Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
File: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft (raw, json)
Hash identifier: 3tguCJIjtUjF5TEE+FmRtc3z+Oi2Ea8t74DQ8wVPYZ8=
Subject key identifier: A5:8B:F3:7A:6A:2A:4A:56:03:51:93:E8:93:14:7B:0B:0E:EB:9D:C1
Authority key identifier: 36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
Certificate issuer: /CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Certificate serial: 019D26CDA00D696147BA3036D4282B4BADAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 21:01:43 +0000
Manifest this update: Wed 25 Mar 2026 21:01:43 +0000
Manifest next update: Thu 26 Mar 2026 21:01:43 +0000
Files and hashes: 1: 2faiVit9OjueZahp7YpMGI9nPX0.roa (hash: OgjxqGpyZOwTD9iVONTR2DO+mW7tsVQaXV48+jDEJWE=)
2: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl (hash: VDji04cNUHuGcAtKjB4OOZ4fYxQEMTKqz5vKqyISbgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:a0:0d:69:61:47:ba:30:36:d4:28:2b:4b:ad:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Validity
Not Before: Mar 25 21:01:43 2026 GMT
Not After : Mar 26 21:01:43 2026 GMT
Subject: CN=a58bf37a6a2a4a56035193e893147b0b0eeb9dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:fe:57:37:5d:e6:8d:65:24:3b:72:2e:51:
09:65:e0:05:dc:9b:1f:dd:73:13:20:a2:1d:35:88:
da:20:ec:b6:a8:0f:8a:04:10:ff:f6:9c:23:fe:f7:
b1:3f:53:42:fb:38:0b:e8:ce:92:97:09:3d:cc:a9:
26:a1:b0:c1:67:fc:92:2a:97:4e:8a:6c:42:58:fe:
10:11:68:2a:a7:ee:56:d1:00:89:5c:ea:77:c4:e7:
21:70:80:be:a8:fc:92:3d:a7:70:14:e7:92:3b:50:
5b:ab:d9:92:bc:f8:f2:7d:f2:9a:b6:ff:e6:ba:ac:
6f:fd:fc:d7:06:e4:f9:27:78:67:3e:c2:73:36:c2:
1a:9b:e2:44:40:f2:35:01:cb:d0:20:51:5d:77:98:
3d:d7:44:4d:b9:c8:58:a1:50:48:6f:f3:ca:ae:a5:
c5:5c:f0:3b:e7:2c:9a:76:48:9e:40:c8:ae:a0:e2:
03:ce:a1:07:ab:7e:cb:d4:65:05:cc:e0:8b:87:30:
10:03:c3:09:9e:81:e4:6f:ac:c1:de:46:5f:77:48:
1d:ad:23:67:66:d6:5e:9f:e1:89:6d:7c:2e:fc:a1:
c6:b1:6a:d9:65:a2:f8:0a:e2:30:27:04:45:2c:0d:
d5:04:21:c2:53:a0:e8:54:87:9c:b6:a3:a0:cf:62:
f4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8B:F3:7A:6A:2A:4A:56:03:51:93:E8:93:14:7B:0B:0E:EB:9D:C1
X509v3 Authority Key Identifier:
keyid:36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e1:ec:aa:d1:26:02:c8:f7:49:87:00:9b:30:d7:d5:3b:94:
bc:fa:7b:79:e8:63:40:aa:1b:ba:8e:85:1b:4d:3d:a7:39:3a:
2e:72:18:83:42:64:9c:9c:bb:1b:d8:0f:bf:a4:bd:f1:f9:9c:
c1:a0:8c:2e:55:db:4d:c7:97:1b:ad:87:0a:71:47:56:b2:65:
f8:ef:85:66:51:9a:02:16:a1:27:c4:51:a5:c3:09:ff:b5:a5:
0a:29:f1:c2:94:14:70:75:8d:17:c5:ba:8d:3f:bf:7f:04:28:
c3:fe:55:50:18:ae:52:78:84:32:db:4a:eb:2c:58:e9:76:f9:
55:8f:89:b6:cf:17:be:40:36:30:4e:e1:46:49:42:61:08:46:
a3:95:ff:73:4e:07:e1:2f:c7:08:ed:28:7b:a3:2a:ae:da:48:
f4:19:c8:79:be:74:a7:a3:a9:56:25:5d:a1:c7:aa:85:aa:82:
8c:5d:a2:bf:1c:07:1b:bf:03:6e:97:37:c1:13:89:45:9b:a0:
7c:ba:cf:d8:0c:8b:03:4e:20:91:24:1c:52:cb:91:e3:52:40:
3d:20:62:cd:b3:82:7c:02:1a:3d:31:1f:b8:56:36:ca:25:8c:
03:16:55:9a:80:14:4b:1e:d1:5a:c4:a9:3c:86:1a:a1:23:63:
bc:cf:1f:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzaANaWFHujA21CgrS62sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YWFmYTVjM2YyZjhlNGEwODNmODFmMGNiODdiYzdhZWE0
NDg5MWYwHhcNMjYwMzI1MjEwMTQzWhcNMjYwMzI2MjEwMTQzWjAzMTEwLwYDVQQD
EyhhNThiZjM3YTZhMmE0YTU2MDM1MTkzZTg5MzE0N2IwYjBlZWI5ZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2L+Vzdd5o1lJDtyLlEJZeAF3Jsf
3XMTIKIdNYjaIOy2qA+KBBD/9pwj/vexP1NC+zgL6M6Slwk9zKkmobDBZ/ySKpdO
imxCWP4QEWgqp+5W0QCJXOp3xOchcIC+qPySPadwFOeSO1Bbq9mSvPjyffKatv/m
uqxv/fzXBuT5J3hnPsJzNsIam+JEQPI1AcvQIFFdd5g910RNuchYoVBIb/PKrqXF
XPA75yyadkieQMiuoOIDzqEHq37L1GUFzOCLhzAQA8MJnoHkb6zB3kZfd0gdrSNn
ZtZen+GJbXwu/KHGsWrZZaL4CuIwJwRFLA3VBCHCU6DoVIectqOgz2L05wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWL83pqKkpWA1GT6JMUewsO653BMB8GA1UdIwQY
MBaAFDaq+lw/L45KCD+B8MuHvHrqRIkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85MjVkNGEtZjVmNC00Mjk5LWE4Mjkt
MTUyYTU5NDc5ZTY5LzEvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC85MjVkNGEtZjVmNC00Mjk5LWE4MjktMTUyYTU5NDc5ZTY5
LzEvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeHsqtEm
Asj3SYcAmzDX1TuUvPp7eehjQKobuo6FG009pzk6LnIYg0JknJy7G9gPv6S98fmc
waCMLlXbTceXG62HCnFHVrJl+O+FZlGaAhahJ8RRpcMJ/7WlCinxwpQUcHWNF8W6
jT+/fwQow/5VUBiuUniEMttK6yxY6Xb5VY+Jts8XvkA2ME7hRklCYQhGo5X/c04H
4S/HCO0oe6MqrtpI9BnIeb50p6OpViVdoceqhaqCjF2ivxwHG78Dbpc3wROJRZug
fLrP2AyLA04gkSQcUsuR41JAPSBizbOCfAIaPTEfuFY2yiWMAxZVmoAUSx7RWsSp
PIYaoSNjvM8f2g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:34 2026 by rpki-client