Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
File: Nl81kB17-TkbVrA0VzsklXS66S0.mft (raw, json)
Hash identifier: od7xjxd9uE2p+jKTkI/Fef0ltR921fLZu+zmV8FEkhg=
Subject key identifier: 40:84:E6:89:91:87:EB:0F:8E:FC:62:97:EA:C1:4F:A1:35:5C:FA:4E
Authority key identifier: 36:5F:35:90:1D:7B:F9:39:1B:56:B0:34:57:3B:24:95:74:BA:E9:2D
Certificate issuer: /CN=365f35901d7bf9391b56b034573b249574bae92d
Certificate serial: 019F954A7B42001DF6D091872F68A1367B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nl81kB17-TkbVrA0VzsklXS66S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:54 +0000
Manifest this update: Fri 24 Jul 2026 18:01:54 +0000
Manifest next update: Sat 25 Jul 2026 18:01:54 +0000
Files and hashes: 1: HmeltJqoGqK5DZzHGOZCGQrGqZs.roa (hash: vtN0gPmhpBlauaDksKBhqQJB3xkxqncdATCbp7ofHWY=)
2: Nl81kB17-TkbVrA0VzsklXS66S0.crl (hash: Zg5Kk3wFFWZARFdeSXsWWkkn25JuZAwdNw9zl8vMh7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nl81kB17-TkbVrA0VzsklXS66S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:7b:42:00:1d:f6:d0:91:87:2f:68:a1:36:7b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=365f35901d7bf9391b56b034573b249574bae92d
Validity
Not Before: Jul 24 18:01:54 2026 GMT
Not After : Jul 25 18:01:54 2026 GMT
Subject: CN=4084e6899187eb0f8efc6297eac14fa1355cfa4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:2c:b8:e4:e4:2d:a1:50:f0:ae:9f:46:78:
c1:5f:f8:ad:ea:a6:8e:5d:87:91:6e:cf:f2:77:1d:
a7:d7:87:66:a1:e9:11:bd:a3:f3:f6:f8:58:eb:c5:
6e:fb:b0:62:a8:9d:5d:d5:ee:fa:f9:24:9c:0b:33:
51:ce:73:79:c5:4b:88:dd:7e:ed:db:ec:42:a0:82:
41:43:27:0b:b7:a8:48:03:c5:ff:d3:78:79:6c:3b:
4e:87:74:d2:7e:09:f4:76:1a:23:0d:51:8f:37:33:
7c:c3:39:11:90:75:8f:16:c7:11:c3:d4:fd:a7:25:
72:74:b2:fe:0a:67:03:1d:c2:eb:0b:40:47:5f:0c:
11:ca:41:ec:5a:35:b0:5f:82:1c:6e:2a:39:9d:9f:
7a:7d:90:c5:7d:81:7d:03:64:08:49:4a:2d:cd:d2:
c5:5a:46:10:37:b1:2c:42:32:27:8a:ff:54:1e:d3:
78:fe:73:c1:75:6c:da:e7:69:45:17:13:1f:4f:95:
40:6a:a0:4b:95:94:2e:8c:0e:ae:14:2c:96:51:c2:
66:9a:c8:cd:86:b9:e3:72:cb:83:e3:8f:9c:64:bc:
16:48:e7:14:f1:fc:bf:09:e1:24:a7:6a:4e:20:e7:
96:ea:a4:1e:d5:a2:21:16:43:52:56:58:17:2e:02:
09:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:84:E6:89:91:87:EB:0F:8E:FC:62:97:EA:C1:4F:A1:35:5C:FA:4E
X509v3 Authority Key Identifier:
keyid:36:5F:35:90:1D:7B:F9:39:1B:56:B0:34:57:3B:24:95:74:BA:E9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nl81kB17-TkbVrA0VzsklXS66S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/Nl81kB17-TkbVrA0VzsklXS66S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:54:5a:2c:f5:f2:6b:b1:35:69:8e:55:45:99:91:00:a3:5b:
f0:e1:9a:fc:6c:a3:e5:69:aa:73:97:5e:5f:b5:e0:a6:76:24:
51:d7:82:49:62:d6:02:98:22:18:0c:4f:54:5d:89:be:05:30:
4e:3e:0e:ae:24:de:2a:bc:1c:1f:9e:5a:4a:c4:6a:db:10:9d:
ae:b0:7a:91:71:8e:66:51:55:78:f5:df:ea:44:9e:3c:de:78:
00:8f:23:02:47:58:6c:ee:f7:47:45:82:c5:59:df:32:f4:d3:
5d:ea:93:4b:7a:17:62:2b:18:16:01:04:60:51:17:2a:99:fe:
f5:bd:93:b1:a4:90:d1:3f:4a:00:19:ff:f4:da:ba:55:40:ea:
57:25:55:f4:b6:76:08:a8:76:f3:ed:10:88:20:93:5d:69:72:
4a:b9:61:23:fb:75:e8:f0:5d:6d:22:c1:1f:75:0c:7f:6f:f4:
84:0c:ff:2f:db:b0:06:a2:5c:6b:2a:24:6a:64:c7:78:ce:c9:
06:b1:7d:15:b3:34:3e:13:5f:46:07:4b:17:15:3f:32:ae:af:
c8:40:91:4d:20:c0:fb:73:4c:65:1d:e6:24:ae:6d:80:3c:fc:
ce:34:24:cc:58:5e:6c:03:07:f3:e8:94:d3:a4:d1:be:c4:0e:
e6:dd:33:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:19:51 2026 by rpki-client