Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
File: NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft (raw, json)
Hash identifier: QR9/1iMh6EQMxjkhkZ+XiPI2/v9hHTO/XDw2jcg6J+0=
Subject key identifier: B6:F8:93:27:7B:3F:6B:CA:A9:B1:92:05:A8:69:BF:2C:BC:A1:E9:D6
Authority key identifier: 36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
Certificate issuer: /CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Certificate serial: 019D2B1738EF2CC2A24E6CEC7750322060DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 17:00:35 +0000
Manifest this update: Thu 26 Mar 2026 17:00:35 +0000
Manifest next update: Fri 27 Mar 2026 17:00:35 +0000
Files and hashes: 1: KCT3SvLM78fZHK_bwx-01sokz2Q.roa (hash: OoFA7HfGIfDwj/WUeEPXL8zVfd0rTjqyDSVQwZXvdKY=)
2: NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl (hash: NgWe6YQTRMyRJX8wEgOJufk1/4+uSYuVm2shKKbX5lI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:38:ef:2c:c2:a2:4e:6c:ec:77:50:32:20:60:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Validity
Not Before: Mar 26 17:00:35 2026 GMT
Not After : Mar 27 17:00:35 2026 GMT
Subject: CN=b6f893277b3f6bcaa9b19205a869bf2cbca1e9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:01:9d:cb:50:61:8e:ff:c5:c1:ab:33:15:a4:
62:45:50:db:f8:9c:bb:2f:a1:5a:e0:fc:ed:6f:f5:
7c:1e:fb:25:4d:b6:37:48:a9:44:7d:fe:9b:ca:be:
d2:d6:5f:d4:9c:ff:07:4d:35:ca:99:53:8c:a6:18:
58:14:74:8f:5e:ba:1b:dc:e9:52:10:a4:92:c6:4e:
2e:c5:03:84:53:e6:59:07:7f:77:16:d7:7f:cd:23:
32:c0:d3:82:ff:2b:b6:b7:11:1c:fa:13:ce:c9:75:
0c:a5:0f:60:88:f7:a1:b3:8a:f0:fb:3e:29:6e:14:
75:7c:3a:74:9f:cb:9c:94:b1:b6:b2:d4:cc:ec:7b:
ec:26:ae:54:51:7e:2a:03:49:c6:ad:39:fc:b8:43:
b1:6f:86:3f:ab:25:12:42:f2:32:1f:b8:b0:a3:b6:
59:eb:91:90:e9:e3:5b:5b:48:c2:ad:8f:50:31:1d:
b3:d6:81:44:ca:aa:53:38:82:69:1e:11:5d:f2:ce:
86:8b:22:2c:2e:54:98:7b:31:1e:2f:c0:9f:63:1e:
34:f1:69:80:d3:5f:83:df:fc:68:65:16:1a:89:a5:
01:c4:74:24:1d:28:f9:5c:71:4e:06:f5:f8:5e:d0:
8e:dd:b3:fc:e4:75:4a:06:6b:66:a3:05:30:86:16:
5b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F8:93:27:7B:3F:6B:CA:A9:B1:92:05:A8:69:BF:2C:BC:A1:E9:D6
X509v3 Authority Key Identifier:
keyid:36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:83:60:e1:ec:56:35:40:1b:38:4f:78:6f:4a:aa:2d:f1:b6:
32:ff:96:6f:0a:5d:3d:0a:74:c7:04:3f:9a:58:71:94:35:29:
2c:7e:86:9e:d1:23:55:48:db:3d:c0:a1:97:9b:a2:a5:39:a3:
3d:60:69:2c:ec:f8:32:9e:f9:42:f9:99:62:55:f4:27:2d:55:
58:dd:a9:b7:cd:58:fe:75:ae:c3:23:86:a2:c9:3f:9a:34:ec:
f2:1e:5b:11:ce:91:b8:27:a5:c7:d1:99:c9:b3:99:07:19:d9:
38:86:fd:9e:38:c6:29:4e:40:34:be:5f:0f:80:6d:3d:20:ce:
86:df:17:48:ad:8d:f9:4e:95:9e:08:d5:50:fc:d4:1e:98:eb:
4a:b8:45:46:23:7c:b7:9f:20:a1:97:6e:3c:25:cf:0a:cf:c6:
8b:cc:5a:06:64:53:3f:10:d4:fe:c1:d4:3d:dc:a0:aa:d8:f9:
d7:c8:d5:95:74:02:4c:50:9f:22:aa:a5:31:45:90:65:74:6f:
63:77:f4:2e:11:ca:43:c8:f8:6b:be:88:f3:01:01:e4:23:f5:
f1:08:87:d6:aa:11:3b:8d:cd:a1:1f:de:4f:f3:72:31:b1:75:
38:e0:93:84:9b:71:7b:6a:49:92:3e:fc:b6:c4:54:ee:fe:04:
d9:fb:6f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:51:52 2026 by rpki-client