Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: 77y3AwOrzMHiSfUzmGh5fJ1PYH8ODD0No5pEEHrA+qw=
Subject key identifier: 0E:72:24:96:22:E3:13:92:4A:94:AF:32:2E:CA:D5:2E:06:D5:06:5F
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 019F4BB03481BFE26170EF05102CE4C4293A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 19A5
Signing time: Fri 10 Jul 2026 11:01:06 +0000
Manifest this update: Fri 10 Jul 2026 11:01:06 +0000
Manifest next update: Sat 11 Jul 2026 11:01:06 +0000
Files and hashes: 1: LQ7ZfmmMPaH0iabZ6SpEuDwVwhY.roa (hash: 63IcTifvN7GIBHWbBH7b1IB+sm33d6kXpSsxO8UgQ20=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: Wh7geQkimUMEdlruAz1fiGhKgfJPL/R0HcykXHYtgV8=)
3: nAYbbcKPFybTolioZUuHNTDXSns.roa (hash: G2BPAGwcm8vlEODkeUJvlJFoh73yV7+X0s3ozIpcRZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:b0:34:81:bf:e2:61:70:ef:05:10:2c:e4:c4:29:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Jul 10 11:01:06 2026 GMT
Not After : Jul 11 11:01:06 2026 GMT
Subject: CN=0e72249622e313924a94af322ecad52e06d5065f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:69:74:bc:eb:be:55:87:ca:7e:df:50:4c:
e5:11:04:82:03:64:ff:95:33:51:3e:07:44:37:7d:
68:10:42:76:9d:59:a6:7f:4e:59:f5:5a:b1:80:ba:
4b:bd:eb:9c:2f:16:f3:94:4b:89:de:55:fa:89:59:
f8:72:ad:f0:e0:41:7f:7a:b5:98:df:d3:5e:62:2a:
4a:17:c9:54:33:97:76:8f:3c:70:b7:a8:63:37:83:
8d:29:bc:10:bc:5a:5f:11:90:dd:f6:ec:66:e1:4d:
bc:9c:6e:b6:67:6e:4c:f6:39:36:2e:06:f6:79:7c:
cc:96:d0:24:20:0a:e9:00:af:00:52:19:d2:7c:ca:
46:ae:fa:1c:ed:6f:a9:9b:ea:41:92:de:fc:21:fd:
b6:15:d1:91:02:62:b2:0c:d7:74:28:a5:dd:cd:05:
18:75:1d:9f:05:ec:88:d0:5e:13:51:95:6c:94:bc:
55:bb:fc:ae:45:be:46:d5:a5:bf:25:b4:15:00:cb:
5b:6b:e9:4f:31:49:f4:66:7d:24:0c:81:78:8e:18:
9c:19:2c:93:91:c4:1f:0e:03:a1:6a:a1:3a:62:56:
f2:db:70:b1:f1:25:27:91:61:e0:f0:a8:b5:9b:22:
ca:e2:09:35:76:f4:8a:07:2b:66:2b:0b:93:f2:1d:
9a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:72:24:96:22:E3:13:92:4A:94:AF:32:2E:CA:D5:2E:06:D5:06:5F
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:21:84:cf:3d:1b:5a:ae:8a:9e:d7:26:0d:89:21:03:e9:63:
bd:02:37:14:33:eb:a5:87:64:10:34:93:e4:c8:a5:30:7e:10:
e5:52:cb:0f:30:13:88:d0:4c:0c:43:e2:f5:b9:63:10:04:8a:
97:e4:d4:db:2f:66:a8:bd:c7:37:7f:dd:c6:54:42:f2:f1:a4:
27:d8:f0:bb:2e:4c:60:43:3e:25:57:02:60:b3:bb:4d:47:7e:
8b:4b:90:06:5a:0d:e1:ed:a6:d9:88:e8:b6:b0:5d:da:2b:86:
ea:a7:9f:e1:72:6f:55:68:c2:e7:1b:7e:bf:7f:50:58:55:c0:
40:09:01:68:56:08:e9:66:bb:53:54:24:47:2f:17:a3:4d:af:
c0:29:30:50:9a:1b:0c:68:2a:ea:e4:e6:51:35:a5:4e:81:dd:
b4:d8:11:44:d2:b2:96:7f:1f:43:07:aa:8c:c1:da:27:f2:54:
29:1d:61:e2:4e:3d:e0:67:65:83:99:9d:e7:af:ce:a8:8b:fc:
77:aa:25:e9:d9:b8:cc:1a:8e:3e:0b:c7:06:a0:ad:50:89:aa:
5d:a6:1d:a3:6b:08:e7:32:c8:e2:af:43:ac:8f:3b:6e:e7:c5:
eb:32:b5:02:03:c2:4a:3c:bc:b2:37:ba:30:aa:86:13:29:bc:
4c:4c:00:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9LsDSBv+JhcO8FECzkxCk6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YTQ2NjhmZjgzODE0YWY5MGE3OGI0ZmM4ZDI2MjMyNTA1
OGNiYzYwHhcNMjYwNzEwMTEwMTA2WhcNMjYwNzExMTEwMTA2WjAzMTEwLwYDVQQD
EygwZTcyMjQ5NjIyZTMxMzkyNGE5NGFmMzIyZWNhZDUyZTA2ZDUwNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1FpdLzrvlWHyn7fUEzlEQSCA2T/
lTNRPgdEN31oEEJ2nVmmf05Z9VqxgLpLveucLxbzlEuJ3lX6iVn4cq3w4EF/erWY
39NeYipKF8lUM5d2jzxwt6hjN4ONKbwQvFpfEZDd9uxm4U28nG62Z25M9jk2Lgb2
eXzMltAkIArpAK8AUhnSfMpGrvoc7W+pm+pBkt78If22FdGRAmKyDNd0KKXdzQUY
dR2fBeyI0F4TUZVslLxVu/yuRb5G1aW/JbQVAMtba+lPMUn0Zn0kDIF4jhicGSyT
kcQfDgOhaqE6Ylby23Cx8SUnkWHg8Ki1myLK4gk1dvSKBytmKwuT8h2a6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5yJJYi4xOSSpSvMi7K1S4G1QZfMB8GA1UdIwQY
MBaAFDakZo/4OBSvkKeLT8jSYjJQWMvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3Yjkt
OTBlNjU0MTIyNTJhLzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3YjktOTBlNjU0MTIyNTJh
LzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSGEzz0b
Wq6KntcmDYkhA+ljvQI3FDPrpYdkEDST5MilMH4Q5VLLDzATiNBMDEPi9bljEASK
l+TU2y9mqL3HN3/dxlRC8vGkJ9jwuy5MYEM+JVcCYLO7TUd+i0uQBloN4e2m2Yjo
trBd2iuG6qef4XJvVWjC5xt+v39QWFXAQAkBaFYI6Wa7U1QkRy8Xo02vwCkwUJob
DGgq6uTmUTWlToHdtNgRRNKyln8fQweqjMHaJ/JUKR1h4k494Gdlg5md56/OqIv8
d6ol6dm4zBqOPgvHBqCtUImqXaYdo2sI5zLI4q9DrI87bufF6zK1AgPCSjy8sje6
MKqGEym8TEwAaw==
-----END CERTIFICATE-----
Generated at Fri Jul 10 16:37:48 2026 by rpki-client