Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: 9vi/D5hApIvkjUNl9yX3OkW/LddtRww32R7u44LbaHk=
Subject key identifier: C0:A2:06:15:5A:6F:08:C3:5A:28:DF:12:85:4F:69:91:80:F3:59:C1
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 01A0DA9672C125F3B2620AD38FABB312D901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 1A7A
Signing time: Fri 25 Sep 2026 22:01:27 +0000
Manifest this update: Fri 25 Sep 2026 22:01:27 +0000
Manifest next update: Sat 26 Sep 2026 22:01:27 +0000
Files and hashes: 1: DOdbQIaTN2-U6lBMiFCsU2jbWrk.roa (hash: fX0ZPGU2Ep4sA5JGb1FOHePhR06Bt3nJo7FLowUZnbQ=)
2: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: 5TZJ9UA4h1vtqa4r8Ica4ntCbbc39svYLYoMyZ7/NZc=)
3: dsrIojswrtCAaVDG7x95eUR5UNs.roa (hash: qILxj7yICSM2GLcGcjXclEWNMSwoXtcOFYbxsTUB7mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:72:c1:25:f3:b2:62:0a:d3:8f:ab:b3:12:d9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Sep 25 22:01:27 2026 GMT
Not After : Sep 26 22:01:27 2026 GMT
Subject: CN=c0a206155a6f08c35a28df12854f699180f359c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:e6:30:7e:31:fd:3b:4e:cf:ce:e6:df:49:
d6:27:c8:62:4d:42:ed:a5:ea:e8:fc:dd:aa:ca:74:
4e:50:2c:83:e5:15:34:2d:70:cc:3f:c4:fc:8c:2e:
35:82:98:ba:0c:a9:f8:d0:5e:3f:27:61:87:f6:ef:
e7:53:5a:a0:d1:b2:29:18:4b:cd:f9:fe:34:94:7b:
15:ee:cf:2f:ad:69:ed:cf:37:a4:bf:64:af:4d:42:
1b:bc:ad:4f:a6:61:96:f2:16:33:b7:90:4d:fc:b8:
f6:73:7f:74:02:bf:b2:0e:14:4a:b5:2d:d2:9c:d5:
b1:e6:49:04:1a:68:12:72:a3:da:70:1c:c4:d4:95:
e6:77:d0:23:2a:85:df:f6:69:ae:ea:81:9e:d8:d5:
14:5f:4c:65:a1:81:65:1c:ac:c6:58:8c:f8:58:2b:
da:d4:4c:18:d8:7f:a9:29:ba:d3:c5:36:9e:3a:b3:
50:dd:04:92:c1:f2:89:19:a7:cc:81:5d:cb:ac:d4:
fe:d8:32:5e:eb:fa:e5:39:7d:35:9c:a4:5a:36:e9:
22:42:58:32:29:ae:31:1f:23:76:33:28:5d:02:2d:
42:1a:67:6d:d2:4d:e6:95:f9:8b:c0:3e:f9:fd:6b:
82:bd:fa:df:29:00:df:a5:35:cf:95:df:f6:1a:23:
37:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A2:06:15:5A:6F:08:C3:5A:28:DF:12:85:4F:69:91:80:F3:59:C1
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:af:b3:2f:18:ce:d0:ed:4e:eb:3f:64:4d:fc:e2:54:94:6a:
e6:58:5d:62:a1:37:26:4e:ce:72:aa:83:6a:3c:8b:de:be:1f:
90:13:a2:1c:51:39:b7:41:b8:95:ff:da:07:4d:b5:b9:2d:e9:
f8:73:9b:a0:98:d8:a5:79:fd:10:e2:b5:e3:21:6e:36:8d:c4:
40:02:04:1a:ac:d6:b3:cf:e2:d6:e2:04:72:da:c9:d3:f3:ef:
a5:31:24:eb:65:34:36:ee:cc:45:af:de:f1:44:bb:e3:b2:1c:
73:d0:da:70:9f:7b:16:be:88:04:3d:c4:0d:47:3d:97:b6:47:
1e:8f:cb:9e:b1:54:63:aa:6a:d6:3a:3b:28:95:5d:f2:6c:72:
ff:1e:00:69:37:24:79:e7:fb:f4:98:01:33:47:2c:71:f9:3c:
40:a6:9c:39:2c:f1:1d:c5:3d:35:8d:3b:04:52:76:1a:5b:2b:
da:c6:e0:cd:df:d1:13:bd:63:36:4e:ec:7e:73:f7:d8:cc:cf:
f4:93:26:28:6d:ba:d3:0c:02:67:8e:ac:7c:49:0a:ee:65:78:
d3:be:71:7f:6f:45:bd:93:de:39:33:12:30:a3:92:12:50:36:
f7:f1:80:c3:c1:6b:1b:dc:95:3c:d2:78:1e:98:d2:11:ac:c2:
50:4b:be:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDalnLBJfOyYgrTj6uzEtkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YjQxM2U1MzZkOTkzNTNmMGIwNTBlZTc0NmZmZGQyNGVk
YjU5MzAwHhcNMjYwOTI1MjIwMTI3WhcNMjYwOTI2MjIwMTI3WjAzMTEwLwYDVQQD
EyhjMGEyMDYxNTVhNmYwOGMzNWEyOGRmMTI4NTRmNjk5MTgwZjM1OWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO7mMH4x/TtOz87m30nWJ8hiTULt
pero/N2qynROUCyD5RU0LXDMP8T8jC41gpi6DKn40F4/J2GH9u/nU1qg0bIpGEvN
+f40lHsV7s8vrWntzzekv2SvTUIbvK1PpmGW8hYzt5BN/Lj2c390Ar+yDhRKtS3S
nNWx5kkEGmgScqPacBzE1JXmd9AjKoXf9mmu6oGe2NUUX0xloYFlHKzGWIz4WCva
1EwY2H+pKbrTxTaeOrNQ3QSSwfKJGafMgV3LrNT+2DJe6/rlOX01nKRaNukiQlgy
Ka4xHyN2MyhdAi1CGmdt0k3mlfmLwD75/WuCvfrfKQDfpTXPld/2GiM3iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCiBhVabwjDWijfEoVPaZGA81nBMB8GA1UdIwQY
MBaAFDa0E+U22ZNT8LBQ7nRv/dJO21kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lNjYyOTYtMDQ3OS00YzUyLTljZWEt
YTFmNTczZDA2OWRhLzEvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9lNjYyOTYtMDQ3OS00YzUyLTljZWEtYTFmNTczZDA2OWRh
LzEvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0a+zLxjO
0O1O6z9kTfziVJRq5lhdYqE3Jk7OcqqDajyL3r4fkBOiHFE5t0G4lf/aB021uS3p
+HOboJjYpXn9EOK14yFuNo3EQAIEGqzWs8/i1uIEctrJ0/PvpTEk62U0Nu7MRa/e
8US747Icc9DacJ97Fr6IBD3EDUc9l7ZHHo/LnrFUY6pq1jo7KJVd8mxy/x4AaTck
eef79JgBM0cscfk8QKacOSzxHcU9NY07BFJ2Glsr2sbgzd/RE71jNk7sfnP32MzP
9JMmKG260wwCZ46sfEkK7mV4075xf29FvZPeOTMSMKOSElA29/GAw8FrG9yVPNJ4
HpjSEazCUEu+4g==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:24:21 2026 by rpki-client