Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
File: NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft (raw, json)
Hash identifier: was11RBt5kCq3rEorrgjuh3J/0Hkb+duxxEkazOmRtA=
Subject key identifier: B4:68:07:C9:98:DC:1F:5B:2E:DD:78:0B:6E:E5:04:9D:84:E7:21:98
Authority key identifier: 36:A3:2E:14:A2:FF:EC:E5:67:9F:3E:D1:17:C3:0F:F7:7B:45:B0:F4
Certificate issuer: /CN=36a32e14a2ffece5679f3ed117c30ff77b45b0f4
Certificate serial: 01A0E43F1A861684AF33475EB13074680E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
Manifest number: 0CB2
Signing time: Sun 27 Sep 2026 19:02:15 +0000
Manifest this update: Sun 27 Sep 2026 19:02:15 +0000
Manifest next update: Mon 28 Sep 2026 19:02:15 +0000
Files and hashes: 1: Gcvg1TOFDjpajp7odbqwFDKpBAs.roa (hash: UMt5peYripqOkorgu+LitEPMKkctWUjnSWw9aPRzg/0=)
2: NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl (hash: famRWUDFNgEQkCgxGjIlBV8GU1uYbto9tzd2cx3tDlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3f:1a:86:16:84:af:33:47:5e:b1:30:74:68:0e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a32e14a2ffece5679f3ed117c30ff77b45b0f4
Validity
Not Before: Sep 27 19:02:15 2026 GMT
Not After : Sep 28 19:02:15 2026 GMT
Subject: CN=b46807c998dc1f5b2edd780b6ee5049d84e72198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:b0:a4:a1:72:b1:f3:fb:5d:5a:58:a5:fd:
0d:3b:7c:b5:f1:ba:1a:e8:ae:cf:a1:f3:43:38:3f:
44:a9:f7:2a:39:91:98:6f:b5:a4:e8:c8:01:8b:d5:
a6:85:3e:e6:e5:58:9d:21:35:b1:ca:10:01:9c:69:
fa:b3:49:9b:99:17:82:19:8c:f3:8c:95:06:8e:0e:
63:78:03:2e:dc:2d:5c:44:b8:41:6a:53:17:ca:76:
fe:99:b2:1d:5d:0a:e1:9e:45:74:73:22:b8:36:ce:
9a:e0:ea:03:c1:20:49:0f:4d:3f:85:c7:6b:71:b5:
7a:a6:cc:f7:2d:80:42:b4:79:89:08:01:05:34:27:
d2:b9:53:c6:9e:41:67:7b:f7:9b:f7:85:1e:3e:8b:
b6:88:36:91:bf:29:f4:24:08:36:32:f1:cc:3f:df:
51:cb:b3:ba:5f:b0:85:f2:cb:bb:75:81:06:23:92:
3e:8e:c6:f5:c8:b7:38:3a:55:18:67:c5:55:c5:81:
87:3a:05:90:33:af:a4:c6:8b:be:dd:7f:2f:d5:b0:
f0:bf:a0:e0:7a:c0:ae:a7:91:13:71:e7:34:18:03:
2b:82:0d:f8:15:73:77:6f:af:85:9c:8f:36:2e:49:
59:c9:ce:58:6c:fd:89:fc:0c:f5:8c:58:e9:c1:82:
90:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:68:07:C9:98:DC:1F:5B:2E:DD:78:0B:6E:E5:04:9D:84:E7:21:98
X509v3 Authority Key Identifier:
keyid:36:A3:2E:14:A2:FF:EC:E5:67:9F:3E:D1:17:C3:0F:F7:7B:45:B0:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b1:f6:c3:ce:a4:89:eb:4b:6a:8b:26:20:ba:4d:b7:55:bf:
4c:06:d0:28:d9:de:7b:f9:4e:04:d7:b6:20:5c:5b:01:b8:d7:
87:ae:6b:1a:43:44:77:61:ff:c0:e9:99:30:1f:b1:07:06:75:
bf:09:d8:df:eb:16:d0:ca:de:90:e7:42:99:3d:21:69:ad:e8:
94:89:09:5e:d2:4e:e2:b7:e9:27:e5:c9:45:e5:64:70:f7:c1:
13:41:1a:0f:45:f7:9f:a5:46:62:4e:d4:8b:64:77:93:03:7e:
d1:95:0d:fe:bd:1a:31:60:46:cc:23:63:f1:ad:af:62:5e:3d:
48:fd:7e:96:cd:1d:bb:2b:31:35:65:73:23:41:8f:d4:86:a5:
23:12:23:f2:2d:35:1b:aa:79:02:69:a4:2c:69:8b:04:8f:8b:
b5:ae:35:ea:be:dd:b4:86:16:1a:11:51:a2:3b:ef:f6:52:37:
6d:74:ba:95:76:36:0c:4c:8c:f6:44:21:bf:e5:06:e0:c6:5d:
a0:bc:69:f3:8b:7c:4f:9b:06:a2:ef:23:86:3d:14:e3:dc:42:
be:ee:6c:f0:29:00:43:9d:b0:dc:54:c7:07:cf:80:b5:fa:4c:
10:53:d1:52:0b:a3:8f:e9:39:d5:6d:de:89:6b:44:ab:db:d1:
3a:e9:1b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:46:59 2026 by rpki-client