Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
File: Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft (raw, json)
Hash identifier: m2T3e/bvWG8GxBjtCyf3vLVjNa6ZQou4zD3iaHMMmb4=
Subject key identifier: 4C:E7:7F:88:21:B1:E7:50:E2:A5:AC:B6:18:8F:2B:18:65:19:C6:33
Authority key identifier: 36:3E:43:7F:6B:68:34:B0:84:74:7E:AF:76:D8:D2:60:A7:9B:FC:8B
Certificate issuer: /CN=363e437f6b6834b084747eaf76d8d260a79bfc8b
Certificate serial: 01A0DF4F0DB234834C63A7D0DEDFAE350A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj5Df2toNLCEdH6vdtjSYKeb_Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
Manifest number: 013E
Signing time: Sat 26 Sep 2026 20:01:34 +0000
Manifest this update: Sat 26 Sep 2026 20:01:34 +0000
Manifest next update: Sun 27 Sep 2026 20:01:34 +0000
Files and hashes: 1: Nj5Df2toNLCEdH6vdtjSYKeb_Is.crl (hash: k4tFHCMk2t7aqk3JszQ9c2wKLQfhCNBN7Zu1hk6wcqA=)
2: QTwY7hZ5jhbuRgKMO0Ou2fKamBU.asa (hash: AlP7J188PqhkPU3RkVEeK3sJgESC4Fbnn4Z98OFzkN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nj5Df2toNLCEdH6vdtjSYKeb_Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4f:0d:b2:34:83:4c:63:a7:d0:de:df:ae:35:0a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363e437f6b6834b084747eaf76d8d260a79bfc8b
Validity
Not Before: Sep 26 20:01:34 2026 GMT
Not After : Sep 27 20:01:34 2026 GMT
Subject: CN=4ce77f8821b1e750e2a5acb6188f2b186519c633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:33:bb:e6:b1:02:76:23:35:0d:9b:b8:82:
b6:aa:d2:2a:77:bd:49:c2:94:fd:46:8f:12:09:22:
8a:1f:b4:05:57:85:77:9c:73:65:6b:04:08:d8:4f:
74:10:ef:b3:3d:35:91:82:9f:f3:82:f3:03:e2:0c:
cd:38:b1:ec:ae:77:bb:ad:eb:f8:1e:b1:99:48:2e:
b1:3a:fa:d5:99:77:e1:ce:7c:3d:31:c9:04:2f:d0:
c3:fd:34:cc:eb:03:ad:65:ab:bb:7d:8d:4c:84:e9:
08:46:da:9d:f6:db:13:78:44:f9:52:14:2b:3b:65:
2c:6f:c3:5e:5c:34:f1:39:1c:81:57:36:1a:b8:89:
07:32:4b:2a:ef:70:b5:c3:de:d8:40:c9:77:fa:64:
5f:7f:ac:cf:d0:e1:b9:bf:b7:0c:27:6a:10:d2:2a:
c9:ac:57:34:1f:04:13:37:72:5e:28:d5:12:99:a4:
3c:ed:aa:ff:81:29:00:85:59:ac:90:84:a4:92:8d:
4c:8f:f0:7d:4e:3a:4d:e1:de:32:8d:c6:e8:fc:13:
24:5d:a2:67:8f:48:35:4a:ad:ef:0d:fb:28:b2:a0:
f9:15:dc:61:80:2d:de:f0:5f:15:23:46:a4:46:34:
e9:bf:35:04:af:45:4f:cf:d4:94:33:b4:98:19:24:
3d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E7:7F:88:21:B1:E7:50:E2:A5:AC:B6:18:8F:2B:18:65:19:C6:33
X509v3 Authority Key Identifier:
keyid:36:3E:43:7F:6B:68:34:B0:84:74:7E:AF:76:D8:D2:60:A7:9B:FC:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj5Df2toNLCEdH6vdtjSYKeb_Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/27d11b-1b28-4cf9-817d-d1cbfa8142fe/1/Nj5Df2toNLCEdH6vdtjSYKeb_Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:d5:1d:17:61:12:cc:b3:f0:ee:94:8b:a7:81:cf:01:be:46:
48:81:45:60:33:98:f9:a1:e3:5c:c5:db:2e:d9:38:39:56:37:
25:6f:9e:c7:b4:fb:39:90:5c:af:45:d1:3f:01:1f:da:35:86:
c2:9f:96:f8:54:e0:63:b2:dc:8e:8c:3b:b7:89:01:a9:f4:60:
c2:1e:e3:7b:66:8a:0b:4d:25:d1:28:e7:8f:e4:c5:42:ac:dd:
4a:ca:ca:71:20:a4:5b:e8:85:5d:58:4a:5b:1d:2c:8b:a7:29:
3e:b1:19:32:ab:2b:29:4c:36:21:24:f2:e0:03:79:2f:98:da:
3a:ac:b9:2a:1b:da:b0:6e:5b:18:d0:3e:ee:cf:57:20:37:1b:
df:fa:26:67:da:66:7c:66:01:1f:b7:95:1e:1c:b9:75:4b:d3:
2a:a9:ea:43:50:f9:69:ca:24:53:7a:de:5d:ad:8e:16:c8:9a:
3c:6b:a8:c0:74:e3:a6:95:a4:85:41:72:66:ea:76:61:f2:2f:
41:6d:ac:45:55:bd:dd:2c:2d:9b:52:87:ee:5a:21:b4:fc:e9:
3b:4c:2c:44:ce:03:68:99:87:43:92:cc:24:75:36:7c:ef:98:
5f:1b:ad:20:b9:fc:7b:e1:fd:f2:c5:2d:54:23:67:22:d9:10:
19:08:8f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:09:47 2026 by rpki-client