Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: e5bnX7id3r8WTBUsBUiwzPC2TGD6tP6CfgdzcBG2lYs=
Subject key identifier: D6:69:0C:07:AE:D2:32:97:C0:0A:97:67:3D:A8:1A:9D:EF:71:4C:AA
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 01A03D16555FD9CB715DF94639897ABB1715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 1A22
Signing time: Wed 26 Aug 2026 08:01:08 +0000
Manifest this update: Wed 26 Aug 2026 08:01:08 +0000
Manifest next update: Thu 27 Aug 2026 08:01:08 +0000
Files and hashes: 1: LQ7ZfmmMPaH0iabZ6SpEuDwVwhY.roa (hash: 63IcTifvN7GIBHWbBH7b1IB+sm33d6kXpSsxO8UgQ20=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: rtBfMEZ3ThaYkjtFqDBhUgtqGbTRGinSj4FvCHpgOmE=)
3: nAYbbcKPFybTolioZUuHNTDXSns.roa (hash: G2BPAGwcm8vlEODkeUJvlJFoh73yV7+X0s3ozIpcRZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:16:55:5f:d9:cb:71:5d:f9:46:39:89:7a:bb:17:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Aug 26 08:01:08 2026 GMT
Not After : Aug 27 08:01:08 2026 GMT
Subject: CN=d6690c07aed23297c00a97673da81a9def714caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:0a:75:e0:e3:3d:fc:4f:f3:50:25:be:d4:
c7:86:07:c1:91:c9:44:d5:20:d6:ea:22:a4:a5:6a:
7c:83:f6:9e:52:ea:4c:50:05:14:3c:a6:40:2c:82:
04:67:55:4b:d7:90:7d:00:c8:4b:b4:29:67:15:c5:
4b:9d:d2:77:cf:05:03:4f:35:00:4d:4c:d2:85:1c:
80:97:f5:ae:08:67:bb:d4:18:a7:27:82:4e:2a:5b:
89:ec:6e:0a:28:53:d7:f2:c7:48:22:0c:52:6c:08:
d1:24:44:19:19:6a:3e:c1:ab:a8:8d:d6:3b:17:d3:
42:ad:1e:79:0c:64:bb:1c:1f:57:22:eb:81:f6:40:
a9:e3:0e:bc:20:8d:53:ee:0d:c3:ec:1a:36:09:ee:
6d:1b:b2:8d:8b:c7:ec:4e:88:57:78:7a:b3:a5:19:
73:50:87:66:c4:74:a1:2d:b6:c3:65:8c:32:cf:c9:
1f:33:1d:bf:07:74:02:8d:b4:18:9f:4c:01:50:9a:
8a:69:01:4f:36:80:f9:fa:bf:8e:21:12:3c:04:8b:
cb:33:ca:6f:f3:8c:5d:7f:72:47:a5:96:c9:bb:70:
10:02:b0:52:3c:f1:4d:d8:52:5d:0b:fd:be:1c:7c:
29:8a:72:f6:84:44:35:eb:98:62:0d:fa:fd:6b:43:
3f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:69:0C:07:AE:D2:32:97:C0:0A:97:67:3D:A8:1A:9D:EF:71:4C:AA
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:df:4b:56:23:3e:7a:48:46:e0:a9:13:5a:d7:58:a3:07:ac:
fc:f7:61:c0:76:32:74:31:4b:6b:3f:b8:5c:9e:c4:f6:d3:fb:
8a:74:51:f4:9b:9d:eb:21:c6:fa:ef:e7:7f:c9:9b:02:ef:73:
c4:8f:1e:cf:94:88:91:9b:86:f9:82:8c:fc:54:36:ff:df:3c:
94:d6:24:5a:eb:32:e3:15:47:7a:8a:a0:cd:58:7d:c0:4d:ba:
93:64:47:db:ae:3b:2a:c1:07:1f:b5:3a:af:f7:3b:ab:01:a1:
99:9d:d8:91:bf:50:af:69:45:da:a3:58:60:3d:f5:5e:03:58:
54:5e:35:72:16:49:00:37:e9:6e:dc:08:a6:7b:41:00:0d:e9:
78:a7:7e:75:73:3e:e1:ac:fe:fd:8d:28:7a:10:34:e8:75:06:
a7:8d:3e:cb:6c:75:73:c3:c0:ec:7e:7b:68:f4:84:24:ca:87:
60:5a:7b:1a:ce:77:02:ba:41:93:fe:2b:88:fc:07:33:de:38:
de:b3:57:fe:20:39:e3:79:82:3f:e3:14:0e:a0:41:1f:dd:f3:
27:39:e5:e8:fe:ab:f8:8a:3b:c6:72:dd:f4:96:a1:64:bc:b3:
32:60:3f:73:c2:9a:56:56:74:53:af:bb:13:5d:98:d5:42:a8:
4a:0b:88:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 12:17:24 2026 by rpki-client