Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: C6SejkOv3dmS0Zz84+706XlVtoDgOYR30njaafDC7Qs=
Subject key identifier: D7:3E:E9:17:F9:E6:64:57:75:B2:91:7E:9A:F8:50:94:A4:34:0A:57
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 01A15DE8215D6D0F986A25122FFF28A3829D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 1ABE
Signing time: Wed 21 Oct 2026 10:00:56 +0000
Manifest this update: Wed 21 Oct 2026 10:00:56 +0000
Manifest next update: Thu 22 Oct 2026 10:00:56 +0000
Files and hashes: 1: DOdbQIaTN2-U6lBMiFCsU2jbWrk.roa (hash: fX0ZPGU2Ep4sA5JGb1FOHePhR06Bt3nJo7FLowUZnbQ=)
2: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: 7k0LLd7m/RPaDigeul7oUEBPPIyZAySbW1SGh/6OijY=)
3: dsrIojswrtCAaVDG7x95eUR5UNs.roa (hash: qILxj7yICSM2GLcGcjXclEWNMSwoXtcOFYbxsTUB7mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:e8:21:5d:6d:0f:98:6a:25:12:2f:ff:28:a3:82:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Oct 21 10:00:56 2026 GMT
Not After : Oct 22 10:00:56 2026 GMT
Subject: CN=d73ee917f9e6645775b2917e9af85094a4340a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:da:36:48:f4:e9:f9:12:f8:c7:21:20:bb:
5a:79:5a:c2:20:1b:8f:60:77:27:32:52:d4:f0:3b:
a2:5a:3f:70:ac:ce:3f:4f:0e:fb:81:a6:7f:b1:71:
fe:61:e7:b8:8a:3b:b1:dc:34:be:4e:72:6f:2c:3c:
60:89:30:bc:a9:f5:f1:f8:08:ef:96:9e:6f:80:a9:
5e:9d:b9:3d:cd:d9:98:85:b2:70:e5:81:71:21:82:
cb:4d:54:92:88:5d:ea:64:1b:db:c6:a1:0f:4e:16:
b8:55:61:a3:d8:fa:72:b9:97:3a:e4:e0:c7:c8:26:
63:68:0f:65:72:50:bd:06:27:12:b6:b2:c2:d6:51:
24:44:4e:90:39:c4:08:55:83:5e:1e:b6:7f:d1:8b:
51:ea:03:9d:59:e7:b5:47:ec:58:4c:c4:da:a4:6e:
ac:66:13:04:17:57:6f:cd:2f:55:0d:b9:28:2d:83:
eb:0d:8a:e1:98:98:c1:27:ff:d8:d9:6c:c9:9f:33:
02:78:50:35:ff:59:47:1b:46:fb:10:e7:b8:75:2e:
dc:2a:88:82:c3:19:1f:d5:cd:9a:78:a2:56:76:b8:
2d:96:2f:49:bb:08:3b:77:86:db:2f:69:c9:6a:92:
90:9b:67:ea:13:17:d9:cd:66:51:69:be:62:63:a0:
dd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3E:E9:17:F9:E6:64:57:75:B2:91:7E:9A:F8:50:94:A4:34:0A:57
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f0:18:73:fe:be:62:71:73:04:65:27:d4:dd:25:91:18:b3:
f9:df:13:20:db:46:92:14:25:f6:c6:32:99:eb:84:0b:bc:78:
f9:75:50:45:3d:de:11:b4:8a:87:e0:b5:72:31:9e:ae:5d:ea:
b9:68:66:e3:4e:c4:29:31:1c:28:65:73:1b:c9:45:89:cf:f7:
6d:a5:1f:73:1b:96:d7:28:a1:10:11:f7:2a:26:57:1a:01:78:
b0:5a:e4:91:5b:57:1e:48:c1:6f:2a:8d:39:2e:a9:61:a8:4d:
93:99:9f:6c:68:09:72:b6:7a:18:90:57:b1:db:35:26:e5:e5:
4f:86:8e:83:49:9c:ba:3f:7c:44:cf:9e:1a:1e:8a:18:93:50:
ae:15:d2:8a:aa:25:82:f1:14:04:24:8f:ea:1a:57:22:c8:2a:
4a:1d:24:d2:e1:dc:f3:08:22:92:aa:94:62:ba:4c:4a:b8:cd:
42:ef:c8:80:c2:f8:f8:3b:69:a4:4b:0d:66:9c:4a:0f:03:c2:
a9:07:55:70:47:34:4e:3a:c1:ba:e2:20:9c:cb:a5:11:16:09:
da:f6:15:ee:17:b4:35:d1:c6:45:41:05:33:c1:da:f5:f5:6e:
9b:73:a3:3a:60:3a:e5:1c:33:18:a2:3a:e1:b0:05:a7:c6:27:
06:ca:e2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 20:00:23 2026 by rpki-client