Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
File: NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft (raw, json)
Hash identifier: S2Jag5eB4K1QmoBPybl0T4HzovvKtZam1T+IIfnvwo0=
Subject key identifier: 02:06:AC:A4:C9:0A:CA:6B:87:A8:22:BC:16:5A:83:41:E8:4C:95:4F
Authority key identifier: 36:A3:2E:14:A2:FF:EC:E5:67:9F:3E:D1:17:C3:0F:F7:7B:45:B0:F4
Certificate issuer: /CN=36a32e14a2ffece5679f3ed117c30ff77b45b0f4
Certificate serial: 019D265FD3A9CD9DC950C12D28B868F47296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
Manifest number: 0AC2
Signing time: Wed 25 Mar 2026 19:01:47 +0000
Manifest this update: Wed 25 Mar 2026 19:01:47 +0000
Manifest next update: Thu 26 Mar 2026 19:01:47 +0000
Files and hashes: 1: Gcvg1TOFDjpajp7odbqwFDKpBAs.roa (hash: UMt5peYripqOkorgu+LitEPMKkctWUjnSWw9aPRzg/0=)
2: NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl (hash: Zn+j4nhyIIovqaDrd96ZTZ5B1rIJEF+lbd3TxpF3az4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:d3:a9:cd:9d:c9:50:c1:2d:28:b8:68:f4:72:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a32e14a2ffece5679f3ed117c30ff77b45b0f4
Validity
Not Before: Mar 25 19:01:47 2026 GMT
Not After : Mar 26 19:01:47 2026 GMT
Subject: CN=0206aca4c90aca6b87a822bc165a8341e84c954f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:ea:e3:28:14:88:9c:af:ca:db:6e:dc:c7:
25:22:0f:0f:1e:d3:ee:5f:3a:4e:29:27:9b:0e:ee:
1d:82:82:9c:d1:5c:72:55:73:c3:80:f0:2a:5a:94:
85:75:7d:15:25:5c:a8:1c:c4:07:23:3b:0f:b9:3f:
84:cb:5a:b3:06:51:53:a0:38:ad:91:a8:43:4a:38:
9b:56:b1:5e:fb:62:16:76:7e:d7:03:46:04:92:22:
67:d0:87:17:80:73:47:89:c1:96:50:b1:d0:04:1d:
23:7a:11:7f:43:a7:db:fa:00:5e:a3:fd:04:b5:87:
4f:ba:90:ff:9e:5c:00:c7:be:c4:8e:61:3a:06:3d:
d4:d6:69:3b:10:1d:8b:6c:68:71:84:6f:f0:e0:46:
bd:4a:44:64:92:ba:2d:66:ce:c9:4e:cf:25:eb:5a:
08:8d:dc:7c:05:58:d4:85:11:32:3d:4e:39:9a:42:
80:b4:2f:08:7f:28:72:ee:f2:5c:cd:48:07:02:fd:
c5:b4:a4:28:0b:ac:df:12:e3:8a:0e:66:1b:46:29:
c1:c5:9f:00:a7:d2:6c:56:ac:43:cb:36:84:de:b4:
fb:64:63:d8:6a:7a:46:13:d0:57:41:9d:99:a0:a5:
3b:5e:ec:2a:f7:64:8b:4c:04:f0:af:96:b2:08:a2:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:06:AC:A4:C9:0A:CA:6B:87:A8:22:BC:16:5A:83:41:E8:4C:95:4F
X509v3 Authority Key Identifier:
keyid:36:A3:2E:14:A2:FF:EC:E5:67:9F:3E:D1:17:C3:0F:F7:7B:45:B0:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:59:fe:d6:57:e6:1a:31:d8:be:48:0c:8a:65:8d:a3:23:75:
f1:4e:9d:07:64:9b:cf:3a:9f:6c:d0:de:a9:ea:9c:ce:a2:ad:
21:6a:bd:a5:c3:96:af:5f:13:50:41:ef:ce:f8:22:db:f3:b9:
2c:e3:a0:c6:c3:d9:35:f4:61:b7:0b:9f:52:9f:8f:3e:d4:18:
e7:84:37:e0:f8:5e:7f:5a:0e:39:c8:25:ff:6f:03:50:73:71:
d0:aa:db:b9:ab:1f:32:af:fe:82:91:75:89:85:e8:61:4f:ff:
dc:77:f7:fb:d7:80:c9:fb:74:af:24:08:5b:cc:72:89:b4:4c:
04:1b:8f:44:46:f0:41:6a:81:25:53:60:7f:cf:9c:70:07:ca:
80:fa:6d:f1:f2:f8:7a:1b:20:d9:0e:ba:4e:3b:46:54:b3:d4:
f7:fe:2d:d8:e4:fc:8b:16:ba:82:68:a1:55:a1:b0:de:72:0e:
ca:66:f8:8f:77:24:ff:99:ce:bb:d8:d1:52:0e:58:38:03:fe:
54:05:86:c7:7b:88:49:97:ca:db:09:dd:ba:74:ac:e5:e5:07:
1f:22:0e:ab:ac:94:74:c4:f6:dc:c5:77:18:12:84:77:e8:5f:
76:4a:84:11:56:a0:05:40:32:f6:a4:d3:19:65:c7:ad:04:c2:
73:30:e0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:02:06 2026 by rpki-client