Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: XQP41aehB3qIKLCfjl2p8h6+smC1T708keX4Y9K55rU=
Subject key identifier: DB:F6:24:28:16:7E:38:3C:BA:95:DA:1B:E2:76:D2:99:39:64:16:A7
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 019E1FB5D87717682153C40114D59481966A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 1256
Signing time: Wed 13 May 2026 05:01:11 +0000
Manifest this update: Wed 13 May 2026 05:01:11 +0000
Manifest next update: Thu 14 May 2026 05:01:11 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: wdj+eVgRLwEc3uIDt3xgQyCnsOSXex8jUWA7/1XPEFQ=)
2: fs8coMQW-wdjxvCj9ZMHuDg86fI.roa (hash: 9FrwB/m2Bh+Pc1afpUHCCGmxJk3UX+3t1k97wVkOTzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:d8:77:17:68:21:53:c4:01:14:d5:94:81:96:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: May 13 05:01:11 2026 GMT
Not After : May 14 05:01:11 2026 GMT
Subject: CN=dbf62428167e383cba95da1be276d299396416a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:a6:db:1f:fe:06:58:5b:c0:fd:76:7f:2e:
df:f6:01:1d:75:51:fd:d2:4e:ab:88:97:9a:ce:5c:
a8:1e:b2:2b:ab:c9:36:d7:a3:08:da:f0:66:d8:14:
63:e3:92:f9:2d:1a:bc:8f:31:b1:5b:fe:ae:1b:05:
17:24:78:0f:aa:37:5f:b7:f2:e2:06:d0:17:61:bd:
69:dd:68:cb:2f:a0:88:a2:a9:9a:5a:c9:87:4f:5a:
7c:4b:e5:2c:c4:c0:26:49:8d:4a:bd:fa:49:e1:c6:
2e:14:96:7d:34:2a:6e:32:3c:d8:3e:80:f6:e5:86:
ec:c7:8c:5d:4a:2f:d4:eb:1a:37:44:f4:a6:63:c1:
e0:d8:9f:c7:19:f9:0e:86:89:47:1b:48:19:f3:89:
72:5c:91:af:f6:66:19:b0:f7:41:d7:6a:2e:bd:64:
e8:26:7d:8c:a8:91:97:06:d6:18:dc:97:49:d9:a0:
80:49:43:cd:b8:b2:36:a1:6a:8d:04:a0:22:d2:c4:
8a:40:70:3d:f2:a8:d1:35:67:cb:42:22:3d:98:c5:
eb:b4:35:31:1d:e8:bf:a3:c6:4a:d1:3d:60:85:78:
3a:48:f3:86:6a:9c:8f:85:ab:e0:40:e1:74:4d:39:
73:a6:0f:d2:d1:9b:a5:a4:ed:34:63:17:77:f4:11:
dc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F6:24:28:16:7E:38:3C:BA:95:DA:1B:E2:76:D2:99:39:64:16:A7
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:59:cf:33:56:4b:28:36:98:4e:d3:fe:e1:44:ea:98:db:9c:
08:80:f1:d0:5d:01:bf:3f:37:db:4a:cd:39:aa:9c:6b:f8:0e:
59:7e:bd:88:92:7f:06:0d:87:0e:f4:0e:aa:36:d1:d3:cd:a7:
46:ca:09:99:75:f8:6d:93:e9:51:f8:b1:d3:99:33:b2:d3:a9:
4c:bf:1d:40:27:7f:08:71:06:46:aa:5f:75:64:65:67:06:05:
c1:00:1b:cb:4f:24:d7:f0:78:cf:dd:7a:b4:3a:f2:94:39:c2:
26:64:0c:f9:76:0b:86:de:db:44:a4:e1:df:21:f7:90:8a:97:
75:2c:46:9c:d7:72:71:7a:6b:63:ba:18:e1:02:1d:cb:54:39:
3f:a1:57:64:a2:43:41:0a:47:77:bb:42:5a:75:3f:cc:97:cd:
a7:e9:c3:23:07:53:3e:dd:90:c2:1d:c7:ed:62:1d:98:9d:97:
35:a2:73:0f:e7:6b:48:9c:63:e1:fc:70:81:e3:b8:4c:04:bf:
e0:37:21:55:37:10:db:c2:06:26:22:b9:f6:66:e7:d1:b3:07:
49:8c:ad:1e:38:0b:c7:55:c2:e3:9e:f4:41:ad:e6:d7:1d:78:
d0:6f:d8:09:23:ea:3c:13:c5:be:3e:06:de:8a:6e:57:e3:8c:
aa:9d:ea:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:48:35 2026 by rpki-client