Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: PDWpnseSGs7+Ng+2RSn3xfX/SAwg8bzeff9r+DPxmKM=
Subject key identifier: AA:22:4E:78:EA:D7:73:1E:92:48:9A:7B:85:E8:A2:54:3C:C8:4E:77
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 01A0DBA9E640E3C95FB0BD1C4D8D6464318B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 1152
Signing time: Sat 26 Sep 2026 03:02:19 +0000
Manifest this update: Sat 26 Sep 2026 03:02:19 +0000
Manifest next update: Sun 27 Sep 2026 03:02:19 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: dTS07POi7+3BTw5XRGEMI3cnhT9xldGO8UZDBG8qSLA=)
2: d4grg2tvuefsoHmD0ZdaVonf75c.roa (hash: OXvdnvF2UW52gDEgFTfQ3VspznPh5gZEegyP1xQRgjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:e6:40:e3:c9:5f:b0:bd:1c:4d:8d:64:64:31:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Sep 26 03:02:19 2026 GMT
Not After : Sep 27 03:02:19 2026 GMT
Subject: CN=aa224e78ead7731e92489a7b85e8a2543cc84e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:5d:50:d4:4a:82:fb:43:ac:b2:b0:82:6d:
98:52:e5:5c:f5:92:7c:29:2b:62:5f:fb:bb:e3:e3:
7a:4f:b0:8f:e9:31:f5:55:70:1f:75:49:d9:dd:c1:
04:b7:38:7b:ed:0c:81:f1:95:87:95:7d:4e:ec:ad:
3e:f6:7f:31:44:74:e7:ba:d6:4d:9d:04:70:fc:00:
e2:6e:ca:2d:4c:69:c7:72:2d:49:3e:77:df:4b:13:
7e:9d:e9:e8:d6:1c:ca:0a:9a:8f:2f:04:41:d4:32:
64:36:d0:05:5e:23:f3:bb:2b:03:e0:c0:86:bf:56:
cd:f8:f2:36:f4:13:fb:ab:ff:f3:c4:a0:6b:33:51:
ed:7c:54:af:79:ed:5f:82:31:6e:dc:16:73:da:3c:
e7:46:7c:9f:0a:c0:fc:10:81:7b:eb:71:e0:73:91:
cc:ca:a6:04:cd:46:f7:4d:6b:a6:49:24:cc:05:69:
ce:ce:ea:40:24:2e:e1:ca:22:ff:07:5e:fa:d4:ac:
61:da:41:23:e7:38:2d:14:9a:25:ea:a1:0d:74:5d:
3a:c7:32:5f:bd:1e:28:ac:19:26:2b:3d:00:dd:f3:
6e:1b:7c:2e:7e:bf:9d:19:be:7f:ab:0e:89:e3:c5:
4e:1d:ea:5a:99:6b:41:33:4d:be:69:7a:b6:8f:29:
a7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:22:4E:78:EA:D7:73:1E:92:48:9A:7B:85:E8:A2:54:3C:C8:4E:77
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6a:cd:69:03:af:24:65:b6:1a:80:07:ed:ea:0e:8e:b0:b4:
36:2d:eb:40:47:b8:d5:06:39:ad:ab:2d:11:16:db:ae:76:44:
63:82:2f:5f:ce:a1:17:fe:69:51:0a:5f:a7:a2:23:0f:f8:00:
f4:5d:29:30:51:c5:40:01:d1:ba:db:ff:f6:dc:7c:6b:55:bb:
23:03:4b:0e:cd:c8:15:43:cd:f7:f7:1f:74:00:10:ee:ba:ff:
4e:55:23:a4:1b:78:b9:4e:e4:96:17:01:6d:1f:fb:62:0b:0f:
17:5e:a2:af:74:ad:3f:10:5a:ab:5b:95:af:38:f5:c6:fe:b8:
50:73:35:40:41:54:79:26:8e:ce:7f:2b:5a:45:aa:e8:22:88:
b4:f3:62:08:ab:48:57:bd:7e:15:77:7f:cc:95:6d:42:b9:2e:
19:2c:8c:6d:cd:c3:7d:58:f7:9b:1e:45:aa:54:d6:0f:a4:d9:
1c:44:a7:1f:3a:e5:93:d3:18:94:6d:b3:8e:e3:ff:40:c3:c5:
8b:7d:80:25:a4:51:43:2e:38:d6:0f:72:bb:bb:03:81:ad:a4:
91:a1:94:9d:1c:cb:89:8b:a5:7b:4a:9b:5c:02:2a:e7:b6:05:
a8:21:e7:8d:6a:03:a5:d7:fc:97:9f:93:43:52:b6:ca:c0:45:
0f:f1:f9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:56:24 2026 by rpki-client