Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
File: NutRbqkC2WStsqptytmh3A9bfv4.mft (raw, json)
Hash identifier: 3bDH4eEpMGagrMDFsv/eF7GPpQI6F/x7GR/ELq4EvZs=
Subject key identifier: 52:01:27:BA:DB:77:62:F1:A3:91:52:83:D1:83:9C:5D:35:7D:EF:F9
Authority key identifier: 36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
Certificate issuer: /CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Certificate serial: 019D273B30CD0C1BA89CA6932B8CC4A12295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
Manifest number: 1818
Signing time: Wed 25 Mar 2026 23:01:23 +0000
Manifest this update: Wed 25 Mar 2026 23:01:23 +0000
Manifest next update: Thu 26 Mar 2026 23:01:23 +0000
Files and hashes: 1: NutRbqkC2WStsqptytmh3A9bfv4.crl (hash: Ko6i/BXAcWk1GStoCRx9GAmzmGVFyT5Fh8/Jl1zLB20=)
2: YlXedLCyqhXrfS6xWyQ0uTsUI3U.roa (hash: F80TY0fOITpa/Bk+EYhgg41ne6mDHfXgDtH94lguM+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:30:cd:0c:1b:a8:9c:a6:93:2b:8c:c4:a1:22:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eb516ea902d964adb2aa6dcad9a1dc0f5b7efe
Validity
Not Before: Mar 25 23:01:23 2026 GMT
Not After : Mar 26 23:01:23 2026 GMT
Subject: CN=520127badb7762f1a3915283d1839c5d357deff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cc:ac:27:f8:6f:1b:43:41:c8:69:ae:66:d6:
73:d6:b0:fd:eb:eb:1b:0e:16:cf:9a:9f:ff:f6:b0:
91:26:c2:6f:ac:be:16:a0:0c:d6:51:36:71:5f:c5:
3b:d6:0c:d0:c4:18:18:7d:b1:d7:e8:60:4a:15:a7:
81:fd:a1:14:e7:4f:f9:a5:e1:8c:e4:13:bb:fc:44:
8f:52:e4:23:9c:dd:14:06:10:1e:1c:9d:63:27:20:
75:d4:3e:12:44:bf:a1:15:8f:ec:82:6a:1f:6e:48:
31:5c:d4:3e:54:2e:cc:13:87:fc:6c:cc:ce:5e:84:
61:65:c1:fe:2a:a4:89:61:15:21:03:d9:5e:25:fc:
1d:31:b2:b3:e4:c1:5f:02:05:4b:85:62:e1:d2:d0:
ef:21:ad:21:7c:cf:2e:43:7f:58:66:9a:98:b5:db:
1e:0e:c1:66:44:a0:88:7f:db:fc:2d:1e:11:0f:75:
1f:1e:72:a4:a2:78:10:0a:10:e6:26:23:da:e3:73:
63:b8:c1:fc:e6:8f:b1:ff:5e:be:cd:38:cc:48:0e:
49:6d:ad:12:f3:f7:5d:f1:5b:b3:75:97:62:66:f6:
50:a9:57:6a:50:6f:aa:75:91:ef:32:c1:91:90:de:
b4:94:26:6a:08:35:f3:7d:e0:b0:45:ca:26:7f:29:
f4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:01:27:BA:DB:77:62:F1:A3:91:52:83:D1:83:9C:5D:35:7D:EF:F9
X509v3 Authority Key Identifier:
keyid:36:EB:51:6E:A9:02:D9:64:AD:B2:AA:6D:CA:D9:A1:DC:0F:5B:7E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NutRbqkC2WStsqptytmh3A9bfv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/26c675-def7-4232-811b-8f76c3291fbc/1/NutRbqkC2WStsqptytmh3A9bfv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:12:c5:bd:12:47:b4:52:3f:86:5c:4b:4b:c4:71:d7:a6:f3:
e5:44:d0:5f:a3:a9:88:81:d3:44:35:5b:bb:3e:39:06:61:a9:
7a:92:94:ff:8b:ba:fe:bf:f0:6f:fd:6e:4f:94:3c:66:48:2c:
4f:4c:1d:b1:26:c7:5f:b5:ea:3a:6d:2d:82:0b:18:7a:d8:be:
a9:2a:d2:70:a5:fa:d8:bb:22:81:22:4d:f6:e7:c1:10:5c:8c:
06:a3:f8:46:2c:e1:d9:ea:02:bf:2d:09:3a:e1:2f:ed:78:12:
82:c2:4b:44:f6:9c:3f:a8:e1:6f:ec:66:19:a9:87:f7:84:fa:
b0:38:04:df:95:15:07:ce:34:f0:10:60:8f:2c:9b:a2:24:1c:
b7:b6:8e:b5:50:57:cd:91:0e:f0:ea:37:ae:bd:b4:70:78:61:
26:5b:e6:39:87:3b:d9:8f:9c:ef:88:db:5f:25:aa:44:48:a6:
93:b1:fc:c4:b6:bd:1d:ad:13:36:8e:f3:ca:b5:f7:8c:fe:38:
44:e6:d9:12:ec:70:35:94:21:1b:6b:80:ad:99:0b:88:19:28:
53:b9:dc:15:30:ba:14:e1:50:26:70:36:ef:e2:55:21:e6:a2:
5f:3f:6b:6f:ef:e0:bc:5a:ed:ea:7d:25:b8:4b:11:e4:40:a8:
76:01:6f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:11 2026 by rpki-client