Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: lIOQRWftk+5APAmOCzcGirF24gGkky6PNsYfQD/kOlM=
Subject key identifier: F8:43:76:87:38:92:FA:FD:06:7C:87:4F:77:52:A7:D3:D7:9F:62:E1
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 019D269682083E649DDC7B38D6E9976DFFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 11D5
Signing time: Wed 25 Mar 2026 20:01:30 +0000
Manifest this update: Wed 25 Mar 2026 20:01:30 +0000
Manifest next update: Thu 26 Mar 2026 20:01:30 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: uy8Q+30J2LI4UjDtaj/Z4as867tyD0Cwvr4iDxm2JUo=)
2: fs8coMQW-wdjxvCj9ZMHuDg86fI.roa (hash: 9FrwB/m2Bh+Pc1afpUHCCGmxJk3UX+3t1k97wVkOTzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:82:08:3e:64:9d:dc:7b:38:d6:e9:97:6d:ff:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Mar 25 20:01:30 2026 GMT
Not After : Mar 26 20:01:30 2026 GMT
Subject: CN=f84376873892fafd067c874f7752a7d3d79f62e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9b:50:14:ad:33:e3:07:8b:7a:55:c8:fe:64:
9a:8e:0d:c1:f9:42:37:94:c0:1b:f0:5f:bb:7c:a6:
54:06:ef:c8:cd:6e:e1:e7:03:2a:5a:75:99:01:c6:
32:c7:ec:ff:dc:77:0a:15:b0:9b:ec:9c:01:4d:5f:
83:30:8c:00:e8:dd:d4:40:0e:8f:9d:ce:db:e1:65:
e5:51:32:41:fe:19:6a:e0:57:9a:ac:df:a7:f5:e2:
d5:46:7b:57:0f:1c:b1:8d:8d:4e:bf:7d:c5:a5:e3:
b1:68:20:8a:d9:f1:ad:97:2b:44:5a:a9:c7:3e:1f:
06:3c:16:73:0e:89:55:97:7e:bb:48:36:50:65:25:
da:f2:94:b5:9e:9c:61:04:0f:5e:4d:cc:ed:f0:6e:
20:7a:ff:6b:2c:3b:3d:45:c2:d2:5e:04:1b:cf:44:
80:c6:76:6e:ba:ed:b1:d2:8c:1d:84:8d:eb:ba:86:
e4:4b:eb:57:77:f1:3c:83:a7:8e:84:31:6e:45:67:
e6:f1:05:30:77:67:85:aa:d3:dd:ca:df:5f:cb:2f:
cb:ca:89:26:e5:4c:91:fc:ab:fa:33:ad:41:98:09:
26:12:43:fa:bb:8a:21:4a:13:db:3e:ff:a5:ea:06:
97:74:a0:82:e6:6c:82:03:ff:7a:6f:d9:ba:8b:e5:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:43:76:87:38:92:FA:FD:06:7C:87:4F:77:52:A7:D3:D7:9F:62:E1
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:83:1e:27:02:57:3a:00:8d:20:46:be:97:ec:bf:76:c7:03:
dc:b2:f8:ab:60:41:87:62:cb:85:55:42:e6:a7:6a:78:58:0b:
2a:4b:a1:d7:13:e5:38:a9:e8:1c:92:44:f7:f5:52:7a:39:9e:
56:07:2f:92:42:08:e8:22:f1:e3:4e:36:4e:2f:37:15:66:77:
e3:ad:0e:8f:c3:75:bf:ab:b7:31:6d:35:e1:11:38:34:1e:e3:
a8:b5:d5:ff:3d:e5:f4:de:b2:b8:de:59:f5:48:c0:cc:f0:20:
0d:b6:0b:5f:9e:31:5f:d5:7e:3f:50:79:6a:8b:c8:85:42:1b:
84:83:90:7d:08:0a:68:f5:6f:75:1f:c2:9a:84:01:cb:cb:9f:
51:cd:48:91:3a:05:38:43:da:e8:68:57:19:cc:b9:e0:04:0d:
91:da:83:82:c4:d1:1d:b2:f2:76:44:98:f1:6d:bf:c0:08:be:
28:ba:b6:d0:48:13:0d:99:12:52:f9:1d:63:64:77:0b:a6:f3:
c4:33:b9:dc:5a:17:55:b0:6d:ec:06:e7:53:87:da:f0:6d:8e:
7f:e7:22:65:bf:4f:d3:5f:2d:38:76:b9:da:2b:f4:85:87:c6:
ac:3a:69:d2:4c:c7:b9:8c:49:b8:52:4b:3b:bb:3c:4c:b9:0f:
67:d4:f1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:53 2026 by rpki-client