Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
File: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft (raw, json)
Hash identifier: CdnXg9E/DokVFutFassvOiScl7nPi8/hJIVdg/U1DjU=
Subject key identifier: DD:EB:5F:A8:2C:44:1E:61:4E:90:FF:E4:C2:8C:27:CE:7F:3C:B2:C0
Authority key identifier: 36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
Certificate issuer: /CN=36a1daece1c6e878546dbd1333da09feb8bff018
Certificate serial: 019D2960EC0843D625897EEC36B602D79FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
Manifest number: 05A1
Signing time: Thu 26 Mar 2026 09:01:50 +0000
Manifest this update: Thu 26 Mar 2026 09:01:50 +0000
Manifest next update: Fri 27 Mar 2026 09:01:50 +0000
Files and hashes: 1: 2_fshuRoDR0I_NRp0VMlVT3wOD8.roa (hash: oqyyBd6HYSuKWOFREp/oTcA0W5Qo5aOsY4Cj1orj65g=)
2: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl (hash: RZPBRS6vDgomOJ5Y7AL+N/G46TVc1T+DYjyYnWQXsbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:ec:08:43:d6:25:89:7e:ec:36:b6:02:d7:9f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a1daece1c6e878546dbd1333da09feb8bff018
Validity
Not Before: Mar 26 09:01:50 2026 GMT
Not After : Mar 27 09:01:50 2026 GMT
Subject: CN=ddeb5fa82c441e614e90ffe4c28c27ce7f3cb2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:d1:4b:e9:f2:8d:ee:24:dc:1e:18:88:40:
7c:aa:94:07:5e:1a:9d:46:ca:5e:32:f8:20:f4:c3:
12:66:97:6f:51:e0:d5:0e:c7:7b:09:3d:8f:42:27:
5f:4a:11:2d:02:cc:81:5f:41:26:52:1e:dc:ce:d2:
f9:42:0d:fd:96:5e:69:0b:06:77:ae:63:fb:41:7d:
23:99:ac:df:4a:15:50:f7:93:46:b2:d2:0c:84:9f:
70:58:93:62:72:59:a3:e6:42:ba:62:43:82:f0:10:
c9:55:1d:53:e0:b4:b9:dc:ad:94:51:63:78:be:69:
2d:78:83:b6:29:45:40:a7:c6:cd:a8:c0:97:d6:6b:
65:e7:96:31:c2:d1:b9:e3:ac:a5:95:4d:06:e5:d0:
74:e0:a2:49:07:d8:8b:eb:20:1c:4a:9f:88:59:71:
2b:c8:07:b3:3a:03:2c:2d:da:80:19:dc:0e:26:44:
6b:f8:cd:2d:cb:77:4b:f0:8d:c0:03:40:a9:6d:8d:
67:8e:2a:af:03:cf:f2:1e:71:95:22:df:f0:e2:0a:
03:7c:4b:ec:86:e6:4c:44:7f:23:c3:04:aa:21:41:
8f:0c:ec:82:28:1a:25:8d:e9:0e:10:7b:7d:79:a6:
c7:16:87:96:96:e8:de:bf:1d:a0:a4:6d:ab:6a:ee:
15:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EB:5F:A8:2C:44:1E:61:4E:90:FF:E4:C2:8C:27:CE:7F:3C:B2:C0
X509v3 Authority Key Identifier:
keyid:36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c1:d3:fe:81:e1:a7:63:ee:80:c2:3a:44:53:c3:e8:cb:ff:
0b:61:da:5c:c3:5e:b9:af:5b:ed:6e:7e:db:4b:30:6f:5a:f0:
69:b8:cc:0d:92:60:24:14:61:b6:f2:1b:5d:25:c6:54:56:6b:
09:3f:9a:9c:a0:4d:e0:8e:0b:8c:0c:b6:4a:01:14:6e:93:63:
5f:fa:71:d4:dd:c5:67:63:c0:29:cc:67:26:14:e7:72:76:5b:
64:d3:70:55:c1:8a:9f:5b:81:c7:aa:e3:48:3d:45:c1:0c:31:
be:e7:12:14:ce:c8:4d:f7:52:ed:72:71:02:71:27:e7:5b:fb:
87:0c:dd:7f:83:41:a3:71:97:a6:e2:ba:fd:f1:5f:a0:11:3e:
39:0a:bc:6b:08:ec:4a:92:1e:8f:df:40:ff:f8:7d:db:77:35:
1a:7f:3b:da:aa:ac:71:da:24:06:13:e7:1e:fd:94:ad:0b:5c:
32:73:be:5d:e5:5f:b5:d6:8a:60:a0:02:62:de:3b:de:48:26:
e5:e2:72:c3:93:ac:5c:cf:9a:83:e3:2d:06:ff:85:ee:67:17:
86:db:25:a8:5e:6d:e4:ff:86:87:f0:95:b3:f6:95:06:9a:16:
76:ed:ba:b2:f9:59:28:d9:cb:21:c9:12:72:a8:86:5f:e9:1e:
ff:03:8b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:45:38 2026 by rpki-client