CN=cef66b9a99c17cc2234e344e1daa74734907baf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:3e:4f:0e:e1:55:b0:03:02:27:b7:f9:69:
cf:b9:66:f4:f6:fb:c4:e7:3b:ec:f2:60:31:db:0a:
7d:6a:79:5d:3f:34:19:0f:23:8f:d9:65:04:3d:37:
2c:49:18:99:62:25:cc:5b:ab:76:96:5a:73:0c:f2:
3d:77:5f:35:a0:be:74:98:39:7b:92:3e:fb:de:d3:
1b:6b:6b:a9:98:d7:ad:b6:d0:35:f6:93:d6:19:f6:
37:f2:7a:f4:44:71:57:6c:52:e7:26:06:ef:49:54:
07:40:a2:95:92:e2:38:88:b5:3f:79:a5:1d:12:be:
05:71:79:f4:3c:d8:ba:8f:ed:c4:67:8a:57:3d:1c:
2b:d8:43:1c:97:1f:39:37:3f:03:b0:5f:86:c8:fd:
50:0c:8e:0c:1e:22:8b:5d:50:3b:a9:47:6c:15:9c:
75:57:56:72:a5:a3:1a:1e:b3:f0:e0:d5:0a:e4:44:
c7:3a:05:1e:30:97:58:57:e6:2b:b1:f4:ae:2a:79:
6e:16:78:0e:16:13:e3:3a:01:68:5e:91:60:62:78:
40:eb:fb:22:c4:cc:8a:c5:b2:be:01:70:45:e5:a7:
4f:83:65:cc:79:8c:26:62:1f:57:fb:79:35:1a:86:
4f:04:f6:c2:96:93:1e:d3:40:2a:d8:91:46:2b:35:
f3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F6:6B:9A:99:C1:7C:C2:23:4E:34:4E:1D:AA:74:73:49:07:BA:F2
X509v3 Authority Key Identifier:
keyid:36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bc:ca:44:0a:c3:9d:8a:f8:52:86:89:8f:2c:24:19:59:a1:
c5:a4:c6:ad:d9:aa:be:87:3d:91:06:48:33:a5:4c:36:f3:9b:
1d:6e:d6:a7:49:a8:ef:57:bb:4d:c3:a7:6e:7b:72:59:a6:6e:
f6:e4:a2:9b:75:6f:80:1b:8a:2f:17:5b:63:2c:91:35:74:bd:
1d:42:bb:2a:4b:63:09:3d:87:0a:71:be:31:36:1f:a9:18:cf:
67:8a:22:75:75:96:02:16:ac:c1:33:85:73:09:06:f7:91:99:
ac:85:bd:fc:9f:67:f9:8f:be:63:ed:c9:d9:6a:d2:b8:5d:29:
6f:53:25:aa:bf:bf:42:c6:bd:ff:d0:0b:d6:4a:75:c6:f4:88:
74:2a:37:e5:15:67:30:4e:05:a3:38:82:d5:7f:26:ec:7d:0e:
8e:2c:63:a9:17:75:04:72:ea:3e:e6:11:4a:55:55:dd:66:2c:
0f:97:e5:79:73:29:5d:e6:e4:68:42:b7:46:6d:de:38:78:70:
3e:56:4f:70:53:72:5c:be:4f:d4:48:64:8e:5c:8c:b7:fb:13:
72:c9:53:a8:17:a6:2a:13:d5:e0:ae:e8:1a:55:f0:f6:71:bd:
d3:bf:77:88:26:37:d8:ae:21:7d:23:35:15:22:5c:64:19:af:
d5:be:0a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:56:55 2026 by rpki-client