Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
File: NkUaLqQK8XFeYxMWlGiZaspxu4o.mft (raw, json)
Hash identifier: mZ+OQO3Owazdhpl51GKTMRsE0Cry9Y5WPqJqptgvXDs=
Subject key identifier: 1C:DB:8C:D3:37:C0:45:41:70:E8:25:DE:BC:10:F0:18:1D:09:6D:07
Authority key identifier: 36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
Certificate issuer: /CN=36451a2ea40af1715e6313169468996aca71bb8a
Certificate serial: 019D27DF92E9B05C913C299084131E3AA804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
Manifest number: 0DCC
Signing time: Thu 26 Mar 2026 02:00:56 +0000
Manifest this update: Thu 26 Mar 2026 02:00:56 +0000
Manifest next update: Fri 27 Mar 2026 02:00:56 +0000
Files and hashes: 1: NkUaLqQK8XFeYxMWlGiZaspxu4o.crl (hash: MPU4WH3zzlxBRWogH3JxUh6+FWvtgRFh+i9BzSXD+Js=)
2: lBqk0ZJjhRTU5WPqZKy0Q75ijLY.roa (hash: umtk9WvPU6HXcHOoGpqTOSwBwsTaIlBi9j5sLa9RX78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:92:e9:b0:5c:91:3c:29:90:84:13:1e:3a:a8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36451a2ea40af1715e6313169468996aca71bb8a
Validity
Not Before: Mar 26 02:00:56 2026 GMT
Not After : Mar 27 02:00:56 2026 GMT
Subject: CN=1cdb8cd337c0454170e825debc10f0181d096d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:f4:54:0a:a5:6c:d4:c2:c5:48:94:3b:a2:
1a:63:ec:6d:11:e6:e7:8e:10:3b:e3:9d:55:67:98:
4f:12:ea:bd:e7:86:a5:99:fb:76:8c:af:fc:da:ce:
d9:2a:2c:8d:bd:d8:7d:85:34:18:92:e4:12:33:d6:
30:41:9f:96:30:38:3a:df:41:76:e0:52:7b:6f:af:
58:1e:7e:29:7b:48:1d:80:cd:8a:2a:aa:60:35:86:
c9:f4:2a:77:bc:db:13:a2:6c:37:12:84:13:4d:60:
86:21:02:42:0f:79:5c:fb:0f:b7:ea:1d:8a:15:dc:
9a:a1:60:fc:82:1a:3d:eb:a2:e5:ec:69:94:ae:fc:
28:27:73:52:02:f0:f6:ba:67:3a:c4:23:98:9d:d0:
78:3d:c1:7d:65:53:bf:f6:25:7c:c2:bd:18:44:bc:
c2:a2:63:02:de:d5:28:b2:4f:dd:81:97:d9:24:97:
f7:2c:3d:29:b5:89:ca:90:46:0f:66:c0:98:d9:55:
49:7b:06:50:ac:92:a6:c4:c2:e6:fd:a3:f9:2c:84:
61:51:e3:d7:38:43:91:96:1b:f8:e7:92:e2:10:63:
c9:fc:66:26:7f:f0:dd:08:a1:89:8d:b5:65:0a:f8:
a8:69:fc:32:23:9f:d6:bb:dc:d5:61:69:29:d1:b0:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DB:8C:D3:37:C0:45:41:70:E8:25:DE:BC:10:F0:18:1D:09:6D:07
X509v3 Authority Key Identifier:
keyid:36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:73:f7:76:1c:40:35:86:06:48:cd:3a:ca:7a:ac:9e:b1:e7:
d0:fc:f5:00:de:ac:ae:5e:6c:c0:8f:44:88:39:bc:bd:5e:38:
e3:6d:64:98:c2:72:68:f2:5f:dc:63:41:69:8b:ad:da:21:9f:
3b:e8:dd:6f:13:63:9b:e7:2d:00:a8:73:7a:f2:a5:90:a2:b8:
3e:76:cd:55:4c:fa:78:23:70:60:08:1a:7f:ac:e9:d2:7e:01:
a9:ff:c5:bc:93:b1:b8:14:34:68:8f:c8:14:6c:f2:34:67:cf:
37:f9:a0:12:30:ff:92:b3:5d:a2:ad:0b:c1:dd:df:0e:a4:99:
ae:1f:f4:71:a9:b9:85:2e:2c:f3:8d:c2:f3:6b:af:26:1f:ef:
77:76:79:f8:25:a8:7d:b1:cc:fd:09:b5:3c:fe:19:1c:ed:1c:
4a:2f:90:74:a7:48:bd:91:8b:76:d3:28:2f:d9:ce:a1:a2:73:
5e:1a:27:a8:9e:76:ef:4b:f6:5a:79:48:96:77:52:30:7f:c6:
e8:f1:29:5b:49:e8:7b:1c:4c:55:0c:ee:c9:a9:17:95:38:67:
c1:9c:34:08:43:dd:b8:39:cb:98:44:9c:97:ea:d2:c7:0b:1a:
e3:ad:a5:74:1e:15:66:c7:29:2b:be:7f:18:19:e8:d7:64:dd:
83:b1:db:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:56 2026 by rpki-client