Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: V8bOU6TLO+iMaZqtrEyLSng/Ae70ihsWCwrq5oaWEn8=
Subject key identifier: 3A:C9:8E:46:93:F3:71:03:81:93:56:B7:B4:97:F7:68:AE:CB:F8:96
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 019E205ABDA1101658CE7E86ACB6A260B084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 08:01:18 +0000
Manifest this update: Wed 13 May 2026 08:01:18 +0000
Manifest next update: Thu 14 May 2026 08:01:18 +0000
Files and hashes: 1: JEy4ZJ62QYRRLVpb1W-o-3RjroA.roa (hash: UXVz9bhe0di3EXu2bm6AdG0DjlkQpOevHbzRqlRvjno=)
2: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: zUKPhp5qDnWpSBvdPiC0knmz842B1FVgXygONAaO/Hw=)
3: UBW5R1HwaG9495WZauzqNIjn4nA.roa (hash: duZ19HoAidUjyBvwzeBCc3j9fnU5CniKN9o9GUrYQpw=)
4: j2Vt-vhnn-HkYm2cJoF8eB-3moE.roa (hash: mB8vuWp3NyFqQhgRZxGSvc7q78uxW5vC+14W4bnmoE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:bd:a1:10:16:58:ce:7e:86:ac:b6:a2:60:b0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: May 13 08:01:18 2026 GMT
Not After : May 14 08:01:18 2026 GMT
Subject: CN=3ac98e4693f37103819356b7b497f768aecbf896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:93:81:d3:4f:24:7c:12:12:dc:7f:85:30:
df:ee:9c:e3:d2:c3:1b:9f:46:45:81:ea:09:18:c1:
e4:93:37:3e:d3:df:eb:c3:2c:c4:bd:34:5d:d9:69:
d8:c6:b3:f2:b6:b7:17:d6:38:d0:80:27:5f:bc:b1:
ce:a1:64:e0:4a:3c:04:95:46:64:c7:de:6a:f9:4a:
c2:2c:ed:be:68:12:4a:eb:f7:b6:71:a3:b8:83:e4:
d9:5c:4b:ce:32:a6:22:5e:bf:1d:7c:3c:0a:bc:ab:
45:ec:33:05:e7:e4:bf:e3:e8:64:79:d7:28:d2:31:
27:c2:65:61:41:62:13:48:8d:fc:1b:3f:1d:75:21:
c6:3d:78:61:5e:6c:2f:9f:9f:0c:50:6b:fd:c4:0c:
f3:b4:86:f3:da:da:4d:4c:88:96:35:d8:62:b9:8f:
84:e5:7c:b6:10:8b:9b:15:69:8d:1e:f9:72:63:a7:
67:10:a7:5e:28:1b:fe:3b:e3:27:da:8f:55:5e:02:
a2:37:b6:c7:f8:2f:06:2a:4d:39:18:dc:61:9b:c2:
30:e5:1a:10:55:6c:69:cb:ca:f5:52:27:3e:d5:d3:
d8:09:c9:f3:ec:25:25:9b:cd:98:10:18:f8:be:93:
39:d4:e9:10:ac:b9:26:78:34:4c:78:70:d3:12:85:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C9:8E:46:93:F3:71:03:81:93:56:B7:B4:97:F7:68:AE:CB:F8:96
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:53:04:20:75:36:32:55:1f:e9:05:e5:3e:b8:1b:1b:33:0e:
69:99:4f:4e:16:c8:cc:63:ba:51:f7:f2:78:b7:2d:a2:c9:fc:
98:b7:ff:74:35:79:07:56:8a:36:35:7d:49:6d:d6:26:64:a3:
24:14:f1:21:9e:d3:80:24:f9:f2:e6:25:46:a8:28:ad:f5:69:
e2:10:56:56:f8:77:31:82:1d:17:52:60:ea:e7:28:65:a8:48:
47:c6:85:9e:70:93:f7:4c:d5:48:06:ab:a2:e8:7a:1d:05:9d:
26:ec:55:a3:91:77:dc:0a:81:ef:5e:ca:53:75:5e:88:ff:d8:
a9:4e:5a:4e:7d:e0:42:2f:43:86:f7:1c:46:a3:f1:db:5e:5b:
f4:bf:a7:27:e3:7d:ff:38:1e:ca:1b:14:f1:4b:fe:ce:56:c7:
1a:0d:e9:25:bc:41:16:5e:1f:4e:4e:d4:c5:f0:49:2c:8a:af:
e5:6c:3f:c1:7a:b2:c6:ac:9c:26:c1:13:10:c9:46:e7:2c:1f:
fc:e8:ba:64:d6:f6:7e:d7:98:05:66:bb:e0:da:ef:61:c4:9f:
5c:e0:58:ef:17:19:dd:35:58:a5:62:89:0d:0a:fe:98:91:44:
37:cd:f9:92:21:47:3b:8f:86:21:94:b3:2d:b8:2f:16:c8:68:
61:e6:9a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:37:50 2026 by rpki-client