Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: Kq2u05M2gtXeP2FlHJydhA52Z7EuRDlWWDJOgriKymo=
Subject key identifier: D7:73:83:E7:F2:AF:53:9F:C9:D9:99:83:C5:93:0F:BB:33:83:43:B1
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 01A128B16D940114539A40B28972B03EFBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 02:01:18 +0000
Manifest this update: Sun 11 Oct 2026 02:01:18 +0000
Manifest next update: Mon 12 Oct 2026 02:01:18 +0000
Files and hashes: 1: LQ7ZfmmMPaH0iabZ6SpEuDwVwhY.roa (hash: 63IcTifvN7GIBHWbBH7b1IB+sm33d6kXpSsxO8UgQ20=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: dArkA4lAi80ne0/v4gyV5GoWp3hR4NvnPFVW+QVzpoQ=)
3: nAYbbcKPFybTolioZUuHNTDXSns.roa (hash: G2BPAGwcm8vlEODkeUJvlJFoh73yV7+X0s3ozIpcRZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b1:6d:94:01:14:53:9a:40:b2:89:72:b0:3e:fb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Oct 11 02:01:18 2026 GMT
Not After : Oct 12 02:01:18 2026 GMT
Subject: CN=d77383e7f2af539fc9d99983c5930fbb338343b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f0:a3:4c:7a:ae:af:11:08:b3:45:55:a8:17:
91:a0:28:1a:4a:78:9f:78:ee:49:90:c6:c5:ca:b3:
be:a1:bf:28:65:93:04:3c:02:c3:f7:14:6e:15:ea:
84:aa:53:59:76:a0:1c:54:5f:bd:dd:3c:19:df:bb:
cb:da:5c:85:a4:c9:5f:22:25:71:82:16:7a:31:30:
1f:aa:9b:4d:2c:d3:03:9d:e5:32:f2:53:5b:10:bf:
a8:1a:ce:4e:bf:87:10:b7:37:be:cb:5b:f3:e7:37:
16:b2:4c:77:03:39:93:f2:61:b9:b2:4d:71:8e:26:
19:6d:94:7c:d4:a3:ca:df:79:25:4f:9b:34:66:fd:
67:c9:a7:b0:df:4b:8d:73:1d:e7:71:24:d5:9d:c3:
43:f0:1e:17:70:56:0c:01:4e:d3:80:d2:df:ad:f6:
63:bc:39:1c:c9:b4:f9:c5:59:df:05:4a:74:60:07:
df:d2:83:22:77:aa:55:6c:13:39:4d:6e:2e:7b:17:
86:17:e0:2b:23:43:34:e3:c3:74:88:43:9f:79:85:
c7:24:bd:f3:45:6a:8a:23:c7:8b:f5:bd:96:d7:e4:
d6:d1:69:f4:21:ee:72:20:cf:11:fd:96:47:cb:90:
de:93:d7:1c:8b:41:00:f7:b1:67:29:74:fd:a2:9e:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:73:83:E7:F2:AF:53:9F:C9:D9:99:83:C5:93:0F:BB:33:83:43:B1
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f7:36:82:1e:43:72:cc:be:1a:e9:d4:dd:23:08:b6:e8:0d:
50:ac:b7:8f:5d:53:03:4b:a7:dc:97:51:61:fe:0c:69:7a:35:
49:21:e7:ce:6d:25:b3:f3:4c:74:9b:c3:9f:f3:ec:d2:b1:61:
34:9e:99:7b:12:e5:cb:8f:bb:39:4a:54:62:50:7d:93:00:8b:
b3:3e:01:bc:0e:ee:7c:bc:e3:73:69:92:86:e1:5b:f1:37:db:
b9:fb:b4:e0:11:56:c9:70:f4:67:08:a5:79:b0:42:8e:7d:4e:
4d:64:c5:20:7f:9c:25:ef:26:14:12:f6:45:59:dd:2a:a0:ba:
08:34:45:b7:65:8a:d3:39:26:b2:dd:63:90:9b:cb:ca:58:00:
a7:05:7b:d7:a7:4b:c8:82:5f:9e:c6:61:cb:b3:8a:06:43:14:
1e:f1:2e:06:41:3f:f8:de:34:53:8d:7b:cf:91:9b:ff:4f:53:
4e:bc:a0:fa:f0:3b:60:56:10:3c:8d:d5:90:e1:e6:f7:13:8a:
6b:5a:dc:7b:3d:96:69:5f:f7:b4:e6:ad:59:4d:15:3e:60:90:
f7:03:c6:0e:fc:b2:ff:71:3f:9b:d4:1c:92:36:76:a7:b2:29:
12:55:b0:2f:fc:c1:22:b0:a6:83:0e:e8:97:bc:a8:41:90:91:
77:b5:9d:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEosW2UARRTmkCyiXKwPvvyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YTQ2NjhmZjgzODE0YWY5MGE3OGI0ZmM4ZDI2MjMyNTA1
OGNiYzYwHhcNMjYxMDExMDIwMTE4WhcNMjYxMDEyMDIwMTE4WjAzMTEwLwYDVQQD
EyhkNzczODNlN2YyYWY1MzlmYzlkOTk5ODNjNTkzMGZiYjMzODM0M2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/CjTHqurxEIs0VVqBeRoCgaSnif
eO5JkMbFyrO+ob8oZZMEPALD9xRuFeqEqlNZdqAcVF+93TwZ37vL2lyFpMlfIiVx
ghZ6MTAfqptNLNMDneUy8lNbEL+oGs5Ov4cQtze+y1vz5zcWskx3AzmT8mG5sk1x
jiYZbZR81KPK33klT5s0Zv1nyaew30uNcx3ncSTVncND8B4XcFYMAU7TgNLfrfZj
vDkcybT5xVnfBUp0YAff0oMid6pVbBM5TW4uexeGF+ArI0M048N0iEOfeYXHJL3z
RWqKI8eL9b2W1+TW0Wn0Ie5yIM8R/ZZHy5Dek9cci0EA97FnKXT9op6oQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdzg+fyr1OfydmZg8WTD7szg0OxMB8GA1UdIwQY
MBaAFDakZo/4OBSvkKeLT8jSYjJQWMvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3Yjkt
OTBlNjU0MTIyNTJhLzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3YjktOTBlNjU0MTIyNTJh
LzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPvc2gh5D
csy+GunU3SMItugNUKy3j11TA0un3JdRYf4MaXo1SSHnzm0ls/NMdJvDn/Ps0rFh
NJ6ZexLly4+7OUpUYlB9kwCLsz4BvA7ufLzjc2mShuFb8Tfbufu04BFWyXD0Zwil
ebBCjn1OTWTFIH+cJe8mFBL2RVndKqC6CDRFt2WK0zkmst1jkJvLylgApwV716dL
yIJfnsZhy7OKBkMUHvEuBkE/+N40U417z5Gb/09TTryg+vA7YFYQPI3VkOHm9xOK
a1rcez2WaV/3tOatWU0VPmCQ9wPGDvyy/3E/m9QckjZ2p7IpElWwL/zBIrCmgw7o
l7yoQZCRd7WdCw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 13:35:42 2026 by rpki-client