Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
File: NmqdVCKXV3s3qgxCMZWv4qmOE10.mft (raw, json)
Hash identifier: J/uB1Az3ndqFX6pP6b62eD0mW+wOTFpSPoiJlje1aVY=
Subject key identifier: BE:86:29:A6:7C:44:D7:85:0A:78:C6:33:8E:B7:0A:7A:39:96:EE:63
Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
Certificate issuer: /CN=366a9d542297577b37aa0c423195afe2a98e135d
Certificate serial: 019E1DC6FD946B4AEAAB836C4C83459E3E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 20:00:40 +0000
Manifest this update: Tue 12 May 2026 20:00:40 +0000
Manifest next update: Wed 13 May 2026 20:00:40 +0000
Files and hashes: 1: 1IT2YxPCfIxNq71vO4148RYnUFE.roa (hash: Wc3xK74C+nn8hA7fgodWur3oZYQffDuB/6q65gbxW3o=)
2: MiAk1Fn8h7yjl0ZEieRDcfLk_Ys.roa (hash: czv9oaDX9uocQn5ZLcnNiN6ZQ7Qagrx62umbfHCmvmg=)
3: NmqdVCKXV3s3qgxCMZWv4qmOE10.crl (hash: RbZ6WM+oW9ebAyAce61cZrSEZFTbtQXCLNxesyINKuo=)
4: pP3Gylt_cXScwQG05O-i7ZbberI.roa (hash: D1R0gSpuoCuRFT+1LOp+3fEZGMYLA7llVr4974Zw4U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c6:fd:94:6b:4a:ea:ab:83:6c:4c:83:45:9e:3e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d
Validity
Not Before: May 12 20:00:40 2026 GMT
Not After : May 13 20:00:40 2026 GMT
Subject: CN=be8629a67c44d7850a78c6338eb70a7a3996ee63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:1a:96:67:a1:79:68:04:9c:00:54:75:0c:
ea:ff:8e:01:44:5a:df:0a:47:16:ac:20:51:03:6f:
b4:76:74:91:2d:6e:27:84:25:98:24:d3:38:30:0a:
51:6d:0b:e2:6f:6e:9e:59:cf:92:51:3f:c4:99:07:
92:f3:11:fb:70:8a:79:6f:cc:4a:e1:1c:73:08:65:
c2:30:a0:8e:00:3e:b1:87:a4:ef:6c:e2:09:ea:c3:
a4:5a:f3:c9:08:cc:e9:20:2f:51:8f:33:bd:ba:2b:
2f:3e:ee:c8:be:ad:cb:b5:15:db:5d:1c:59:1d:97:
5f:5f:23:3f:88:4e:9c:ba:2f:4c:f6:a5:60:6f:b1:
c9:83:05:a1:87:c5:19:7f:81:8a:97:5e:9f:1c:e2:
6a:8c:df:e1:96:ec:d0:b2:bf:5a:7a:39:77:58:6f:
5f:75:3c:56:35:20:ca:9f:c4:19:b4:a5:3a:79:89:
a7:65:94:19:a4:a9:a4:4e:7c:82:62:aa:0a:79:3f:
4d:c5:8a:9a:21:60:c4:0a:e4:59:35:e9:d9:de:b3:
dc:7e:78:97:7d:2f:75:04:dd:e6:f0:19:d3:bb:46:
cc:40:d7:fe:4c:ae:f1:99:1a:6a:29:45:a8:69:08:
bb:ac:9b:8d:4c:1b:48:54:ca:28:23:ae:7d:96:e9:
bb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:86:29:A6:7C:44:D7:85:0A:78:C6:33:8E:B7:0A:7A:39:96:EE:63
X509v3 Authority Key Identifier:
keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:62:6b:6b:7b:f8:f1:f1:bd:33:f7:dc:58:ba:2b:af:8f:0c:
ca:6a:75:ab:90:11:87:5f:7e:f2:66:50:29:ba:f0:10:ca:7f:
3f:51:0d:3b:62:81:f1:b6:22:9d:f0:4c:2b:12:63:7d:a2:d9:
00:85:4f:45:b6:10:6c:63:6d:c5:59:bc:3c:99:53:88:e9:22:
75:79:b0:21:bc:35:4a:a0:1f:12:c6:70:d1:8e:0c:5f:2e:e3:
d9:de:77:11:1e:2e:53:23:10:9a:79:88:0f:b8:f9:72:db:61:
8b:4c:66:f7:e4:70:f8:7a:fc:74:4b:fe:c9:d3:bd:32:56:98:
e1:f6:ec:ad:ca:23:88:37:37:ec:8d:b3:d8:38:30:3e:f3:62:
31:c4:d4:0f:9d:a3:13:49:ca:44:15:86:d8:5b:12:ad:d1:0e:
6d:6f:76:a7:cb:40:05:65:47:81:e0:b7:e7:04:02:48:e3:0f:
71:b1:1a:21:4e:db:e6:a3:c9:9e:e5:39:f8:36:05:17:35:08:
f9:d3:f1:37:a8:af:c6:5d:cc:ac:2b:c8:b0:df:a2:7c:aa:d1:
aa:93:25:11:c3:1a:ef:7e:c5:7e:83:52:04:ba:b6:f2:8b:d0:
51:29:e3:bb:3d:66:ef:23:5f:76:ea:68:c9:8f:eb:23:72:9f:
41:c2:7e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:33:12 2026 by rpki-client