Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
File: NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft (raw, json)
Hash identifier: SDoElJ5uqk+0cIBgk+rbTCcsnS2BhbDXyvHA+jYqyHs=
Subject key identifier: 61:7E:D9:3F:4C:31:B8:B9:73:C8:BE:A5:1A:D8:C6:69:D1:2A:5C:B3
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 01A0D9BB5E70BD3C72946681677737809F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
Manifest number: 10D8
Signing time: Fri 25 Sep 2026 18:02:10 +0000
Manifest this update: Fri 25 Sep 2026 18:02:10 +0000
Manifest next update: Sat 26 Sep 2026 18:02:10 +0000
Files and hashes: 1: NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl (hash: gSLrEoJaP3QzBJinS+AytNE1rJJVcnpTzcdLTZMftMg=)
2: OyB8W9_wA5wbpLXiXUV8OttkP34.roa (hash: 0Tul/Q70maJ+aYBSNOe7pTN1kLta1YDTWvdIAUQpUg4=)
3: To1bIGbGp5M1LHEOYaAsoYMvFHM.roa (hash: J8108bKHwwomV0pOsdiePFOse+rC/Obmy+4s0xm8yGA=)
4: mnDV37o17I0BMCtvgbbSLcAn6Bc.roa (hash: Zf56A5N3eze8bYTELdKSyu3EXVQqDU3l8BuGCW7L2tc=)
5: so34H4EHsb2bvFRzdgNld87kNq8.roa (hash: tntM2l7FDBGtsKGRGPXiqst0BOOsbh2THcmt/BZuxRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:5e:70:bd:3c:72:94:66:81:67:77:37:80:9f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Sep 25 18:02:10 2026 GMT
Not After : Sep 26 18:02:10 2026 GMT
Subject: CN=617ed93f4c31b8b973c8bea51ad8c669d12a5cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:79:fe:f4:f4:cb:40:a1:6a:20:4e:d8:58:7d:
b6:32:fe:55:7e:25:8b:1a:b7:20:62:25:42:ca:e4:
77:d0:4a:95:33:a0:fc:b0:31:fe:b0:3b:99:7e:0e:
c1:07:70:86:97:c5:b3:5b:79:51:93:f7:16:9d:0b:
44:16:76:fd:1d:90:4b:41:77:64:58:00:34:2b:b8:
b5:dc:f2:99:f2:43:a3:f3:2d:85:ee:82:ce:53:71:
6d:77:43:dc:90:5d:32:c7:18:af:66:1f:7d:7c:f6:
cf:22:6b:25:2f:3d:65:9f:ef:8b:55:0a:ac:9e:d8:
a4:31:4c:51:7e:eb:10:4e:f6:1f:47:53:fd:f4:10:
34:59:7a:78:4f:a9:2e:6a:93:64:58:23:0a:b7:ba:
92:a7:f6:c7:9e:1a:91:8a:a2:fd:f3:35:c2:38:ec:
e3:27:d9:eb:f4:d0:89:18:89:a1:cc:c0:f4:f6:3b:
d7:e4:18:14:ca:bc:97:f6:e0:6a:f4:07:79:73:06:
a6:2d:03:74:61:d5:c0:4e:cd:21:7c:74:e5:1c:24:
e1:fe:df:ab:58:a7:ed:11:51:a8:ca:ff:d3:95:d6:
f7:e4:91:e1:ec:45:ca:10:a3:61:75:d8:71:de:6f:
37:81:c0:a3:0c:05:fd:96:e1:e6:e8:ac:cd:50:e2:
b7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7E:D9:3F:4C:31:B8:B9:73:C8:BE:A5:1A:D8:C6:69:D1:2A:5C:B3
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:79:3c:e8:50:e1:d9:33:4f:9e:1b:fe:18:37:e8:15:b7:82:
18:58:af:5e:c9:4e:68:eb:8d:1d:b6:e1:ce:3f:d1:03:3a:8f:
84:5d:94:f8:e1:a5:1a:c2:3a:1d:95:48:ef:00:ed:66:c5:e0:
a4:28:80:45:c1:d6:64:7a:e0:39:64:a0:83:08:9d:6b:04:50:
07:0d:d6:1c:5e:82:aa:b2:25:86:ec:ea:d1:71:41:79:f0:1d:
04:96:02:9f:d7:6b:f8:17:bc:61:97:e6:38:3b:01:58:44:d3:
1f:76:76:b2:81:c7:0f:ba:17:73:32:ec:93:18:97:1b:c8:8d:
cb:72:21:1d:12:a9:9d:d4:56:62:e5:7c:18:27:46:a6:5c:50:
32:73:db:4d:3f:fe:34:29:b4:92:fa:7a:4f:b5:4b:0f:53:fb:
db:c0:01:7d:fc:f4:1f:ef:54:d3:3c:77:59:cd:00:30:12:de:
f1:4c:ea:cb:74:fb:8f:55:76:ed:75:80:f4:1c:00:3e:f5:f5:
7b:a9:0f:42:ac:39:3f:26:b8:f4:ee:63:b6:46:68:3f:d3:e0:
46:e3:f9:1a:d3:5c:a8:81:e9:f5:91:07:ff:04:be:27:d6:03:
c4:2a:74:29:b8:83:f3:56:68:55:a5:5f:78:02:bc:24:27:f3:
e2:2d:9a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:38:41 2026 by rpki-client