Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: fTZtUxiPVI3IEJ83v8MJYk148tpmwFRulSzKFXzgBQs=
Subject key identifier: DA:BC:C3:7D:F0:B5:A9:1F:76:F8:D7:9B:68:6C:FE:B4:45:F7:75:BD
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 01A15440E69008D77A135542DE61ACE935C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 1AB9
Signing time: Mon 19 Oct 2026 13:01:41 +0000
Manifest this update: Mon 19 Oct 2026 13:01:41 +0000
Manifest next update: Tue 20 Oct 2026 13:01:41 +0000
Files and hashes: 1: DOdbQIaTN2-U6lBMiFCsU2jbWrk.roa (hash: fX0ZPGU2Ep4sA5JGb1FOHePhR06Bt3nJo7FLowUZnbQ=)
2: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: ko3xsou5BR0MYb6+AO4XX5cTLJoJmJ2vrq82xuq6rtE=)
3: dsrIojswrtCAaVDG7x95eUR5UNs.roa (hash: qILxj7yICSM2GLcGcjXclEWNMSwoXtcOFYbxsTUB7mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:40:e6:90:08:d7:7a:13:55:42:de:61:ac:e9:35:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Oct 19 13:01:41 2026 GMT
Not After : Oct 20 13:01:41 2026 GMT
Subject: CN=dabcc37df0b5a91f76f8d79b686cfeb445f775bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:49:5a:d3:47:1c:1f:eb:fb:8b:f2:10:f2:0d:
bc:8f:f3:d8:fa:6d:70:50:15:70:00:a1:3d:ea:54:
89:1e:60:de:91:fd:76:09:bc:02:17:8b:82:53:30:
08:76:7d:35:a1:72:fa:5c:39:ab:dc:bd:70:ae:f6:
e4:1f:3a:06:8c:53:85:a3:88:7a:af:7b:24:1c:87:
a7:55:d0:ca:5a:ad:d4:52:cd:e3:55:e7:a1:c3:86:
2e:63:26:36:7e:c3:bc:04:7b:5f:32:0e:d9:0d:02:
f3:38:aa:03:41:81:8b:3f:b6:4e:7a:a1:0b:da:e4:
22:97:05:81:8b:68:eb:a5:93:2e:53:56:54:ed:ea:
7d:88:c0:30:d9:e5:be:da:64:7b:d4:8e:d0:c5:80:
cf:25:f0:10:b3:13:90:7f:ea:24:fb:40:91:fd:2f:
f7:86:33:46:fd:a7:f4:64:79:ab:35:fd:d7:72:bf:
49:4e:9e:63:75:4c:8e:c0:c2:db:a1:18:34:a7:90:
ad:6d:c1:0e:b1:3c:b5:2e:27:51:27:d8:9d:b6:93:
f0:68:db:23:c6:b9:a8:71:91:dd:21:27:fd:91:e3:
28:4e:ba:a3:e7:09:a5:5e:2a:7b:e4:cf:57:88:dd:
aa:ce:38:e4:61:6c:66:fb:87:60:56:46:73:cf:4a:
3e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BC:C3:7D:F0:B5:A9:1F:76:F8:D7:9B:68:6C:FE:B4:45:F7:75:BD
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b6:0b:12:c5:c7:73:16:52:2b:7c:69:d8:66:f0:d2:eb:fc:
06:16:d9:d0:2c:e9:56:6a:58:80:17:da:e4:e5:aa:d2:fa:c3:
59:f7:87:0e:26:91:d2:6d:4c:75:49:dd:54:4e:72:36:5d:14:
89:81:db:aa:78:f3:e1:d8:53:a5:c9:72:c2:11:ef:37:45:51:
aa:8c:96:7e:d8:28:46:a9:3d:8e:8d:b5:a6:49:fd:06:d4:d2:
d8:1d:58:3a:9d:72:3a:dc:99:4a:6d:5e:94:54:c4:c2:ce:0d:
8c:5b:6c:db:31:a3:af:0d:98:36:0f:6c:7e:47:b7:8c:04:0c:
be:1f:a9:e2:f8:34:1f:64:46:fe:58:b8:d6:97:49:70:5d:2b:
b9:31:7c:42:3c:5b:2d:49:34:ce:42:aa:9d:3e:f4:59:3a:5c:
f3:dd:ac:6d:6d:00:ae:cb:2c:27:85:41:53:a9:3c:a6:d8:24:
fa:4e:36:f3:88:d0:b7:22:8c:eb:75:a8:2b:00:1f:da:04:9f:
d4:5a:b2:b9:23:ad:14:fa:90:d0:96:44:6c:8c:01:67:7f:f4:
e7:34:39:a6:89:e7:0e:95:86:5c:cd:04:9c:3b:73:6c:5a:96:
2d:5f:97:b3:fa:6e:11:b4:45:24:ce:62:85:5c:54:39:a9:06:
f4:02:6d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:54:08 2026 by rpki-client