Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: m5Eh+no4cwnfZ/nvGLYsUKeCQeLoH2u547PgDNEoyZI=
Subject key identifier: A6:9F:AB:07:3F:49:73:29:C7:56:AC:19:DA:19:59:B9:17:F6:B1:6C
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 019E205A245C4046FBF36E9ECFBCAA18AF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 08:00:38 +0000
Manifest this update: Wed 13 May 2026 08:00:38 +0000
Manifest next update: Thu 14 May 2026 08:00:38 +0000
Files and hashes: 1: LQ7ZfmmMPaH0iabZ6SpEuDwVwhY.roa (hash: 63IcTifvN7GIBHWbBH7b1IB+sm33d6kXpSsxO8UgQ20=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: yHhtSfUdjgsaOXhlAa8RnV/de2vbbSUj5HSuKyWjIvY=)
3: nAYbbcKPFybTolioZUuHNTDXSns.roa (hash: G2BPAGwcm8vlEODkeUJvlJFoh73yV7+X0s3ozIpcRZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:24:5c:40:46:fb:f3:6e:9e:cf:bc:aa:18:af:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: May 13 08:00:38 2026 GMT
Not After : May 14 08:00:38 2026 GMT
Subject: CN=a69fab073f497329c756ac19da1959b917f6b16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:16:2d:48:ce:81:31:38:20:c5:2a:90:f6:
a7:b1:42:2c:b9:cf:61:13:89:86:2e:5b:e5:39:41:
8a:ba:e7:ea:92:1f:0a:d0:fb:10:93:da:cb:0a:e6:
24:7b:56:22:ed:35:9d:0a:59:2d:53:94:f7:09:5b:
26:58:63:9c:c5:69:70:7a:92:14:d5:e3:00:a7:36:
3d:e2:db:2d:8e:bc:c9:5d:ea:b8:b0:9e:59:cf:b3:
6f:03:44:e9:d3:7d:5d:df:e7:c5:85:42:4d:37:38:
b0:30:7d:43:77:2b:a4:cb:d3:db:15:13:50:1a:26:
b2:a6:b3:f9:b1:63:98:26:cc:b1:9a:e2:47:b9:2f:
b3:e4:e3:e0:be:45:4f:54:46:e1:54:6c:24:e0:eb:
df:bc:a9:02:30:79:df:ca:81:31:d2:fd:5e:3d:d1:
a6:a8:85:9b:ff:d6:9a:e7:9f:f6:65:e7:93:3c:2a:
c7:57:88:c8:dc:05:3d:ae:45:44:fa:d6:1e:f7:54:
4d:7f:ac:35:36:a9:aa:08:06:f7:c2:5c:b0:bc:72:
11:81:2e:45:a4:15:86:9f:44:1f:36:f1:57:96:86:
08:c3:65:bc:54:ba:f6:c9:b0:e3:f4:53:d3:0c:0e:
6f:5e:96:fe:2b:14:e8:59:cb:a9:0d:7c:d6:55:99:
35:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9F:AB:07:3F:49:73:29:C7:56:AC:19:DA:19:59:B9:17:F6:B1:6C
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a9:10:b5:06:27:5b:6e:5c:02:f5:6c:65:01:90:de:ed:05:
66:b1:6e:f3:18:2f:27:85:c1:cb:6f:56:43:39:9e:43:1c:99:
24:4f:7d:85:f1:42:9b:2b:41:0e:9c:6a:99:a9:c1:f7:fd:cf:
6b:56:52:91:78:b4:86:10:09:1c:dd:68:ac:99:38:f1:19:2d:
36:b5:a9:8a:4d:c7:39:66:e8:7f:6f:7f:d9:3d:9e:f3:15:a9:
6e:bb:8b:9b:a1:ca:a0:0e:79:e1:c3:5f:15:38:4a:63:0f:d2:
4a:d7:2b:9f:50:5c:71:85:36:c1:99:72:5f:b3:b5:29:1a:80:
01:7e:08:a9:41:ea:c2:3c:62:48:73:8d:29:b0:4f:f9:32:60:
de:ba:b8:11:ce:d3:d0:d9:c5:49:58:c0:91:69:f2:83:b9:51:
79:d5:79:0f:0f:fa:7f:d6:cd:d6:60:90:c0:f4:82:36:41:a6:
d6:b4:d8:b5:f3:de:41:90:49:a1:1d:3e:9b:db:9b:af:7a:22:
49:dd:4b:b0:d2:69:25:0e:05:97:83:79:dd:2e:94:43:6c:f4:
5e:a4:54:91:6b:22:a5:84:3a:49:f2:6e:11:8e:02:b2:65:ba:
fe:df:d8:49:84:68:21:d3:94:35:d0:f4:bb:db:30:85:1a:a5:
24:59:a2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:56 2026 by rpki-client