Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: 1IEvGqwyFVu77Mz0cbcnc+rWkBKMBf/JdPvffum+Xlo=
Subject key identifier: 43:31:AF:ED:89:D6:AF:0C:6B:34:3B:2D:79:EB:C0:5C:14:BB:C1:BE
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 019F9059E62DA26C4DE5E96B5C1A96542826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 19CF
Signing time: Thu 23 Jul 2026 19:00:38 +0000
Manifest this update: Thu 23 Jul 2026 19:00:38 +0000
Manifest next update: Fri 24 Jul 2026 19:00:38 +0000
Files and hashes: 1: DOdbQIaTN2-U6lBMiFCsU2jbWrk.roa (hash: fX0ZPGU2Ep4sA5JGb1FOHePhR06Bt3nJo7FLowUZnbQ=)
2: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: uJCCj2AvDgw6t4Xz4ObqwgV9wZ0LHURzlwROe5Pneeg=)
3: dsrIojswrtCAaVDG7x95eUR5UNs.roa (hash: qILxj7yICSM2GLcGcjXclEWNMSwoXtcOFYbxsTUB7mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:e6:2d:a2:6c:4d:e5:e9:6b:5c:1a:96:54:28:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Jul 23 19:00:38 2026 GMT
Not After : Jul 24 19:00:38 2026 GMT
Subject: CN=4331afed89d6af0c6b343b2d79ebc05c14bbc1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:2f:4a:38:f7:0a:19:f1:d9:53:7a:89:bf:
9c:f3:98:ce:e8:6d:7f:a8:01:51:a7:ab:27:cd:76:
b6:5d:6d:1c:12:15:3d:ab:7b:90:7c:4b:21:ff:06:
d3:79:f8:3c:45:bf:f1:4c:83:bb:9c:97:ef:c5:a5:
e2:35:6a:70:39:1a:f0:75:ca:29:3f:52:de:e3:de:
7c:43:59:8c:14:dd:96:a2:41:d1:c5:dd:70:15:bb:
77:1e:d3:33:18:c0:4e:d2:8b:fa:d5:85:bc:de:c0:
0d:02:1b:9b:e1:cd:57:f7:b9:51:17:5e:52:60:40:
e8:ca:a5:93:27:ba:83:6b:99:eb:01:f9:90:de:d0:
b4:ab:f2:ea:15:c9:0d:d2:1d:a1:be:c8:9f:39:08:
3d:a7:44:9b:d3:20:b9:f6:cd:db:15:ef:99:fb:aa:
6b:e1:fa:bc:0b:b2:c2:e0:8d:8f:fd:9d:45:54:a3:
11:e2:50:49:72:59:a6:82:15:96:96:66:b0:34:d7:
97:39:87:b8:59:37:f1:b6:1f:bf:65:6c:f7:46:83:
d9:63:70:6c:a1:a6:08:2f:de:bb:fe:a8:27:34:a2:
42:fd:62:e2:01:f6:07:77:5f:43:d9:06:cf:d6:9e:
26:42:2f:4a:d4:81:36:a4:53:ef:5d:2f:05:51:52:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:31:AF:ED:89:D6:AF:0C:6B:34:3B:2D:79:EB:C0:5C:14:BB:C1:BE
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:34:e8:3f:db:d7:24:8b:b7:80:c9:07:37:5f:d4:35:d8:40:
28:a0:4b:ad:09:55:51:99:c6:85:e2:ed:a4:60:61:6f:1b:46:
31:92:72:73:97:77:6c:aa:d1:b6:39:75:b1:e1:df:f7:29:12:
bc:5b:7e:d3:e3:0c:2e:23:84:81:34:b3:b9:d5:d3:45:06:e4:
c9:87:47:b7:8a:62:40:41:db:71:33:b2:cd:21:90:ea:0d:d9:
9f:db:f5:ac:2c:d8:da:9d:2a:7f:f5:f5:c8:46:6d:eb:8e:ec:
fa:8a:68:f3:e1:7b:70:dd:d3:ad:89:49:b6:ed:d9:e6:8b:47:
91:a8:5b:8b:d4:f8:5f:35:62:1c:2e:ab:cf:fe:3e:73:45:38:
30:4b:d4:78:04:87:e8:46:d0:cf:ce:2b:a9:05:2f:0d:ef:e4:
28:15:69:7d:89:ba:19:a4:da:72:01:8a:5f:92:1b:13:ac:30:
01:94:87:e1:65:dd:ca:ba:b1:8c:b3:6e:4c:a2:f6:13:af:88:
6b:a7:f0:1c:14:3d:4e:11:c3:96:a0:9c:ee:0a:27:3f:25:d0:
ac:2b:65:53:e8:a9:bf:66:3d:a1:44:1d:df:d5:0e:01:0e:8c:
4d:f3:60:46:dd:3b:44:63:17:02:82:8f:22:17:08:0c:a1:bc:
92:99:14:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWeYtomxN5elrXBqWVCgmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YjQxM2U1MzZkOTkzNTNmMGIwNTBlZTc0NmZmZGQyNGVk
YjU5MzAwHhcNMjYwNzIzMTkwMDM4WhcNMjYwNzI0MTkwMDM4WjAzMTEwLwYDVQQD
Eyg0MzMxYWZlZDg5ZDZhZjBjNmIzNDNiMmQ3OWViYzA1YzE0YmJjMWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTQvSjj3Chnx2VN6ib+c85jO6G1/
qAFRp6snzXa2XW0cEhU9q3uQfEsh/wbTefg8Rb/xTIO7nJfvxaXiNWpwORrwdcop
P1Le4958Q1mMFN2WokHRxd1wFbt3HtMzGMBO0ov61YW83sANAhub4c1X97lRF15S
YEDoyqWTJ7qDa5nrAfmQ3tC0q/LqFckN0h2hvsifOQg9p0Sb0yC59s3bFe+Z+6pr
4fq8C7LC4I2P/Z1FVKMR4lBJclmmghWWlmawNNeXOYe4WTfxth+/ZWz3RoPZY3Bs
oaYIL967/qgnNKJC/WLiAfYHd19D2QbP1p4mQi9K1IE2pFPvXS8FUVLL7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMxr+2J1q8MazQ7LXnrwFwUu8G+MB8GA1UdIwQY
MBaAFDa0E+U22ZNT8LBQ7nRv/dJO21kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lNjYyOTYtMDQ3OS00YzUyLTljZWEt
YTFmNTczZDA2OWRhLzEvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9lNjYyOTYtMDQ3OS00YzUyLTljZWEtYTFmNTczZDA2OWRh
LzEvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDToP9vX
JIu3gMkHN1/UNdhAKKBLrQlVUZnGheLtpGBhbxtGMZJyc5d3bKrRtjl1seHf9ykS
vFt+0+MMLiOEgTSzudXTRQbkyYdHt4piQEHbcTOyzSGQ6g3Zn9v1rCzY2p0qf/X1
yEZt647s+opo8+F7cN3TrYlJtu3Z5otHkahbi9T4XzViHC6rz/4+c0U4MEvUeASH
6EbQz84rqQUvDe/kKBVpfYm6GaTacgGKX5IbE6wwAZSH4WXdyrqxjLNuTKL2E6+I
a6fwHBQ9ThHDlqCc7gonPyXQrCtlU+ipv2Y9oUQd39UOAQ6MTfNgRt07RGMXAoKP
IhcIDKG8kpkUbw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:06 2026 by rpki-client