Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: lGsRDyw2ha5OPjtBrzsn2uEV3HMaTj8j8SY6cojo/Co=
Subject key identifier: 43:7B:AD:B0:A4:8F:2B:90:E9:36:F3:27:E4:94:BF:D7:60:6C:A7:26
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 01A0E32BAFD976C56AFB4B24BE4CE093977E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 1A78
Signing time: Sun 27 Sep 2026 14:01:26 +0000
Manifest this update: Sun 27 Sep 2026 14:01:26 +0000
Manifest next update: Mon 28 Sep 2026 14:01:26 +0000
Files and hashes: 1: LQ7ZfmmMPaH0iabZ6SpEuDwVwhY.roa (hash: 63IcTifvN7GIBHWbBH7b1IB+sm33d6kXpSsxO8UgQ20=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: yNfRb2YP5/uI1Na457iGYqiNa8O5RPhHosEwXq5cM0k=)
3: nAYbbcKPFybTolioZUuHNTDXSns.roa (hash: G2BPAGwcm8vlEODkeUJvlJFoh73yV7+X0s3ozIpcRZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:af:d9:76:c5:6a:fb:4b:24:be:4c:e0:93:97:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Sep 27 14:01:26 2026 GMT
Not After : Sep 28 14:01:26 2026 GMT
Subject: CN=437badb0a48f2b90e936f327e494bfd7606ca726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:da:d4:5b:ed:4f:90:d9:2f:6d:3b:53:32:e1:
99:bf:65:65:fc:cb:f1:38:15:bc:2d:2c:8d:61:6a:
b3:61:22:1e:70:91:43:42:c6:79:c5:a1:94:43:be:
05:c8:98:40:2b:d7:90:4f:94:dc:73:d6:cf:1e:ed:
7f:ba:c1:11:26:9c:f1:f6:b3:d0:b7:f3:5c:f9:fe:
6f:96:9d:1b:57:39:9b:d2:ba:78:8a:db:9d:76:6a:
79:51:58:da:0a:9b:c3:b7:bc:39:26:92:22:3b:9b:
5c:f1:f1:b2:13:9b:b0:70:81:b4:a6:38:46:33:94:
c0:c5:db:ea:30:c5:21:62:e6:62:2a:63:e4:7f:2b:
5d:25:be:8d:3b:44:70:b1:e4:7f:a4:97:e6:eb:67:
7e:9c:78:ad:58:19:32:fe:02:7f:70:5b:25:2f:56:
b9:b2:6d:e6:23:d2:9b:50:d8:3e:fc:7a:36:d0:94:
3f:29:07:f7:7d:9d:c2:7f:b0:ef:98:87:10:97:c0:
eb:fc:1f:55:84:d4:d8:a1:61:da:00:10:f0:f6:ce:
7a:fa:ff:12:c0:a6:69:c1:92:1f:be:f9:df:b9:0e:
d5:50:0c:d8:b5:49:e4:95:4e:8d:a2:f3:2c:a4:7c:
52:e2:97:2e:b9:3a:6e:06:b7:31:04:74:e7:6b:13:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7B:AD:B0:A4:8F:2B:90:E9:36:F3:27:E4:94:BF:D7:60:6C:A7:26
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e1:f9:2e:1b:cf:82:48:4d:e7:42:8b:e8:25:5e:0b:cb:bd:
10:e3:85:a1:95:f0:d5:a5:49:b7:ec:58:44:fa:02:96:72:bb:
88:6e:97:a5:cf:18:3e:6b:4d:bf:06:7c:af:88:24:a3:a0:3d:
ab:b1:40:96:34:9c:3b:13:fb:81:54:99:40:d2:ff:4a:cd:d2:
41:14:50:35:1c:96:28:7f:8a:fa:b0:26:48:dc:b8:b5:e2:ff:
0b:ee:e7:93:2f:d6:d7:78:cc:44:07:35:28:ce:e0:bb:0c:22:
99:20:5e:cf:be:12:32:69:e9:bb:37:4c:8f:ac:98:14:0e:c0:
a5:30:7b:0c:58:09:7a:f7:f6:60:76:3a:97:9a:49:9c:13:06:
98:1b:52:d9:35:88:ce:8f:81:28:40:1b:85:43:c4:d3:8b:f1:
ac:a8:9c:0e:49:b3:9a:3e:f1:07:f5:d8:13:81:b6:06:a6:b4:
8d:9d:f3:90:6e:33:0a:d7:81:ed:42:50:37:cf:d0:70:0c:40:
57:13:a8:cf:13:73:6b:1c:b7:30:aa:84:f6:77:c2:41:03:b5:
91:56:4e:03:55:fa:60:3f:06:32:76:15:05:2c:2d:7d:48:db:
ec:95:8f:e5:55:0b:8d:91:b9:fb:24:74:e3:65:20:9c:00:49:
52:2b:a6:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDjK6/ZdsVq+0skvkzgk5d+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YTQ2NjhmZjgzODE0YWY5MGE3OGI0ZmM4ZDI2MjMyNTA1
OGNiYzYwHhcNMjYwOTI3MTQwMTI2WhcNMjYwOTI4MTQwMTI2WjAzMTEwLwYDVQQD
Eyg0MzdiYWRiMGE0OGYyYjkwZTkzNmYzMjdlNDk0YmZkNzYwNmNhNzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8NrUW+1PkNkvbTtTMuGZv2Vl/Mvx
OBW8LSyNYWqzYSIecJFDQsZ5xaGUQ74FyJhAK9eQT5Tcc9bPHu1/usERJpzx9rPQ
t/Nc+f5vlp0bVzmb0rp4ituddmp5UVjaCpvDt7w5JpIiO5tc8fGyE5uwcIG0pjhG
M5TAxdvqMMUhYuZiKmPkfytdJb6NO0RwseR/pJfm62d+nHitWBky/gJ/cFslL1a5
sm3mI9KbUNg+/Ho20JQ/KQf3fZ3Cf7DvmIcQl8Dr/B9VhNTYoWHaABDw9s56+v8S
wKZpwZIfvvnfuQ7VUAzYtUnklU6NovMspHxS4pcuuTpuBrcxBHTnaxPQ4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEN7rbCkjyuQ6TbzJ+SUv9dgbKcmMB8GA1UdIwQY
MBaAFDakZo/4OBSvkKeLT8jSYjJQWMvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3Yjkt
OTBlNjU0MTIyNTJhLzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3YjktOTBlNjU0MTIyNTJh
LzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeH5LhvP
gkhN50KL6CVeC8u9EOOFoZXw1aVJt+xYRPoClnK7iG6Xpc8YPmtNvwZ8r4gko6A9
q7FAljScOxP7gVSZQNL/Ss3SQRRQNRyWKH+K+rAmSNy4teL/C+7nky/W13jMRAc1
KM7guwwimSBez74SMmnpuzdMj6yYFA7ApTB7DFgJevf2YHY6l5pJnBMGmBtS2TWI
zo+BKEAbhUPE04vxrKicDkmzmj7xB/XYE4G2Bqa0jZ3zkG4zCteB7UJQN8/QcAxA
VxOozxNzaxy3MKqE9nfCQQO1kVZOA1X6YD8GMnYVBSwtfUjb7JWP5VULjZG5+yR0
42UgnABJUiumlw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 23:16:03 2026 by rpki-client