Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier: DKFOJmeTsGlFmo1F6AkSYm8mvJS1cSYVvl4bcEZyDSE=
Subject key identifier: 49:86:98:E7:B3:65:72:83:9E:65:95:2E:4D:CD:98:93:3A:2C:FA:BA
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 01A1DC14CA303E78DF5839247105502178FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number: 1B04
Signing time: Sat 14 Nov 2026 22:01:52 +0000
Manifest this update: Sat 14 Nov 2026 22:01:52 +0000
Manifest next update: Sun 15 Nov 2026 22:01:52 +0000
Files and hashes: 1: NP6D_AjoQrizgQpLPTRZ8K6eWkA.roa (hash: 60B8Z6NMx31io1/yt+mCoe3AOI225aq1Qj6yflpDE9M=)
2: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: 1UouwTT/sg0BWmBQoeau6fSO8wv5+IdsiZEiWyBddnk=)
3: OK_s7EBfpgZbjIrvUoVqzpWaoEw.roa (hash: zZg+oBq+g5DuaneD38ld2ueNobqmEDE+dyirbFmQtoM=)
4: t1vkmCK8KzwYpdaOj2Z8K8WRkuE.roa (hash: cQGDZLaCNeANHuWk60qBEto7tZ5K0Q991hBY/3JdECg=)
5: x62fdnQHTG86kc8QeNrs-Fg3oVE.roa (hash: Q5HR/EB53DA3xDXZeryGNxJzH4ahXtlYt7caGd1WQn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:14:ca:30:3e:78:df:58:39:24:71:05:50:21:78:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Nov 14 22:01:52 2026 GMT
Not After : Nov 15 22:01:52 2026 GMT
Subject: CN=498698e7b36572839e65952e4dcd98933a2cfaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:77:26:6e:b7:e8:7e:48:f5:80:e4:07:cb:b4:
6a:aa:a6:85:8c:bc:03:df:d6:3d:08:4b:e7:75:9b:
27:98:ef:08:38:17:75:b7:f8:a8:7f:3f:e4:7d:12:
55:f7:7e:ae:f3:3e:55:8e:5e:ac:af:c5:a9:56:87:
62:5f:97:bd:58:a8:f2:82:5b:1a:10:a0:c8:73:47:
a1:eb:52:6d:c5:fd:07:30:d3:2f:40:1b:dd:6a:9b:
ac:a7:3f:56:50:32:fb:3b:cd:11:fe:41:84:8d:2c:
10:53:9f:c3:b1:2b:90:83:83:1b:23:75:c7:da:fb:
7b:7d:93:cf:2c:97:8f:e8:e5:7e:6a:e0:80:ab:0b:
61:32:9e:2f:d7:be:69:33:ed:03:3e:6b:0a:e5:a3:
70:a0:c6:d7:59:2b:3d:78:12:96:0c:ea:04:2b:8d:
f7:91:09:62:28:4d:db:c1:ff:5b:6c:9f:6e:96:e6:
31:3d:46:7f:e3:14:89:49:94:d3:3b:ba:a7:d9:4b:
ec:e1:9e:c4:fd:d5:b0:98:d2:dc:5a:57:ed:7d:2c:
eb:5f:72:51:cf:81:d8:0c:bd:4f:ed:e4:ae:4f:c9:
5a:f7:e4:f9:0d:ad:54:01:06:79:27:af:e8:f8:4d:
18:a5:b9:03:cd:4d:7f:2d:ed:20:12:72:fc:ab:47:
a5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:86:98:E7:B3:65:72:83:9E:65:95:2E:4D:CD:98:93:3A:2C:FA:BA
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:48:bb:ea:20:c8:14:42:ec:6f:04:d0:fe:20:1a:fe:7f:74:
38:e1:70:ba:83:27:5d:b0:73:05:7a:89:43:88:94:4a:5c:99:
12:12:79:b6:21:03:7e:41:c7:50:eb:be:56:97:7f:30:3a:e0:
ab:f3:cf:94:f8:51:69:df:d7:b3:fc:34:4a:1d:95:97:63:c9:
f5:b1:81:85:83:18:ed:11:29:ed:41:a8:cd:ba:ef:a9:c1:6c:
7e:ea:b1:0f:c2:9f:c2:3b:cc:cf:a8:15:8c:b1:e1:07:b5:c1:
75:e6:64:5b:4b:7c:50:65:0e:8b:8d:42:3f:69:de:8a:4b:06:
b1:c5:e6:c5:8e:20:22:a6:a3:dc:5d:87:56:18:d0:16:96:83:
ec:ab:8a:12:6e:ba:f7:90:79:cd:f2:36:0c:50:f8:44:f3:de:
45:b3:e3:9a:33:f9:ea:b4:08:b4:70:f0:c2:0a:0a:b0:8c:e2:
4f:24:57:52:f9:2a:af:27:a3:2c:d6:d0:ef:ea:3c:ee:30:6c:
f1:47:6f:43:6c:b9:92:33:63:ec:e8:4a:95:4a:43:86:e6:79:
37:b9:c5:d2:40:b8:14:60:55:76:bc:13:94:10:c8:7d:01:d4:
58:c8:82:7b:c2:56:b8:b6:bd:50:45:98:9f:cc:3b:f5:14:d3:
e1:33:0a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:35:52 2026 by rpki-client