Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
File: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft (raw, json)
Hash identifier: 5EgkpzGeF4aTid+t/2MpIKi87B0TSifSjBd4rcEmEsI=
Subject key identifier: 04:C6:86:F5:73:2B:DF:01:AE:56:41:6A:33:03:44:04:85:0C:E3:73
Authority key identifier: 36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
Certificate issuer: /CN=36a1daece1c6e878546dbd1333da09feb8bff018
Certificate serial: 019F935B5B60F7C34EC64277989B3F08681D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
Manifest number: 06E1
Signing time: Fri 24 Jul 2026 09:01:05 +0000
Manifest this update: Fri 24 Jul 2026 09:01:05 +0000
Manifest next update: Sat 25 Jul 2026 09:01:05 +0000
Files and hashes: 1: 2_fshuRoDR0I_NRp0VMlVT3wOD8.roa (hash: oqyyBd6HYSuKWOFREp/oTcA0W5Qo5aOsY4Cj1orj65g=)
2: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl (hash: +WjwZQqrhsCa2W7HRVK+LkICu0ArCFW0jJliNmsLBP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:5b:60:f7:c3:4e:c6:42:77:98:9b:3f:08:68:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a1daece1c6e878546dbd1333da09feb8bff018
Validity
Not Before: Jul 24 09:01:05 2026 GMT
Not After : Jul 25 09:01:05 2026 GMT
Subject: CN=04c686f5732bdf01ae56416a33034404850ce373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:e2:dd:89:fc:51:d3:01:e0:53:28:73:5f:
af:b0:31:f3:2b:d8:77:a9:c0:de:c1:e5:5d:1d:22:
3f:d3:f6:91:28:1d:8e:cb:30:bd:b5:55:ad:01:b6:
69:13:20:b3:6f:d8:a1:5a:9b:0f:38:f9:bf:14:31:
25:b5:95:81:f6:33:00:05:2a:ba:a8:6b:3d:fa:a8:
b6:5f:b7:14:bd:cd:ca:7a:64:1e:ec:cd:65:f2:6e:
ef:ad:e3:63:a9:5a:9a:d6:5f:04:18:f6:69:88:17:
cd:73:d1:b4:45:01:df:94:21:83:31:33:48:b5:e9:
f7:06:d5:bb:86:24:d3:c7:20:7b:66:8c:ed:ea:4c:
b8:48:63:61:54:bc:c2:5b:5c:6e:cc:bb:37:49:29:
ef:f4:68:e5:6a:1b:4b:25:6c:33:cc:47:37:4f:52:
ea:c0:76:9e:15:76:e6:a6:72:a1:01:a8:92:7e:b9:
67:89:12:e6:5c:97:77:e1:ec:c1:22:24:8a:d1:34:
12:ec:1f:94:9e:91:af:f5:8b:ca:ce:45:5a:3c:98:
dc:79:c8:0f:10:98:ff:20:1e:b7:c3:3a:28:45:ba:
5e:9b:0a:18:55:a4:19:08:17:e4:e7:6e:0a:2b:98:
fc:4c:9e:16:3d:33:11:8a:ee:b0:e8:cc:ee:29:6f:
cb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C6:86:F5:73:2B:DF:01:AE:56:41:6A:33:03:44:04:85:0C:E3:73
X509v3 Authority Key Identifier:
keyid:36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:29:74:23:5e:0d:79:81:48:17:35:d4:af:fa:bc:5e:ff:4d:
63:41:4d:97:9e:52:d8:b1:06:cb:57:27:34:22:36:f4:ad:4b:
6d:46:22:28:43:0a:26:43:e2:7c:07:47:a3:9c:03:d8:ca:b5:
3e:a6:27:cf:b5:b8:8b:6a:7a:e4:09:3c:f5:0b:79:7f:c8:7c:
47:c8:a9:57:06:dd:87:68:90:27:08:11:22:f7:d2:23:9f:f4:
67:8f:e9:28:50:20:68:7f:d8:ec:e8:16:d8:19:39:8c:6c:33:
1a:6d:37:52:9a:5c:cc:fe:f1:13:09:af:59:81:0e:2a:6f:ff:
38:69:0d:25:2d:f7:5b:ef:85:58:56:51:f8:3a:04:d5:d1:fe:
7f:0a:c9:0b:27:6d:55:7e:13:29:6f:eb:82:85:91:32:b1:f0:
a3:d0:58:b9:c8:4f:70:b5:ec:33:39:14:20:c9:63:8f:d3:59:
bb:60:53:ab:7b:ba:2a:3b:0e:0e:61:c8:6a:2a:eb:db:04:fb:
d4:e7:7d:94:d5:ab:55:93:d4:d1:4b:72:36:e9:c4:7a:33:6c:
8b:b8:7e:c0:55:1b:89:c0:ff:9b:9d:b0:c7:2f:77:05:90:03:
8d:7a:5d:d3:17:18:e7:6c:cb:2c:39:4d:30:be:0e:31:84:d7:
83:b8:0c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:08:43 2026 by rpki-client