Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: cItKe1Rn/hvibiBwEgV4F3eI79PBGvdBYitgxyxcdPg=
Subject key identifier: 64:1E:FE:FB:1A:E3:E4:20:87:8F:9F:D7:3C:D5:34:C2:C8:82:F5:90
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 019F82D53018ADFF8DDF506ACED05BA65A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 19C8
Signing time: Tue 21 Jul 2026 04:00:37 +0000
Manifest this update: Tue 21 Jul 2026 04:00:37 +0000
Manifest next update: Wed 22 Jul 2026 04:00:37 +0000
Files and hashes: 1: DOdbQIaTN2-U6lBMiFCsU2jbWrk.roa (hash: fX0ZPGU2Ep4sA5JGb1FOHePhR06Bt3nJo7FLowUZnbQ=)
2: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: YFzo0JzIbrfCovdXnAyY7L3pxSD7HKiOnbypq71As2A=)
3: dsrIojswrtCAaVDG7x95eUR5UNs.roa (hash: qILxj7yICSM2GLcGcjXclEWNMSwoXtcOFYbxsTUB7mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:d5:30:18:ad:ff:8d:df:50:6a:ce:d0:5b:a6:5a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Jul 21 04:00:37 2026 GMT
Not After : Jul 22 04:00:37 2026 GMT
Subject: CN=641efefb1ae3e420878f9fd73cd534c2c882f590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:0f:79:9d:a9:f1:82:c7:da:e7:c4:45:ce:
26:8a:7f:9d:35:4f:e4:02:f0:a6:77:23:a7:6c:3c:
fd:f8:2d:17:85:bc:9b:df:7f:5f:05:0f:e5:22:70:
5e:3c:ec:b5:8b:b3:eb:fb:57:29:49:6c:03:d5:69:
71:f9:58:c0:72:98:e1:45:51:b6:01:39:6a:0d:ce:
55:fd:55:d7:1b:e5:67:a0:c0:9b:6f:fb:1d:6d:47:
6a:e8:cd:c9:ce:67:dc:52:d2:e6:dd:f2:c3:bc:8b:
0e:ee:27:06:ca:9d:bb:80:08:05:53:7f:af:f0:a3:
43:86:5c:ea:ef:a3:56:ef:1b:49:84:42:98:00:99:
28:4d:47:54:8f:e4:30:37:2c:43:ee:be:8b:8a:51:
01:eb:26:6b:66:13:74:0d:44:8c:5e:23:c8:97:b6:
aa:62:04:fb:d7:21:50:93:9e:5f:d7:b2:7f:e4:45:
ba:ba:63:8d:7e:5c:78:d2:a5:26:25:ba:7f:97:23:
07:79:cf:3f:26:be:39:c2:10:12:24:50:bf:79:bf:
14:39:0d:54:14:ba:a6:46:ab:8d:d6:58:cb:ac:7a:
b2:0d:1c:f0:7e:a0:aa:47:ec:6b:9a:8b:61:9a:96:
8d:51:d9:96:7a:b0:a6:5b:be:27:da:59:16:32:4d:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1E:FE:FB:1A:E3:E4:20:87:8F:9F:D7:3C:D5:34:C2:C8:82:F5:90
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2a:d7:df:4a:86:9f:5d:e8:b9:ed:5a:b7:aa:80:29:8a:33:
55:40:46:4e:dc:03:cd:7f:02:0a:42:e1:0f:9a:3a:6a:d1:0f:
45:65:f9:42:74:5b:db:4b:13:8a:5e:dc:fe:98:7c:b6:e6:20:
1c:35:18:8a:e2:7f:c0:49:f5:17:f0:55:d1:f4:c2:10:54:43:
cc:15:0c:89:46:ec:b9:d1:0a:59:53:79:b8:7e:50:0c:cf:f6:
a5:3f:99:68:f3:02:60:d7:57:ff:8a:e3:74:e7:17:a3:3f:0e:
3d:57:ca:21:07:c9:02:3e:d1:fb:9d:ae:80:46:01:24:ab:12:
8d:da:09:ef:d9:7b:1c:c8:9d:78:61:8e:2f:6c:cc:59:4a:f4:
d0:75:59:da:cb:c9:42:1c:9a:91:a4:7a:ca:15:85:5f:34:a5:
ba:ca:ff:7e:e8:77:8d:ba:d1:49:94:48:f6:1a:b3:64:2b:ef:
a6:5e:12:bf:18:19:fe:07:0c:1a:56:41:9a:0d:e0:91:f5:c8:
7e:fd:7b:e0:3e:22:c5:40:6c:1d:1a:b7:e0:4a:7b:fe:aa:82:
4c:dd:64:83:25:be:c9:03:ec:15:4e:87:06:43:57:84:c3:b1:
87:1c:b6:90:d8:5e:ce:de:02:22:c0:4d:76:22:aa:78:ef:bc:
ea:0e:2d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:06:58 2026 by rpki-client