Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
File: NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft (raw, json)
Hash identifier: AS7OvTgNWED5Y6PXqzZOKDgvp5RwDFIsJujrQP5+ZPM=
Subject key identifier: 31:8E:09:67:C3:6B:26:F6:7A:58:77:0D:3D:6A:19:29:F7:08:F9:9D
Authority key identifier: 36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
Certificate issuer: /CN=36135f13abf02fa3fca505d568816afc59334916
Certificate serial: 01A0D6152AB94CE5D379CBCA7C3CE0CC4C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
Manifest number: 02C0
Signing time: Fri 25 Sep 2026 01:01:46 +0000
Manifest this update: Fri 25 Sep 2026 01:01:46 +0000
Manifest next update: Sat 26 Sep 2026 01:01:46 +0000
Files and hashes: 1: NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl (hash: iNu06qclgWvrXLBWs5TZsl9v6MHGSgOUTtwZrk2Avjw=)
2: RHxOXhbADUbC_oKF4PQ6sLf8f9U.roa (hash: KcDTJae6aVfPcRbFgH91KX6JaFgZ6GmXwYl1pNFHpOM=)
3: Ux15_f21f5m4FEwsehwwJpF7eyg.roa (hash: O+6kt63ebzWPfLmcRxNHSLUa9ESjOp8DHk/Yuz0h0Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:15:2a:b9:4c:e5:d3:79:cb:ca:7c:3c:e0:cc:4c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36135f13abf02fa3fca505d568816afc59334916
Validity
Not Before: Sep 25 01:01:46 2026 GMT
Not After : Sep 26 01:01:46 2026 GMT
Subject: CN=318e0967c36b26f67a58770d3d6a1929f708f99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e2:f9:b6:da:b8:c6:a2:8a:48:f6:ab:42:c2:
3d:b9:8b:ae:f8:b2:c1:33:eb:c7:08:6f:06:e7:d9:
2b:22:95:52:77:40:f8:b5:6c:c4:e6:6c:b8:0d:fd:
0f:09:e7:ac:4b:6d:0a:a0:b4:e7:b6:85:52:ba:e9:
b9:f4:d9:09:a7:b0:43:ca:94:6c:61:6e:02:55:ae:
f5:9a:43:7f:4b:bd:d4:22:1f:7d:64:80:31:76:17:
57:ce:9b:52:e1:af:c1:33:58:dd:e0:6f:2d:3f:9f:
ed:b2:86:4c:dd:ba:8e:10:73:ff:dc:9e:ee:10:90:
22:39:06:90:6b:d1:11:f4:f5:05:80:fc:ca:9a:94:
0c:76:5d:16:ce:d3:4e:9a:fe:f7:76:bc:bd:e1:23:
88:94:57:87:b9:e0:9f:61:a3:9c:f6:d0:6b:e2:44:
af:67:54:2a:67:2b:a9:24:5c:20:69:b8:88:95:59:
f9:1f:6c:4b:84:60:86:09:26:36:89:34:4f:70:c0:
5f:a8:f1:68:28:27:0f:67:c3:4b:a4:55:09:e3:49:
17:6b:af:0e:be:e7:4e:12:d5:67:6f:b9:99:0e:38:
c0:1c:9c:cd:91:f8:8a:6d:a6:af:bc:df:bf:d5:13:
c4:79:f2:6a:45:d6:f4:5c:4e:ed:1f:64:b3:39:f2:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8E:09:67:C3:6B:26:F6:7A:58:77:0D:3D:6A:19:29:F7:08:F9:9D
X509v3 Authority Key Identifier:
keyid:36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:26:3e:37:99:fb:5b:ff:97:3e:31:cd:33:1a:a7:d3:07:87:
c0:14:70:0d:7f:83:71:87:01:40:5a:6a:1e:43:0c:6c:94:0e:
fa:af:dc:74:4e:ac:c6:3c:4e:ac:0e:e7:fc:71:df:c0:bb:29:
f5:02:38:32:fb:40:81:f4:a7:5a:f1:d6:51:b7:66:84:3b:7f:
0a:04:47:99:1d:63:77:7e:43:b1:2c:61:9b:ea:66:a2:12:22:
3c:50:be:65:16:24:e8:ee:32:25:fc:a9:9f:fa:70:99:fd:c7:
36:e0:be:b4:b0:f0:2e:d8:6a:ec:19:c5:8c:94:d6:7e:40:78:
a7:aa:ac:c2:99:b2:69:6b:99:be:22:06:e3:b6:ba:45:df:b4:
41:75:e0:6f:fa:5c:3c:3e:95:3b:53:bd:f6:b5:2c:2e:96:21:
b6:c2:c9:0f:29:93:d8:be:52:4b:d5:37:ac:54:2b:38:70:2f:
f5:42:f9:71:3b:4b:e3:a2:f8:6d:bd:53:48:f6:24:50:92:89:
0d:53:c8:11:6d:62:aa:0a:8e:54:88:a3:60:ac:a8:cc:08:f8:
ff:ef:5f:26:f8:4c:7c:6e:17:7b:0a:0d:39:48:29:2d:c0:26:
0f:b7:fc:66:0e:7a:53:14:a0:41:6f:24:40:8e:ca:e3:bf:11:
13:ef:af:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:13:59 2026 by rpki-client