Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: hrKMU+a63iLNk7uXfVDQCsncWZ2w3iJf+dTUJd9ISbo=
Subject key identifier: 68:A9:76:F5:FE:F2:9D:76:37:FC:AA:2E:D6:7A:8D:16:A6:65:60:F3
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 019D277240831F26BE5DFFC55E49D243B8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 00:01:32 +0000
Manifest this update: Thu 26 Mar 2026 00:01:32 +0000
Manifest next update: Fri 27 Mar 2026 00:01:32 +0000
Files and hashes: 1: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: fR2FT4w9KLd/0NqROj0yf00RgaYbfmG2WZJYEzHR4R8=)
2: UBW5R1HwaG9495WZauzqNIjn4nA.roa (hash: duZ19HoAidUjyBvwzeBCc3j9fnU5CniKN9o9GUrYQpw=)
3: XbqOwXYkjht0nJnceNJjzX2ebKs.roa (hash: knPH99gttVNm7VTufmRAs4k/asX/iKOhw3wnBmFxMfs=)
4: j2Vt-vhnn-HkYm2cJoF8eB-3moE.roa (hash: mB8vuWp3NyFqQhgRZxGSvc7q78uxW5vC+14W4bnmoE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:40:83:1f:26:be:5d:ff:c5:5e:49:d2:43:b8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Mar 26 00:01:32 2026 GMT
Not After : Mar 27 00:01:32 2026 GMT
Subject: CN=68a976f5fef29d7637fcaa2ed67a8d16a66560f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0e:e8:1a:9e:36:2a:2b:dd:49:0b:3b:94:f7:
77:6a:29:5a:48:cd:56:41:7b:71:4d:e9:ce:e8:09:
a8:48:6c:84:ac:f4:18:0b:6e:44:27:55:a9:1d:c4:
3d:c9:68:c8:34:bf:32:e2:ed:8f:69:4f:de:fb:7f:
27:c1:63:12:c4:e0:f6:1d:72:bb:ec:ef:97:40:3d:
b2:25:06:d7:1b:9d:4d:df:19:32:ce:02:c7:55:94:
4f:75:fc:a2:4a:ca:ac:ed:9f:6d:2c:0a:3d:15:26:
6a:ce:d9:96:8e:f8:ea:87:94:48:ca:5f:3f:b5:0e:
35:4e:04:36:79:6a:01:c3:b9:e7:ae:95:b2:4f:f8:
71:17:99:be:9f:a2:51:ba:cd:9e:42:ff:85:dc:56:
07:82:da:20:1a:3a:3f:42:4e:64:14:69:48:1f:b5:
7c:fa:38:5b:d0:0a:e0:58:d5:ef:68:b4:03:26:5f:
45:b5:eb:f3:89:4b:d5:b4:b1:c3:18:03:f2:0e:6a:
45:bc:3f:92:c2:1f:fe:5a:78:dd:2e:1f:f9:55:50:
00:dd:57:78:c9:52:de:1d:e2:42:e8:ee:85:af:19:
d6:6a:87:be:d2:22:e4:b6:f6:c8:ff:dd:9b:94:dd:
46:25:a3:21:65:90:eb:12:21:39:66:e3:dc:20:20:
21:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A9:76:F5:FE:F2:9D:76:37:FC:AA:2E:D6:7A:8D:16:A6:65:60:F3
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fa:80:82:14:48:80:f7:5f:d4:7a:c0:96:70:02:90:1b:14:
11:24:0d:0f:3d:10:be:b7:cd:0d:5d:88:a5:10:a2:a5:ad:be:
27:80:74:1c:7d:b7:5b:da:96:4c:29:f6:7c:0d:ac:1d:2b:50:
4d:ee:e5:cc:46:a2:ed:1b:cf:ad:59:b4:aa:a6:89:50:8a:bd:
1f:5a:5c:11:53:b8:29:3e:c7:fd:ba:19:25:92:0f:43:4f:e0:
c2:c4:e8:56:2f:08:0d:0a:62:9d:c2:3c:a7:25:15:44:10:b6:
b2:74:c0:31:53:68:d9:1a:9c:83:73:ad:aa:d8:b5:ea:f7:80:
52:97:55:66:e2:07:18:56:3b:87:0d:ab:ff:81:d8:21:f4:fa:
9b:22:cf:d4:a8:a3:ac:7f:59:96:01:d6:88:26:20:c8:f1:e5:
99:7d:ce:0f:40:d9:d5:c8:af:08:73:7b:da:93:3f:dd:33:06:
70:46:74:45:3b:e7:d0:0a:34:b4:9d:0e:05:3a:21:5e:d5:c6:
ac:b5:ad:df:a8:cc:b1:a3:b8:ee:1f:c8:f3:f2:1f:aa:c2:ff:
03:25:61:40:b1:a8:57:50:7a:fe:37:fb:75:f7:aa:0c:d1:da:
29:7f:c1:1d:61:4d:09:68:0e:2d:f2:bf:f5:02:80:81:cd:2e:
5a:86:33:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nckCDHya+Xf/FXknSQ7jeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZWFhMDBlYTc3NzA5OGIxYmYwMzY3NTZkNjQwZTlkMzFk
NjNiM2IwHhcNMjYwMzI2MDAwMTMyWhcNMjYwMzI3MDAwMTMyWjAzMTEwLwYDVQQD
Eyg2OGE5NzZmNWZlZjI5ZDc2MzdmY2FhMmVkNjdhOGQxNmE2NjU2MGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg7oGp42KivdSQs7lPd3ailaSM1W
QXtxTenO6AmoSGyErPQYC25EJ1WpHcQ9yWjINL8y4u2PaU/e+38nwWMSxOD2HXK7
7O+XQD2yJQbXG51N3xkyzgLHVZRPdfyiSsqs7Z9tLAo9FSZqztmWjvjqh5RIyl8/
tQ41TgQ2eWoBw7nnrpWyT/hxF5m+n6JRus2eQv+F3FYHgtogGjo/Qk5kFGlIH7V8
+jhb0ArgWNXvaLQDJl9FtevziUvVtLHDGAPyDmpFvD+Swh/+WnjdLh/5VVAA3Vd4
yVLeHeJC6O6FrxnWaoe+0iLktvbI/92blN1GJaMhZZDrEiE5ZuPcICAhcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGipdvX+8p12N/yqLtZ6jRamZWDzMB8GA1UdIwQY
MBaAFDbqoA6ndwmLG/A2dW1kDp0x1js7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80MTAyMzItYjFmZC00MTM3LTgzMmQt
YmRiMjEzMTNjM2VjLzEvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80MTAyMzItYjFmZC00MTM3LTgzMmQtYmRiMjEzMTNjM2Vj
LzEvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfqAghRI
gPdf1HrAlnACkBsUESQNDz0QvrfNDV2IpRCipa2+J4B0HH23W9qWTCn2fA2sHStQ
Te7lzEai7RvPrVm0qqaJUIq9H1pcEVO4KT7H/boZJZIPQ0/gwsToVi8IDQpincI8
pyUVRBC2snTAMVNo2Rqcg3Otqti16veAUpdVZuIHGFY7hw2r/4HYIfT6myLP1Kij
rH9ZlgHWiCYgyPHlmX3OD0DZ1civCHN72pM/3TMGcEZ0RTvn0Ao0tJ0OBTohXtXG
rLWt36jMsaO47h/I8/IfqsL/AyVhQLGoV1B6/jf7dfeqDNHaKX/BHWFNCWgOLfK/
9QKAgc0uWoYz1A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:48:53 2026 by rpki-client