Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: Db57X5Up+rgz68jy4QGUP0RnkRN3oFMypoM97CA6zFQ=
Subject key identifier: 12:55:DD:30:48:A9:3E:2E:38:FD:5F:DE:B3:50:4D:C6:E4:1E:71:D9
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 01A0EE1D1D8D39AB93FD363EA2607030DEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 13CA
Signing time: Tue 29 Sep 2026 17:01:20 +0000
Manifest this update: Tue 29 Sep 2026 17:01:20 +0000
Manifest next update: Wed 30 Sep 2026 17:01:20 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: 2H8mm2/QSRbr7YE2smbS9tmhspqZgSVaTVYCvlfBg7c=)
2: fs8coMQW-wdjxvCj9ZMHuDg86fI.roa (hash: 9FrwB/m2Bh+Pc1afpUHCCGmxJk3UX+3t1k97wVkOTzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:1d:1d:8d:39:ab:93:fd:36:3e:a2:60:70:30:de:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Sep 29 17:01:20 2026 GMT
Not After : Sep 30 17:01:20 2026 GMT
Subject: CN=1255dd3048a93e2e38fd5fdeb3504dc6e41e71d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:e0:3f:53:b8:90:a4:e4:17:26:d5:5c:d5:
5d:b1:bf:35:16:f9:e8:3c:d4:9d:13:3d:6c:d6:f2:
16:b2:04:9d:ca:f4:01:e6:0a:ba:c8:d0:52:e8:f0:
9b:61:48:d2:d6:15:6e:7a:72:cd:c5:67:6c:b3:77:
6c:2d:15:0b:6f:90:21:85:d0:12:f3:20:67:e2:73:
af:ae:35:0c:84:04:90:af:19:e1:6c:54:29:b9:49:
5c:e0:c7:7a:8d:89:d5:b5:3a:bb:ea:9c:f5:77:7b:
d1:60:8c:6e:76:c7:8c:59:e6:aa:1b:29:6b:f8:b2:
1a:d5:f2:19:62:28:01:90:e0:88:24:49:61:8d:94:
15:da:dd:2f:5c:73:c0:79:ee:40:e3:4b:fc:22:4c:
b4:29:c8:1d:da:31:2b:ea:7a:c4:44:6c:fe:63:14:
95:51:6f:d9:f1:af:c1:44:0d:eb:b2:80:30:72:67:
f2:d4:cc:d2:d9:b1:a5:cf:85:1b:3c:f9:37:a4:e2:
78:e1:21:5d:e2:46:7d:7d:73:c4:06:da:96:7f:e3:
ab:c8:51:4c:c6:2c:d6:07:a0:73:cb:d2:b1:bd:85:
2b:86:05:89:22:05:64:0d:81:37:fb:fc:52:c3:cf:
02:a0:d4:1c:a8:9f:1e:be:83:82:c9:a5:c2:50:80:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:55:DD:30:48:A9:3E:2E:38:FD:5F:DE:B3:50:4D:C6:E4:1E:71:D9
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b2:12:c7:25:b7:fc:12:e7:6d:d5:54:1e:59:ce:c0:23:62:
24:dc:fe:14:1d:ae:e4:e6:a3:75:c8:f0:58:58:ab:d0:bb:d5:
c5:f9:c2:04:8b:5f:aa:50:8f:54:68:91:1e:1e:16:60:a6:3f:
3c:d8:88:8c:9a:fc:b4:88:43:15:e4:78:d1:40:9e:98:84:61:
0b:e8:75:cc:a1:38:93:21:ea:94:b1:20:6a:8e:54:a6:dd:ec:
e1:af:6a:42:44:56:1e:d9:eb:1b:6d:12:0d:51:de:bb:a1:eb:
ca:3d:39:cf:f9:15:0a:b8:5d:cc:95:cf:79:c8:f4:3a:2e:3b:
c8:06:dc:9c:e5:9e:c5:25:49:a5:63:98:97:2b:8b:9a:0e:43:
4c:50:22:03:27:4b:87:8c:31:ef:f4:ab:4d:59:e2:16:21:d0:
1d:d2:e7:d8:5d:3d:24:05:c9:b8:93:f3:60:de:ae:86:cf:b8:
ce:10:23:7e:57:a2:ae:e0:e6:c4:82:3e:7a:c4:a8:63:be:67:
ee:98:67:6d:0b:d1:c3:e7:9c:32:4e:f5:7e:8b:76:a4:7b:7c:
d8:00:0d:5d:c7:7c:52:6c:ed:05:40:68:10:89:04:35:8a:f0:
c4:f0:76:d9:81:33:24:4e:d2:fe:53:56:21:a3:bc:0b:89:92:
f9:2f:6a:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDuHR2NOauT/TY+omBwMN6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YWYwNDFkMTJjNGFkYjY2ZjhjMTYxMTNjOWE2MTQ3ZDAy
Mzg4ZDkwHhcNMjYwOTI5MTcwMTIwWhcNMjYwOTMwMTcwMTIwWjAzMTEwLwYDVQQD
EygxMjU1ZGQzMDQ4YTkzZTJlMzhmZDVmZGViMzUwNGRjNmU0MWU3MWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP/gP1O4kKTkFybVXNVdsb81Fvno
PNSdEz1s1vIWsgSdyvQB5gq6yNBS6PCbYUjS1hVuenLNxWdss3dsLRULb5AhhdAS
8yBn4nOvrjUMhASQrxnhbFQpuUlc4Md6jYnVtTq76pz1d3vRYIxudseMWeaqGylr
+LIa1fIZYigBkOCIJElhjZQV2t0vXHPAee5A40v8Iky0Kcgd2jEr6nrERGz+YxSV
UW/Z8a/BRA3rsoAwcmfy1MzS2bGlz4UbPPk3pOJ44SFd4kZ9fXPEBtqWf+OryFFM
xizWB6Bzy9KxvYUrhgWJIgVkDYE3+/xSw88CoNQcqJ8evoOCyaXCUICEbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJV3TBIqT4uOP1f3rNQTcbkHnHZMB8GA1UdIwQY
MBaAFDavBB0SxK22b4wWETyaYUfQI4jZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YTU0MmQtNzE5ZS00NmQwLWE1Y2Mt
MDYxZGQ2ODEzMzJjLzEvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83YTU0MmQtNzE5ZS00NmQwLWE1Y2MtMDYxZGQ2ODEzMzJj
LzEvTnE4RUhSTEVyYlp2akJZUlBKcGhSOUFqaU5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrISxyW3
/BLnbdVUHlnOwCNiJNz+FB2u5OajdcjwWFir0LvVxfnCBItfqlCPVGiRHh4WYKY/
PNiIjJr8tIhDFeR40UCemIRhC+h1zKE4kyHqlLEgao5Upt3s4a9qQkRWHtnrG20S
DVHeu6Hryj05z/kVCrhdzJXPecj0Oi47yAbcnOWexSVJpWOYlyuLmg5DTFAiAydL
h4wx7/SrTVniFiHQHdLn2F09JAXJuJPzYN6uhs+4zhAjfleiruDmxII+esSoY75n
7phnbQvRw+ecMk71fot2pHt82AANXcd8UmztBUBoEIkENYrwxPB22YEzJE7S/lNW
IaO8C4mS+S9qLw==
-----END CERTIFICATE-----
Generated at Wed Sep 30 00:20:07 2026 by rpki-client