Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: rNRU94vcWzWZ6zC+HXB4+vdWLmw0bUB9+auCupyiaQI=
Subject key identifier: 77:43:2F:AF:4F:97:1C:CE:9B:9F:A2:7A:CB:E3:F5:C6:1A:CC:C9:33
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 019E916F2B8155FD1D3B1AC4DC28937292B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 194B
Signing time: Thu 04 Jun 2026 07:00:42 +0000
Manifest this update: Thu 04 Jun 2026 07:00:42 +0000
Manifest next update: Fri 05 Jun 2026 07:00:42 +0000
Files and hashes: 1: DOdbQIaTN2-U6lBMiFCsU2jbWrk.roa (hash: fX0ZPGU2Ep4sA5JGb1FOHePhR06Bt3nJo7FLowUZnbQ=)
2: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: hxk4arauFki1BkDbsgwwg+1kNaT7ULQVbihyG53sF88=)
3: dsrIojswrtCAaVDG7x95eUR5UNs.roa (hash: qILxj7yICSM2GLcGcjXclEWNMSwoXtcOFYbxsTUB7mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:6f:2b:81:55:fd:1d:3b:1a:c4:dc:28:93:72:92:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Jun 4 07:00:42 2026 GMT
Not After : Jun 5 07:00:42 2026 GMT
Subject: CN=77432faf4f971cce9b9fa27acbe3f5c61accc933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:58:ac:a2:39:da:aa:a9:8a:5c:93:a9:7e:
61:3b:a4:0d:75:e5:0c:5f:1a:04:87:fc:52:b3:3a:
e7:1e:0a:17:47:1a:fc:80:c5:b1:07:0a:d7:b8:08:
a8:fa:97:a5:a4:63:82:e6:ad:c1:40:78:c9:9e:7f:
3d:c7:df:71:50:b5:63:61:2b:20:4e:e9:f2:8c:28:
c3:08:52:81:06:3f:09:ac:22:25:28:b2:8a:34:b1:
95:cc:39:c1:91:40:aa:6b:e8:6a:ca:23:43:63:c8:
55:4e:77:7c:d1:a7:cc:9a:19:60:82:41:50:27:1d:
20:07:f4:92:fe:1a:e9:de:f4:68:89:2c:6e:03:7c:
1c:92:77:ba:9f:1f:00:25:02:0e:fe:80:3e:c4:73:
33:83:da:cc:c8:30:f0:02:9d:74:da:5c:f4:4d:54:
8f:ea:5d:2d:ba:59:89:55:9b:8c:52:a4:ee:50:e4:
39:20:28:15:9c:a6:dc:59:06:f1:c3:41:8b:4f:f9:
4b:b3:57:0e:39:ba:b5:dd:bc:07:cb:3d:12:ff:73:
4b:ab:a7:59:8a:53:c0:18:3f:77:73:2e:01:aa:41:
49:b8:54:e8:86:fb:91:c0:05:4d:74:a1:a4:91:04:
d3:34:d2:dd:73:aa:97:fa:c8:64:1b:cf:07:44:53:
04:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:43:2F:AF:4F:97:1C:CE:9B:9F:A2:7A:CB:E3:F5:C6:1A:CC:C9:33
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ab:34:5b:a5:92:1f:85:6a:55:c4:ee:34:05:c8:30:63:49:
5f:ff:65:f4:d9:4c:3b:37:18:f3:6e:35:d3:d8:be:a7:68:f6:
35:8f:bc:fb:7a:7d:7f:75:c4:a4:5b:82:09:78:9b:15:71:2a:
e4:d1:42:45:23:6b:a7:98:ec:6c:68:58:1f:ab:25:47:e3:81:
75:3f:7e:bf:7d:f1:c2:d1:99:b8:b7:d8:bb:b6:19:68:f6:e0:
42:14:fa:e1:40:4e:05:81:2f:0f:c2:61:3b:02:4b:bf:bc:86:
c3:4a:39:30:4f:e5:24:95:ba:14:33:17:8e:7d:ca:aa:0d:4b:
02:a0:4a:47:85:47:bf:ad:34:e4:5b:e9:62:fa:81:07:26:e1:
8c:0f:25:66:57:2e:0c:b7:e7:69:21:3a:e6:87:c4:74:e4:0f:
17:10:24:d7:1d:ce:5b:12:38:da:67:61:51:3f:52:d6:a6:29:
2e:5c:ff:40:4c:09:e9:2c:99:f5:d3:84:98:ad:88:dd:c6:aa:
80:1b:5b:15:e5:fb:23:04:c1:2a:03:36:c3:89:28:bf:2e:26:
7b:fc:d2:22:57:66:4d:65:c8:8a:e1:4c:75:84:16:70:4d:af:
dd:2d:70:93:36:c0:29:b5:2f:25:03:cf:01:93:ca:d9:d7:52:
3e:d0:c1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:29:59 2026 by rpki-client