
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
File: Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft (raw, json)
Hash identifier: skWi0zyIymDhJGK3yqtxLyapKLDwRCeuWl+9NeEcpAE=
Subject key identifier: 3D:14:A5:3C:BD:D6:E5:5E:F5:28:CA:73:E1:22:C8:9A:39:69:CB:7C
Authority key identifier: 36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1
Certificate issuer: /CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
Certificate serial: 01A0E02A7E7647508B7BBBB4EC1A34F207A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
Manifest number: 0A1F
Signing time: Sun 27 Sep 2026 00:01:16 +0000
Manifest this update: Sun 27 Sep 2026 00:01:16 +0000
Manifest next update: Mon 28 Sep 2026 00:01:16 +0000
Files and hashes: 1: Ai8Bugd7lzzruNa57KT-lV3wYm8.asa (hash: BwsAqkJnuFBXHrVkW12Nt079T8kms4s4hbMPa9Sf/0I=)
2: Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl (hash: H549TtMJOSpzFs2rf3uaBvy/ygnQfBvGgDSBymuukiE=)
3: ZCvgjfcdUvB5emDgJUqlCNrfN4U.roa (hash: 9CWeQ56fOiBQ0iE9QR8Rty2enOxfpS87kCa0J2lyyi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:7e:76:47:50:8b:7b:bb:b4:ec:1a:34:f2:07:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
Validity
Not Before: Sep 27 00:01:16 2026 GMT
Not After : Sep 28 00:01:16 2026 GMT
Subject: CN=3d14a53cbdd6e55ef528ca73e122c89a3969cb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:55:aa:c0:b8:a5:80:4e:5d:bd:db:6b:e0:d4:
af:b9:a3:9e:06:48:30:00:10:3a:f5:8f:17:88:1e:
ef:ed:54:ac:95:a9:cf:01:77:11:68:79:8c:e6:d3:
2f:be:90:b0:5e:0b:57:88:92:7a:85:c2:a9:61:5c:
14:50:66:2a:b3:43:79:c0:ca:92:0b:bc:1c:df:25:
69:13:4a:ba:82:7e:3a:eb:56:19:ed:d8:26:84:e6:
a5:d2:aa:5d:ee:b6:64:88:b1:4c:19:27:64:16:82:
b8:9a:42:3a:6f:2f:f2:ac:e0:e9:88:82:0a:05:98:
dd:85:a1:62:be:e6:b4:77:79:2a:63:c4:d6:97:45:
0a:8d:30:aa:3c:9c:01:7b:10:1b:59:92:96:a0:1e:
ee:21:b1:8f:fb:0f:28:5a:d2:08:d7:2f:46:e3:6d:
6a:77:2e:c5:0c:a7:1b:db:b0:31:7f:f6:8e:e0:a3:
9d:c1:60:42:21:46:03:dd:d5:b8:99:e2:6b:af:2e:
a9:2f:45:15:bc:8f:f5:5c:8c:61:39:6b:76:7e:ea:
2e:77:5f:eb:1a:6e:ed:d1:a3:89:78:2e:9e:5f:18:
9b:19:6a:da:ea:c1:29:9d:08:fb:e7:43:63:1d:43:
78:98:54:f4:c8:5b:86:56:4a:e9:6f:47:d2:1b:17:
9c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:14:A5:3C:BD:D6:E5:5E:F5:28:CA:73:E1:22:C8:9A:39:69:CB:7C
X509v3 Authority Key Identifier:
keyid:36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b1:85:42:4b:c4:1b:91:fa:8f:5b:88:64:cd:c3:2a:c8:63:
f2:4f:95:1b:e7:fa:5f:f5:55:1d:88:06:14:fc:da:12:5a:48:
04:3d:15:82:61:7d:87:b4:70:76:1b:5f:e5:7d:7b:96:98:66:
64:d6:0a:b6:d1:a8:90:e8:be:69:83:30:56:79:4c:b1:10:38:
72:d1:7e:13:e5:5c:22:df:7c:e8:ec:23:5c:23:e4:2e:fc:f5:
e3:b1:63:74:9b:fe:e3:57:cc:e9:5f:f5:62:e2:f4:02:62:97:
ca:10:48:d6:a2:3b:6a:f4:b4:87:0c:a2:f1:44:0d:c6:c4:56:
d8:30:bb:cb:c3:97:83:84:f1:70:26:fe:a9:3e:c2:f9:47:db:
ba:21:e9:e8:fc:3a:46:ac:d7:3d:17:4f:74:98:77:fd:6b:49:
79:ba:5d:05:cd:8b:40:93:cb:ed:76:7d:a6:23:0a:3d:cd:58:
9f:7c:c2:74:4d:61:92:9c:24:8e:44:b7:bb:f8:ef:cc:17:4b:
39:24:0c:e1:f8:14:eb:e2:96:6f:72:51:97:31:ab:ba:2e:4e:
17:df:d9:56:1c:8c:f8:18:a7:89:50:00:e0:81:b9:67:97:92:
7d:bd:84:0f:95:41:63:ff:ac:82:45:f4:1e:77:7f:94:11:fb:
8e:04:c7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:21:37 2026 by rpki-client