Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: WMsyz5W3ijWItIQrdmnipZcDYrh05nrplFsAiSIIk/8=
Subject key identifier: D2:E5:F3:FD:59:FC:4B:31:7A:D0:F6:77:14:61:FE:6E:D8:50:6A:AE
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 019F9136216319C63BB8B8C316E5065B4703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 23:01:11 +0000
Manifest this update: Thu 23 Jul 2026 23:01:11 +0000
Manifest next update: Fri 24 Jul 2026 23:01:11 +0000
Files and hashes: 1: LQ7ZfmmMPaH0iabZ6SpEuDwVwhY.roa (hash: 63IcTifvN7GIBHWbBH7b1IB+sm33d6kXpSsxO8UgQ20=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: NKMWxtja+excc1sR4yten1wtwj7QVRSx7mR7ar89vm8=)
3: nAYbbcKPFybTolioZUuHNTDXSns.roa (hash: G2BPAGwcm8vlEODkeUJvlJFoh73yV7+X0s3ozIpcRZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:36:21:63:19:c6:3b:b8:b8:c3:16:e5:06:5b:47:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Jul 23 23:01:11 2026 GMT
Not After : Jul 24 23:01:11 2026 GMT
Subject: CN=d2e5f3fd59fc4b317ad0f6771461fe6ed8506aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:a9:45:04:ed:dd:a5:21:46:9b:53:ac:c0:
b0:18:eb:ef:26:83:fb:4a:05:d7:6a:d3:bc:5f:d3:
59:7b:d0:a4:31:ab:e0:e5:b0:d5:f3:f0:1f:a3:2f:
f1:b6:ad:ac:07:69:3c:94:de:93:05:51:ae:b5:5f:
3d:d0:93:0a:d6:d8:76:ff:e6:91:2b:5e:4b:b3:54:
fe:5c:7b:36:f3:e0:bf:33:57:65:f7:e0:cb:a3:2f:
81:00:4a:85:6b:73:80:45:73:29:bf:8d:11:9d:a0:
0b:7e:29:51:cd:0c:45:a2:d5:c1:e9:3c:6a:33:f1:
74:6a:fb:c9:dd:73:8d:c6:15:3a:6a:a7:f7:4e:fc:
4a:57:1a:2f:56:6b:fa:f5:0f:6a:a0:fa:45:b4:e1:
17:ef:f9:61:55:ae:5d:51:13:c6:46:9d:0b:c9:5b:
e8:8d:fa:ec:86:73:2d:ad:b6:e3:19:2a:2c:cf:42:
e5:0e:ac:b5:42:cd:a7:83:e0:1d:7c:23:a0:67:25:
34:29:15:eb:3d:1e:46:a8:18:b7:d5:4a:14:2e:ae:
b5:ca:1d:4c:49:02:73:4c:9b:e4:67:6d:9c:9c:76:
8a:c9:97:dd:da:e9:0f:0f:09:fc:e3:2e:24:30:6c:
b7:31:bf:87:89:1c:02:4c:74:39:31:30:c0:01:bf:
2a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E5:F3:FD:59:FC:4B:31:7A:D0:F6:77:14:61:FE:6E:D8:50:6A:AE
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1a:42:72:65:9a:f8:1f:15:17:c4:c6:50:a1:23:70:67:c9:
a6:d0:27:43:e7:3c:85:78:67:1d:6a:2b:6c:85:8d:49:6b:7c:
60:f8:4f:e9:e5:ff:5e:19:f9:2d:d8:5a:88:2c:e0:c7:82:d4:
e7:cc:04:5b:d9:a1:70:4f:1d:ca:52:31:e2:d1:f5:7b:f7:b9:
77:a0:b1:1b:f5:3d:6e:ee:c6:2c:7a:9b:a4:94:82:f5:57:1c:
fd:e3:13:e4:ab:88:ea:65:30:ce:01:80:0d:fc:6b:10:ef:a3:
b7:20:d4:c5:04:28:ae:10:9b:ab:68:e1:70:79:50:ee:8c:1a:
7b:ac:2f:ed:4e:93:9d:5a:86:93:8e:cd:e1:40:75:3e:ae:ce:
05:5c:b5:7e:3d:c9:69:4e:e0:11:aa:ec:26:d8:d4:fc:a4:2c:
96:cd:bf:44:57:66:49:e6:c8:13:34:44:e3:6b:fc:eb:72:5f:
09:c6:2a:ac:29:f7:c7:b3:e6:e6:3f:ae:8a:f0:72:ba:b9:58:
20:6e:8e:97:4e:0a:76:4b:73:fb:cf:e2:b5:d1:1b:b6:3a:b8:
af:de:2a:1c:68:54:ca:bc:33:d1:6d:66:42:bf:6d:84:f3:1a:
a4:4f:5e:c2:3c:34:f5:50:1d:b8:4d:92:ba:23:c9:d1:68:fd:
24:1d:ee:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:30 2026 by rpki-client