Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: E/8VK3J0AFOWD1NFJc34HoNvDb8HudaZRKwfLfOHstA=
Subject key identifier: 90:BD:39:8F:9A:E5:FE:21:C2:9E:D4:48:E8:00:05:4D:0C:19:F5:F1
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 019CEC6F69287A68C04E4AD73A4F089F5DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 1871
Signing time: Sat 14 Mar 2026 13:00:50 +0000
Manifest this update: Sat 14 Mar 2026 13:00:50 +0000
Manifest next update: Sun 15 Mar 2026 13:00:50 +0000
Files and hashes: 1: DOdbQIaTN2-U6lBMiFCsU2jbWrk.roa (hash: fX0ZPGU2Ep4sA5JGb1FOHePhR06Bt3nJo7FLowUZnbQ=)
2: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: o6FANxS/ERBPWriEX6NdhuSWLaN7mCGSk9XPe6qg5EM=)
3: dsrIojswrtCAaVDG7x95eUR5UNs.roa (hash: qILxj7yICSM2GLcGcjXclEWNMSwoXtcOFYbxsTUB7mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ec:6f:69:28:7a:68:c0:4e:4a:d7:3a:4f:08:9f:5d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Mar 14 13:00:50 2026 GMT
Not After : Mar 15 13:00:50 2026 GMT
Subject: CN=90bd398f9ae5fe21c29ed448e800054d0c19f5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:36:90:60:eb:3b:3f:1a:cc:c6:48:67:4d:0b:
9d:f8:28:92:c2:8d:35:f1:d5:36:55:a5:b2:02:e8:
a4:17:da:ba:54:76:c8:b6:4f:9e:f2:4d:41:f1:9d:
de:b7:69:b7:47:be:cc:ba:9f:4f:74:69:f0:c2:a3:
b1:c9:3e:38:d7:e7:82:ff:3d:39:c0:ac:1a:f4:76:
a2:c2:c2:19:3c:a8:f8:33:e2:ca:09:57:9c:8a:22:
b3:a9:03:99:83:26:7c:03:0c:fe:78:22:44:03:3d:
bc:6b:32:e4:66:05:1f:db:a9:c9:54:23:db:36:3a:
79:b6:52:89:a9:e2:b4:aa:18:ba:d4:fa:7c:7c:7f:
c4:bc:ea:5b:58:6c:00:ef:f8:d3:d8:42:73:2d:f6:
68:08:16:3a:29:c6:d2:79:42:a1:4a:66:07:6f:29:
c9:50:85:42:2b:73:b5:46:16:08:db:90:59:35:05:
8f:22:4e:1f:e0:23:82:f5:27:80:21:d2:94:46:3c:
8b:a7:5e:58:ad:13:e6:05:bf:f6:32:9c:9b:ac:a1:
d7:94:bf:a7:0d:ab:2f:63:bb:8b:5f:f7:94:5e:a1:
e2:59:77:af:29:cb:a9:87:0d:82:d0:f7:55:12:4b:
a2:45:20:96:e0:a7:c6:1f:f1:d5:74:75:52:d2:cd:
24:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BD:39:8F:9A:E5:FE:21:C2:9E:D4:48:E8:00:05:4D:0C:19:F5:F1
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7e:49:f8:af:38:30:ae:ac:51:d3:4e:26:59:75:cb:c5:64:
13:be:f2:2e:58:39:ca:f0:df:f4:ee:15:ea:a8:82:60:14:62:
f2:b1:85:e3:8b:5d:15:b3:4b:3e:92:a2:cd:e6:98:d2:de:37:
0e:a2:56:fb:cd:61:82:38:da:90:81:05:fe:19:2e:4c:6a:84:
c5:bf:6e:84:d7:66:11:17:ae:30:d6:58:52:d9:f6:15:6d:28:
f9:a2:4b:56:b9:3d:a9:02:23:dc:ca:66:2a:90:77:22:25:06:
ae:9e:4d:c3:d0:09:8f:6b:3d:af:20:e3:b5:7f:b5:d0:f6:c4:
56:cb:c6:48:c8:9d:e2:17:f5:aa:c3:dc:e6:c8:e2:27:f0:1b:
b3:1c:04:63:c5:d6:20:97:7a:86:e4:e1:d4:2c:3a:73:5a:58:
4f:92:e8:78:2f:70:62:7c:fb:f8:a5:c8:6a:cd:e3:39:69:7e:
5c:4b:ae:32:c2:de:ac:a7:30:47:0c:d7:05:24:2b:46:8c:92:
38:49:ca:8e:ac:bc:28:8a:c1:7c:28:62:13:8f:dd:ac:b0:7b:
de:72:bd:07:3d:47:b5:80:d3:0d:5f:15:4b:8c:56:33:66:c5:
b1:7c:5e:25:f7:e3:25:fe:ab:35:9e:76:75:bd:71:69:08:9a:
a8:5d:59:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:15:06 2026 by rpki-client