
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
File: NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft (raw, json)
Hash identifier: fpm6pEMgk9DlO7GGSmcXodDKv1iqB/8Sn/haWc63yK8=
Subject key identifier: C6:3D:1C:B2:94:D7:E3:B3:2E:17:D2:8C:D5:87:00:CF:9E:87:5F:B0
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 01A0D0118BEBF0A243EA881B9449EBE98556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
Manifest number: 10D3
Signing time: Wed 23 Sep 2026 21:00:05 +0000
Manifest this update: Wed 23 Sep 2026 21:00:05 +0000
Manifest next update: Thu 24 Sep 2026 21:00:05 +0000
Files and hashes: 1: NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl (hash: s4jY1sMLreEQLWuYqEIBeFyM/RnmopzWD07FczaLIZI=)
2: OyB8W9_wA5wbpLXiXUV8OttkP34.roa (hash: 0Tul/Q70maJ+aYBSNOe7pTN1kLta1YDTWvdIAUQpUg4=)
3: To1bIGbGp5M1LHEOYaAsoYMvFHM.roa (hash: J8108bKHwwomV0pOsdiePFOse+rC/Obmy+4s0xm8yGA=)
4: mnDV37o17I0BMCtvgbbSLcAn6Bc.roa (hash: Zf56A5N3eze8bYTELdKSyu3EXVQqDU3l8BuGCW7L2tc=)
5: so34H4EHsb2bvFRzdgNld87kNq8.roa (hash: tntM2l7FDBGtsKGRGPXiqst0BOOsbh2THcmt/BZuxRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:8b:eb:f0:a2:43:ea:88:1b:94:49:eb:e9:85:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Sep 23 21:00:05 2026 GMT
Not After : Sep 24 21:00:05 2026 GMT
Subject: CN=c63d1cb294d7e3b32e17d28cd58700cf9e875fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b5:62:cc:cc:01:83:af:f2:c4:05:c6:b4:dc:
3a:6d:6f:a2:e2:c9:07:9f:ff:dd:04:b4:5d:6d:41:
fd:88:c5:c4:9d:1d:16:ae:da:bf:72:6a:fa:a3:78:
24:35:2e:e5:26:ac:e7:e3:b9:77:54:6c:03:07:e0:
d0:ab:dd:5f:70:73:90:78:fa:b9:f1:d0:71:d6:ed:
3f:92:d0:48:65:76:ff:ec:86:98:6e:64:0a:7b:f5:
35:3c:43:ab:27:94:b9:e8:e3:93:db:7c:74:ba:2b:
62:89:a2:22:be:27:f3:c1:85:c0:82:c6:c2:f6:1d:
1f:02:4a:2e:32:75:01:e3:9a:4b:44:95:07:dd:75:
44:07:f4:b0:81:fa:be:8f:b3:7a:d9:1d:98:1a:4d:
0a:de:bc:4c:a2:3f:d3:64:07:0f:f1:cc:77:3a:66:
f6:a2:27:9c:f6:22:b0:6e:fa:3b:06:67:47:bc:db:
d2:96:c5:5c:98:c1:2d:d5:30:9e:5f:73:07:a6:6c:
50:6d:8d:eb:e3:64:b7:0d:6a:30:80:ab:00:97:25:
fb:00:36:ef:d7:f3:c7:09:eb:86:a0:61:12:c6:31:
2b:cc:4a:03:66:2f:32:e5:83:1c:c3:67:43:9d:0d:
31:f1:8f:52:47:79:28:ed:f2:a9:bf:13:e7:e7:7c:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3D:1C:B2:94:D7:E3:B3:2E:17:D2:8C:D5:87:00:CF:9E:87:5F:B0
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:28:7d:1e:b1:ff:d7:cf:3a:83:45:9d:d7:96:9c:54:ea:cb:
94:60:a9:be:42:eb:04:fb:79:8d:02:95:7a:d1:e6:03:bb:a2:
ac:c2:a2:f0:4e:c1:f3:17:08:1b:ab:74:09:a2:56:a9:8b:50:
19:d4:a4:03:94:9f:d2:9f:45:a5:f5:81:16:02:7b:d2:79:e6:
66:13:b6:e2:04:e8:7f:16:c6:4e:d7:98:33:af:22:f0:c7:b0:
88:f0:06:1d:7a:34:99:b1:84:8c:0d:24:ce:82:3b:08:97:e7:
14:9c:ad:49:25:ca:a2:b8:1d:20:a4:ee:f2:eb:38:18:37:51:
93:e5:b2:d6:54:c4:c3:f6:75:1b:e3:df:6a:6c:c8:bf:5e:11:
fc:86:b3:4a:eb:12:68:93:85:56:27:21:db:c6:4e:33:59:25:
13:40:a9:cc:a7:98:83:28:15:65:0a:7d:76:c6:07:a1:41:c9:
f1:bc:32:68:c4:06:4d:a1:be:b3:d7:11:d7:46:33:cc:8d:2f:
07:63:7b:4c:88:99:a3:f2:0a:bd:3b:f5:a6:b9:42:82:9a:34:
12:cd:31:04:cb:3a:1a:c4:58:4a:55:41:1f:00:82:f3:92:30:
07:a3:a2:6e:87:68:6e:d7:16:b6:57:b8:97:d4:7f:60:17:ef:
7f:95:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:57:37 2026 by rpki-client