Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: Lv3nZlUiJO2z0SpkwUiHQBJ/NZv6JRAZ24/GwWg4sR4=
Subject key identifier: 67:17:4C:EB:74:12:24:FC:5C:C1:31:2F:89:EC:11:5E:74:30:1D:BB
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 019F932403DC8B70725847BEAE5A861ECA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 08:00:38 +0000
Manifest this update: Fri 24 Jul 2026 08:00:38 +0000
Manifest next update: Sat 25 Jul 2026 08:00:38 +0000
Files and hashes: 1: JEy4ZJ62QYRRLVpb1W-o-3RjroA.roa (hash: UXVz9bhe0di3EXu2bm6AdG0DjlkQpOevHbzRqlRvjno=)
2: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: N2VK0pffJuh7gUBcNnS78UR2rXUZXh5jCcyA8OEUp2c=)
3: UBW5R1HwaG9495WZauzqNIjn4nA.roa (hash: duZ19HoAidUjyBvwzeBCc3j9fnU5CniKN9o9GUrYQpw=)
4: j2Vt-vhnn-HkYm2cJoF8eB-3moE.roa (hash: mB8vuWp3NyFqQhgRZxGSvc7q78uxW5vC+14W4bnmoE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:03:dc:8b:70:72:58:47:be:ae:5a:86:1e:ca:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Jul 24 08:00:38 2026 GMT
Not After : Jul 25 08:00:38 2026 GMT
Subject: CN=67174ceb741224fc5cc1312f89ec115e74301dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:5b:62:45:d6:e3:54:b9:c8:ce:c7:f3:e9:
09:49:92:3f:5f:4d:42:fa:3f:9a:4a:c5:29:38:b6:
77:b4:b6:4e:d1:2f:e5:d9:36:c8:09:e9:e2:54:c2:
0d:7d:74:a0:54:f9:56:ee:62:e8:5b:a5:bb:33:c4:
29:7e:c3:da:e2:c6:5c:c4:1d:8d:c5:f7:4a:e5:6e:
35:e0:06:74:35:25:08:d3:83:6e:dd:1c:a0:10:8b:
eb:cb:13:88:7d:28:e4:5b:f5:d7:6d:5f:0a:1c:7c:
80:07:6d:2a:fa:e3:ef:10:27:6e:bf:5c:dd:c9:13:
33:c5:be:bc:51:a6:4b:52:9e:ad:61:34:7f:31:8b:
32:a6:0d:2c:e2:69:19:65:ad:78:c1:21:f0:c3:3f:
16:37:b9:65:8b:89:26:8b:54:41:29:fa:da:b2:92:
c5:4d:9c:38:d5:5c:0e:25:e8:5a:5b:46:db:c4:d5:
63:c8:b3:8f:82:92:40:c2:93:7a:b2:f9:e5:b7:f6:
db:ea:aa:5b:9c:18:f7:f6:8f:76:e6:06:d7:da:da:
ff:5d:8d:71:a3:fa:45:20:cd:af:6e:ec:ba:7d:4b:
ec:2c:31:6e:51:41:af:d2:c5:dd:ea:3a:53:29:33:
1d:40:56:c7:e7:65:b3:97:f3:8d:23:43:6a:ec:58:
0f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:17:4C:EB:74:12:24:FC:5C:C1:31:2F:89:EC:11:5E:74:30:1D:BB
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:dc:b0:9d:fc:26:c8:16:53:4d:8b:1b:f5:1b:41:ea:aa:9a:
ad:a8:14:1c:58:8c:03:81:65:41:10:9a:6c:47:dd:c3:44:3b:
5f:3f:62:74:19:c5:75:22:1f:84:f1:92:7f:e7:57:67:10:a9:
10:a0:6d:9a:bd:a5:7e:69:1a:5f:9c:23:fb:45:0c:e3:21:0a:
47:82:cf:2e:8e:36:f6:08:56:b9:a2:f3:4a:bb:e9:7e:b2:db:
ce:95:36:4a:5a:ac:75:24:32:7b:a8:da:4f:fc:88:92:25:0e:
07:f1:80:07:1b:c2:a2:84:b1:97:f3:d1:f3:74:b5:a0:ea:94:
35:58:b7:f5:78:78:1e:82:e1:3a:15:be:15:5e:51:40:81:6c:
64:60:d8:4a:4f:4f:2d:2e:ee:7d:75:16:79:44:d6:a8:83:03:
33:84:8c:73:c0:4e:b3:af:a5:da:5d:3d:83:23:5d:ab:a5:9d:
e7:51:26:19:da:a1:f8:7a:54:9b:00:dc:b1:5b:0f:60:d6:ec:
fc:49:91:f5:68:c3:d8:71:38:47:22:59:0a:9e:f8:2f:36:b1:
6b:79:4f:4b:f8:7c:92:78:38:1e:00:a8:d2:5b:12:f6:7c:11:
66:1a:4a:f7:98:12:00:f8:06:c3:2f:a7:4b:07:45:7f:29:7b:
18:6c:6c:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJAPci3ByWEe+rlqGHsp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZWFhMDBlYTc3NzA5OGIxYmYwMzY3NTZkNjQwZTlkMzFk
NjNiM2IwHhcNMjYwNzI0MDgwMDM4WhcNMjYwNzI1MDgwMDM4WjAzMTEwLwYDVQQD
Eyg2NzE3NGNlYjc0MTIyNGZjNWNjMTMxMmY4OWVjMTE1ZTc0MzAxZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKdbYkXW41S5yM7H8+kJSZI/X01C
+j+aSsUpOLZ3tLZO0S/l2TbICeniVMINfXSgVPlW7mLoW6W7M8QpfsPa4sZcxB2N
xfdK5W414AZ0NSUI04Nu3RygEIvryxOIfSjkW/XXbV8KHHyAB20q+uPvECduv1zd
yRMzxb68UaZLUp6tYTR/MYsypg0s4mkZZa14wSHwwz8WN7lli4kmi1RBKfraspLF
TZw41VwOJehaW0bbxNVjyLOPgpJAwpN6svnlt/bb6qpbnBj39o925gbX2tr/XY1x
o/pFIM2vbuy6fUvsLDFuUUGv0sXd6jpTKTMdQFbH52Wzl/ONI0Nq7FgP/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcXTOt0EiT8XMExL4nsEV50MB27MB8GA1UdIwQY
MBaAFDbqoA6ndwmLG/A2dW1kDp0x1js7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80MTAyMzItYjFmZC00MTM3LTgzMmQt
YmRiMjEzMTNjM2VjLzEvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80MTAyMzItYjFmZC00MTM3LTgzMmQtYmRiMjEzMTNjM2Vj
LzEvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltywnfwm
yBZTTYsb9RtB6qqaragUHFiMA4FlQRCabEfdw0Q7Xz9idBnFdSIfhPGSf+dXZxCp
EKBtmr2lfmkaX5wj+0UM4yEKR4LPLo429ghWuaLzSrvpfrLbzpU2SlqsdSQye6ja
T/yIkiUOB/GABxvCooSxl/PR83S1oOqUNVi39Xh4HoLhOhW+FV5RQIFsZGDYSk9P
LS7ufXUWeUTWqIMDM4SMc8BOs6+l2l09gyNdq6Wd51EmGdqh+HpUmwDcsVsPYNbs
/EmR9WjD2HE4RyJZCp74Lzaxa3lPS/h8kng4HgCo0lsS9nwRZhpK95gSAPgGwy+n
SwdFfyl7GGxsVw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:02:05 2026 by rpki-client