
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File: NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier: fahEuzN8d2mmSPAd16o0jhA2eumrWKrmT5BTeGnvTTA=
Subject key identifier: 95:78:BA:0A:BB:15:ED:F7:FD:44:1A:44:E5:FB:57:B2:08:10:CA:5F
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial: 01A0D45CF4C29438B34B525D4C2595E35481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number: 0799
Signing time: Thu 24 Sep 2026 17:00:56 +0000
Manifest this update: Thu 24 Sep 2026 17:00:56 +0000
Manifest next update: Fri 25 Sep 2026 17:00:56 +0000
Files and hashes: 1: 0oG7Wuq3ZAAXzg6P-qV_HWGeUWE.roa (hash: tl6rHSJSg3BOoepWWn4g5EPuRgVKzjqvlpZ/rZDE8k0=)
2: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: LAPTi6HZUejlKyj11Q/of74b/QKBomYUKxLbOT1f31o=)
3: wC11yeUerTWiyRWDCng4spCl8qM.roa (hash: /IMrg/w5VKSBqu/JYOwX3ZqxJnQBurW+kq0gnHVnWjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5c:f4:c2:94:38:b3:4b:52:5d:4c:25:95:e3:54:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Validity
Not Before: Sep 24 17:00:56 2026 GMT
Not After : Sep 25 17:00:56 2026 GMT
Subject: CN=9578ba0abb15edf7fd441a44e5fb57b20810ca5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:c8:cf:4a:40:9c:09:a5:12:d2:aa:20:be:
62:91:5d:a6:dd:da:e3:c8:c5:bc:df:8f:de:3f:84:
41:03:61:f3:d0:73:2e:07:58:cc:5e:6b:d3:d4:47:
dd:24:80:37:46:d0:04:6e:1c:b1:47:0d:62:eb:77:
92:a8:ce:36:7c:fb:b3:1d:85:ab:5d:b5:87:bd:c6:
bb:75:6d:ab:78:a7:36:2e:66:42:24:e2:62:c3:8f:
04:1d:fe:ac:5d:8c:78:7a:fb:eb:bb:a7:f8:77:50:
58:d2:3e:09:98:21:74:0a:60:7e:1e:55:6f:f7:0c:
56:39:d5:07:7e:56:f1:65:ba:d0:e4:5e:f0:6b:eb:
a8:8e:b5:35:ac:65:8e:be:bd:18:11:66:1a:d4:9f:
de:f9:77:be:54:8a:2b:32:6e:16:da:82:19:18:44:
24:2e:b1:10:30:b1:0f:14:9c:34:18:8a:23:f2:47:
01:70:25:86:ac:78:3c:18:5b:d5:3c:7a:c0:e8:64:
18:97:82:95:0c:3b:44:21:2f:5f:b7:e3:e9:69:a7:
4d:e8:a3:ea:59:74:39:93:2d:27:60:dd:9f:93:4f:
7c:4d:f3:98:5e:56:e2:71:e5:96:d6:b1:5b:82:6c:
55:ec:02:b0:b1:3c:56:54:72:c3:f2:78:d4:2f:f9:
36:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:78:BA:0A:BB:15:ED:F7:FD:44:1A:44:E5:FB:57:B2:08:10:CA:5F
X509v3 Authority Key Identifier:
keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8f:60:18:39:d6:46:35:c6:90:9b:52:b5:d8:f6:14:7b:79:
78:93:11:3f:07:60:64:a7:0c:1c:e0:a2:25:9a:b8:9b:50:f5:
49:19:8a:d1:03:18:11:23:93:34:ed:fa:b2:e9:55:2b:2e:d9:
eb:02:53:22:b4:c6:ef:b7:93:dd:d8:48:12:46:74:2e:11:8e:
01:b2:ee:37:f4:5f:36:7b:0d:a4:cd:ff:64:26:e9:27:09:5a:
03:44:05:01:f2:fa:bc:58:92:27:ed:6f:89:9c:6c:62:4f:d8:
d8:70:1e:9c:cc:28:b1:97:3e:3e:bf:77:1d:fc:f2:17:7c:67:
00:c2:c4:51:dd:a0:d0:20:41:d0:47:3f:a7:9f:3c:06:39:19:
b1:4d:7e:6f:20:9a:62:7f:e2:29:eb:38:2d:05:be:3c:b3:1b:
b9:ea:fd:5f:4d:12:f5:c4:f1:9c:a8:17:b4:76:14:ee:51:a8:
f8:4f:ce:00:ff:21:f8:52:13:32:55:c5:61:fe:51:22:45:72:
4d:b5:94:9c:ba:f5:ed:7c:7a:66:3b:09:3a:c1:e0:97:bb:c2:
cc:e1:bc:56:20:85:db:6c:4e:b8:11:82:3e:d9:c7:b4:86:ad:
29:ef:bd:5b:d6:85:a9:b0:69:6f:af:b7:ef:5f:b2:28:56:28:
f0:c4:99:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:34:29 2026 by rpki-client