Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
File: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft (raw, json)
Hash identifier: ZoMofjImNB0nGh3ZFBK4cpMNBFozBaOGt+mZrU3PLCw=
Subject key identifier: EF:D5:B0:5B:90:5B:B3:86:96:87:77:EA:F5:BE:7C:02:BF:74:2B:B8
Authority key identifier: 36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
Certificate issuer: /CN=36a1daece1c6e878546dbd1333da09feb8bff018
Certificate serial: 01A0D3EFD2094D98D5C6C402387EE4B77DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
Manifest number: 0787
Signing time: Thu 24 Sep 2026 15:01:44 +0000
Manifest this update: Thu 24 Sep 2026 15:01:44 +0000
Manifest next update: Fri 25 Sep 2026 15:01:44 +0000
Files and hashes: 1: 2_fshuRoDR0I_NRp0VMlVT3wOD8.roa (hash: oqyyBd6HYSuKWOFREp/oTcA0W5Qo5aOsY4Cj1orj65g=)
2: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl (hash: +u9itZsF+rr0YbcnsuljqJC5GIgryUQQkoJDjEKJwtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:d2:09:4d:98:d5:c6:c4:02:38:7e:e4:b7:7d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a1daece1c6e878546dbd1333da09feb8bff018
Validity
Not Before: Sep 24 15:01:44 2026 GMT
Not After : Sep 25 15:01:44 2026 GMT
Subject: CN=efd5b05b905bb386968777eaf5be7c02bf742bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9c:82:aa:99:b3:43:35:ba:60:6e:14:cd:ac:
88:40:a0:fe:49:0d:23:42:80:8d:1a:0c:ae:64:70:
3f:d1:c9:36:9a:2c:54:dd:66:79:54:fb:0e:82:06:
27:25:d5:4f:83:42:7d:59:db:b9:8b:ba:40:8b:17:
e2:f1:c7:02:be:8b:6d:6e:ae:86:cd:f6:25:34:4c:
05:2b:2e:f0:7e:17:e0:10:51:d9:07:0f:c0:97:3e:
36:05:c3:e6:a1:04:de:58:9d:e9:03:dc:60:28:81:
81:57:44:70:bc:39:62:d8:6f:cb:eb:ac:7e:91:9d:
79:41:7d:d5:49:6a:d6:e9:c7:4e:38:89:eb:3f:2a:
c5:b2:e1:c6:32:2f:dd:2f:d6:5d:3b:43:89:61:30:
6f:6a:05:60:ef:f1:05:2e:33:81:ad:53:97:f8:90:
c7:52:c9:49:28:15:99:44:14:52:b5:83:46:08:b5:
37:81:d8:64:95:f2:b3:b4:4b:68:65:15:da:7e:5c:
17:07:75:86:b1:c1:b1:fc:64:5b:22:63:21:fc:07:
8b:29:1a:c0:ca:c5:d7:b8:52:12:10:ff:39:87:e3:
cd:6e:96:ed:3d:1b:c6:05:a7:a5:9a:24:d8:9c:d2:
7d:5a:4c:47:c9:2e:48:21:dd:61:32:09:60:76:cf:
5d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D5:B0:5B:90:5B:B3:86:96:87:77:EA:F5:BE:7C:02:BF:74:2B:B8
X509v3 Authority Key Identifier:
keyid:36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d1:28:5f:9f:53:f1:17:b8:29:3b:67:9b:e2:4d:58:a7:37:
a6:d9:c2:7d:35:a7:e3:b5:25:42:ff:ae:37:21:6c:44:bf:47:
9b:a7:de:09:f9:57:de:01:f4:33:48:fd:76:3d:7f:4f:b0:52:
f2:7e:06:6d:38:d2:4b:98:9b:81:e6:47:43:12:7a:15:95:63:
9c:28:1c:c3:eb:b2:b3:2c:bb:7d:2c:9e:6c:b7:0e:47:cb:92:
ec:cb:3e:1e:94:bf:2e:60:df:36:b8:e7:a4:f6:74:c7:35:2a:
d8:27:b6:8f:ed:00:dc:09:a1:22:5e:2c:a8:60:a1:63:1a:e9:
51:7c:7e:13:bc:31:db:8d:d9:c5:38:88:10:00:41:86:51:0e:
f7:5f:7e:27:9d:f0:e3:c7:eb:9c:ed:49:16:0d:b7:ea:0b:31:
ef:15:7f:ec:de:3a:4f:d6:21:70:a4:53:e7:83:bf:cb:6c:87:
1d:28:64:8f:82:08:aa:c8:c2:63:7e:b2:91:55:c5:98:9f:ca:
0c:00:d7:26:a9:b4:bb:f4:73:83:57:ff:1b:ff:f4:9b:ec:96:
3f:10:9c:f9:f9:e3:e2:12:fc:bd:b8:5e:b6:f9:6d:59:05:e5:
53:c3:e8:e1:9c:9d:25:45:d6:1d:9c:a1:fa:73:b2:54:79:3b:
28:23:fb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:35:10 2026 by rpki-client