Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File: Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier: 3X/BEMcAYR2uG5Qo9y8RL5EJos1l9zo8kMjB6dtyeQ0=
Subject key identifier: 04:99:D0:95:3C:2B:25:AE:12:2B:E2:FF:DE:1F:C4:E6:32:D4:EA:FF
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer: /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial: 01A1DCF079168718C3E76E4D5A3CD08EC7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 02:01:49 +0000
Manifest this update: Sun 15 Nov 2026 02:01:49 +0000
Manifest next update: Mon 16 Nov 2026 02:01:49 +0000
Files and hashes: 1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: ioJxbiVar9QSVoDNtYipTIr1IT+kEIXcdzOsmeYgbQM=)
2: ahNLR_0oS-0t1YKVBOVdbZiSYPY.roa (hash: fNNDUa3v8ykCEP/CD6DhZGRwmawCEdvB1zOAi4jYge0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:79:16:87:18:c3:e7:6e:4d:5a:3c:d0:8e:c7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Validity
Not Before: Nov 15 02:01:49 2026 GMT
Not After : Nov 16 02:01:49 2026 GMT
Subject: CN=0499d0953c2b25ae122be2ffde1fc4e632d4eaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:01:b1:21:43:90:64:0f:e1:c6:22:88:c1:
da:8b:d7:9d:7f:82:3e:ed:ef:0c:72:db:71:5f:8b:
11:26:1c:58:6c:27:18:b3:a5:8c:17:e2:d9:de:a1:
e7:78:52:46:f0:de:4f:16:a2:ea:a3:7f:4a:95:de:
1c:9b:0a:21:d7:9c:b8:03:d4:f0:2b:a4:df:a2:36:
7c:c8:39:e7:d8:b9:ef:d5:f0:49:ae:cd:ad:88:83:
58:af:78:a3:34:ba:a1:2b:4d:64:f0:79:6e:5b:75:
f1:ff:be:b2:63:56:05:ca:36:b0:2d:b1:45:72:5e:
c2:1b:fc:de:fa:24:c3:4b:fc:f4:48:0c:51:8c:07:
be:25:4e:ae:48:e9:8a:03:79:73:d2:49:60:9f:83:
53:84:74:87:28:90:49:d8:21:10:49:cd:fb:ea:1d:
4d:18:1a:75:11:fe:8d:a4:30:4a:2a:d3:85:cb:47:
b8:35:8f:73:5d:f8:b8:d1:95:29:57:b5:3c:83:b1:
53:d6:f6:5f:51:84:db:e5:16:2b:93:ac:12:8e:f5:
e6:c0:0b:9f:f2:9e:4c:0e:71:3d:8a:93:85:5d:bf:
9f:41:3f:34:79:43:7a:1b:4a:8c:e7:f2:d7:8b:40:
56:d6:c8:e5:0a:83:c4:bb:05:fe:d8:2c:65:14:28:
84:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:99:D0:95:3C:2B:25:AE:12:2B:E2:FF:DE:1F:C4:E6:32:D4:EA:FF
X509v3 Authority Key Identifier:
keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4a:7b:13:23:e9:49:d8:20:19:fb:05:75:66:cf:e5:68:91:
24:10:4e:d9:8e:8f:e0:f3:b8:45:2a:4a:c1:bd:8f:91:b7:e7:
4f:6d:2a:35:1b:0a:07:49:af:a7:28:10:c6:4c:fd:76:3a:26:
05:68:28:70:d7:96:c7:1c:c5:31:c1:60:1f:45:59:8f:7a:78:
c5:b0:ea:f0:bb:01:2e:96:db:10:c4:5b:59:a8:c8:06:fe:f8:
3c:7f:2b:34:08:ae:6c:af:ce:48:f1:bc:11:43:b3:95:48:73:
85:70:4b:d8:58:83:6a:b2:11:34:02:3d:86:c6:8c:7d:ca:21:
51:9f:2c:ce:5d:69:c9:43:ab:12:34:bd:5e:1e:6f:d9:b3:ce:
e4:cc:d8:15:b5:11:bb:eb:d4:78:cb:92:a3:bd:68:0f:7c:6f:
79:bc:cd:68:12:7d:bd:72:91:d4:bf:f5:51:5c:c3:d8:10:48:
23:c2:51:4b:18:f3:e5:33:e1:e3:8d:5a:dc:1b:4a:1b:93:fe:
ec:04:df:83:49:7b:50:20:7b:53:76:c5:cf:01:df:bc:da:fa:
26:81:be:8c:86:55:95:29:35:99:a4:7d:8d:05:43:04:c0:1d:
5b:72:6b:72:f5:80:c2:81:7f:00:a5:d2:7d:49:3f:6f:2c:ef:
23:bf:7d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:29:53 2026 by rpki-client