Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
File: Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft (raw, json)
Hash identifier: EMnwohsmKdlKNmaBmQirulYkmOwv2dnVLDwXWHP6oh4=
Subject key identifier: FF:1A:31:4D:8A:10:A9:46:F5:07:7E:71:FC:65:CD:8E:0F:B0:FF:6E
Authority key identifier: 36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
Certificate issuer: /CN=36ea22f04b94078aae015e00957b273ff038cf12
Certificate serial: 01A1DBDD8D99C9482B28C71183F235B5E190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
Manifest number: 0491
Signing time: Sat 14 Nov 2026 21:01:32 +0000
Manifest this update: Sat 14 Nov 2026 21:01:32 +0000
Manifest next update: Sun 15 Nov 2026 21:01:32 +0000
Files and hashes: 1: 1-nEjApMTEeRJIn7bUOz0OxxiBq0.roa (hash: lbYjjUbr12AR7hdRUjgCrN5cjs0fc01uAnttT1Qjcw4=)
2: Da4_S4SNOtv4x_AyFwLO2iZ2NTk.roa (hash: xJscPnkxP4a5FF40dHDyxZzM/Ukqt+kncsmZfw6FDtk=)
3: Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl (hash: 0rta2B8oxMfpniaG8SGppUOhLNOyzf8GucBSkJ0eyfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:dd:8d:99:c9:48:2b:28:c7:11:83:f2:35:b5:e1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea22f04b94078aae015e00957b273ff038cf12
Validity
Not Before: Nov 14 21:01:32 2026 GMT
Not After : Nov 15 21:01:32 2026 GMT
Subject: CN=ff1a314d8a10a946f5077e71fc65cd8e0fb0ff6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:24:9e:52:e6:95:c6:5b:0c:eb:df:b7:95:f8:
9c:d3:f5:a8:ae:af:89:fd:cb:1f:5b:50:27:d0:e3:
c2:55:a3:cd:86:32:ff:87:ef:97:94:a6:59:d4:97:
e3:39:0c:c3:b7:9a:86:02:c6:ed:ab:49:79:66:0f:
3b:43:e1:cd:00:56:f6:2c:16:a8:b1:fc:42:06:85:
75:dc:97:22:64:79:74:84:63:3e:7b:64:91:de:bd:
76:48:15:ff:b4:2d:40:a5:39:9a:51:a8:67:c8:d3:
88:2a:80:e0:8b:f0:c0:7b:ec:de:af:21:7b:64:5f:
c7:4e:67:27:5e:9f:97:6e:cc:d1:08:e1:9e:78:36:
76:74:cf:0b:98:a4:75:14:f8:fe:40:c2:97:e7:f8:
f3:59:34:83:5a:ab:fc:da:a1:9b:1a:78:fc:6a:fd:
87:45:92:73:ca:59:05:53:69:45:47:09:49:97:89:
f7:29:13:f2:d5:56:d9:fa:ae:20:5a:4a:55:e3:d9:
d4:9b:90:55:91:64:9f:a0:6a:06:6f:c5:33:12:34:
eb:83:e6:2a:28:e6:9a:22:4c:89:6d:cc:c5:6f:98:
ec:0e:c2:d6:b2:2c:80:6d:df:7a:18:60:e7:2e:79:
e7:47:5b:0c:08:de:52:55:a8:45:6e:0e:d6:2d:3a:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1A:31:4D:8A:10:A9:46:F5:07:7E:71:FC:65:CD:8E:0F:B0:FF:6E
X509v3 Authority Key Identifier:
keyid:36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:25:5d:45:90:e9:96:ac:3c:f0:e7:27:96:f7:52:bb:91:78:
56:f5:14:ac:a7:f9:b4:41:e8:8c:ef:15:86:03:93:46:b0:9b:
60:16:ca:71:2a:0b:2a:09:6f:f5:ae:75:ee:35:2f:bd:75:07:
61:d5:7d:6c:b4:88:71:e7:1d:24:b9:a0:e5:63:2f:4c:37:61:
f7:b3:18:66:41:d1:84:79:f2:d2:f9:a7:6b:74:2d:63:ec:6c:
50:49:4f:3f:70:3b:22:6c:d4:15:92:38:b3:50:e5:5b:98:6a:
ea:90:12:ee:fd:40:41:fe:a8:17:fd:dd:a2:5c:7d:8c:77:b6:
bb:68:b0:a7:c1:bf:8e:80:2a:5f:a4:05:b6:8d:d9:6f:e1:3d:
d4:30:c0:9f:ac:46:12:49:13:f6:e5:80:d2:22:f9:29:10:f6:
1c:0e:65:c5:4e:5b:ad:f9:0f:0e:06:66:a6:e0:ad:4d:e4:78:
d2:54:1e:27:ae:2f:09:db:39:7c:c9:fa:a1:e3:36:ef:d4:5f:
de:31:ea:3a:8b:6f:ad:be:2c:90:51:77:64:4e:d8:14:0e:2f:
53:ac:98:ad:23:b6:94:a7:c6:5f:1f:f9:28:e1:df:82:50:32:
cc:ee:71:9a:18:2f:23:52:a3:a5:8b:e7:db:d4:a3:fe:5f:66:
d1:89:51:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:25:56 2026 by rpki-client