Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
File: Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft (raw, json)
Hash identifier: WS1K5P37/HphzELNItqKtfEjFyg/ejcOi+ZMErlRfew=
Subject key identifier: BD:D1:53:62:E2:B7:C2:FB:3D:3A:AC:DE:93:DB:F6:9C:52:78:E4:DB
Authority key identifier: 36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
Certificate issuer: /CN=36ea22f04b94078aae015e00957b273ff038cf12
Certificate serial: 01A0D34A57EF6719EE7416C2D63DDB7BC97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
Manifest number: 0408
Signing time: Thu 24 Sep 2026 12:00:59 +0000
Manifest this update: Thu 24 Sep 2026 12:00:59 +0000
Manifest next update: Fri 25 Sep 2026 12:00:59 +0000
Files and hashes: 1: 1-nEjApMTEeRJIn7bUOz0OxxiBq0.roa (hash: lbYjjUbr12AR7hdRUjgCrN5cjs0fc01uAnttT1Qjcw4=)
2: Da4_S4SNOtv4x_AyFwLO2iZ2NTk.roa (hash: xJscPnkxP4a5FF40dHDyxZzM/Ukqt+kncsmZfw6FDtk=)
3: Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl (hash: vdTPgdUIdezO7gZTYE/GmVq5f39Y0Ifrb4sjfHQ2rMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:57:ef:67:19:ee:74:16:c2:d6:3d:db:7b:c9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea22f04b94078aae015e00957b273ff038cf12
Validity
Not Before: Sep 24 12:00:59 2026 GMT
Not After : Sep 25 12:00:59 2026 GMT
Subject: CN=bdd15362e2b7c2fb3d3aacde93dbf69c5278e4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:13:cc:1a:63:0d:43:41:c2:e1:cc:81:77:
41:26:8d:9b:87:94:e0:15:58:14:fc:36:f7:03:bc:
d8:65:02:7c:da:54:95:e3:2e:18:ed:cf:53:39:43:
5d:ce:cc:cb:2d:3f:65:c1:b6:0c:e1:38:4c:4f:0a:
5c:79:09:8f:b2:63:9c:82:ad:ca:9c:03:f7:91:35:
cb:fe:30:80:39:07:53:29:2d:f1:d8:38:b0:a4:3a:
80:4b:ed:8e:c2:51:98:be:fa:9e:97:ea:bf:3d:17:
85:49:eb:f1:d4:c8:37:38:ca:3a:26:36:df:71:81:
df:15:6f:dd:c2:4f:14:4e:e9:4f:30:9a:cf:a9:e6:
a1:57:dc:a5:ae:a0:26:1d:8c:1f:5c:42:a2:a2:1f:
d8:cd:be:96:cc:21:4e:64:54:7a:e2:a0:db:aa:50:
2d:b5:eb:93:3d:a6:82:77:40:8f:5e:0c:83:9c:e4:
97:de:05:4e:6f:d5:7e:49:6f:85:1e:b5:78:43:3f:
c4:c3:52:f9:d5:3b:da:0d:71:fc:17:80:b1:30:78:
f9:3c:60:3f:3f:0a:ae:c5:22:ac:f9:d2:18:dd:70:
50:d3:85:55:1d:b4:26:2b:e5:23:44:4d:5e:e8:0c:
67:75:f1:8b:55:46:96:96:c1:05:24:21:c6:d6:86:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D1:53:62:E2:B7:C2:FB:3D:3A:AC:DE:93:DB:F6:9C:52:78:E4:DB
X509v3 Authority Key Identifier:
keyid:36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:fe:43:3b:87:d0:8d:22:e7:7a:5a:1b:f7:15:cc:73:d6:82:
83:cd:10:8f:57:fb:ee:7c:20:e9:bb:93:70:23:f1:d0:a5:a4:
89:11:66:5a:7a:f0:86:37:c4:76:57:f6:8b:70:4c:58:e7:21:
a0:e8:f0:1f:85:48:75:0e:b1:d2:66:cd:1b:e6:21:50:ae:a0:
bb:74:59:38:7e:3c:44:76:39:65:c7:f9:e3:d1:60:08:00:63:
65:6c:eb:43:e1:06:f5:a2:95:25:da:31:02:69:75:74:26:d0:
c7:07:80:da:4f:41:d5:d2:de:94:24:2c:b4:64:27:6a:86:0d:
b2:3a:61:ad:ea:53:dd:87:4b:b9:ed:5e:be:7c:53:c1:4d:90:
57:a4:43:7b:de:a3:d9:3d:62:24:4a:49:ee:dc:c7:5b:72:80:
10:93:c6:48:da:87:d3:ce:a9:41:32:35:3e:49:e7:2e:c7:d7:
8b:d5:f4:44:3e:da:b5:ec:9b:58:a7:5e:5f:4c:84:62:5c:c9:
a2:f4:01:a2:1e:59:7c:26:60:f2:e6:49:6b:16:43:9a:5b:36:
33:82:73:04:5d:37:39:7a:ee:de:f7:50:2a:6b:d4:a1:51:51:
e1:21:c9:3f:d0:57:e7:f6:0f:20:f5:57:e3:34:1b:74:00:34:
2b:aa:aa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:44:39 2026 by rpki-client