Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: WQoCr+UTD7M4OCR6PAcsYCfa5Cp+P7uWG1EsqBB9qMk=
Subject key identifier: 20:01:16:94:13:2B:3E:E6:66:54:52:4E:C6:33:99:34:6B:C8:D9:BB
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 01A1174F48CFFA647C0B1803D6DB0B0B663A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 1A94
Signing time: Wed 07 Oct 2026 17:00:34 +0000
Manifest this update: Wed 07 Oct 2026 17:00:34 +0000
Manifest next update: Thu 08 Oct 2026 17:00:34 +0000
Files and hashes: 1: JEy4ZJ62QYRRLVpb1W-o-3RjroA.roa (hash: UXVz9bhe0di3EXu2bm6AdG0DjlkQpOevHbzRqlRvjno=)
2: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: bwZzXp3jaIAkg2pzCPhgwQTv+Pu8uCZIBlIlcuOVJyo=)
3: UBW5R1HwaG9495WZauzqNIjn4nA.roa (hash: duZ19HoAidUjyBvwzeBCc3j9fnU5CniKN9o9GUrYQpw=)
4: j2Vt-vhnn-HkYm2cJoF8eB-3moE.roa (hash: mB8vuWp3NyFqQhgRZxGSvc7q78uxW5vC+14W4bnmoE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:4f:48:cf:fa:64:7c:0b:18:03:d6:db:0b:0b:66:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Oct 7 17:00:34 2026 GMT
Not After : Oct 8 17:00:34 2026 GMT
Subject: CN=20011694132b3ee66654524ec63399346bc8d9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:df:a3:69:84:ff:ea:ba:ee:ce:17:b5:bd:
e2:9b:71:89:fc:ba:19:2f:b0:da:e3:c9:18:b8:88:
4b:f2:4a:3e:f6:1a:ab:91:20:4e:ef:fe:13:75:b5:
8e:d7:ba:2a:da:23:18:d8:62:df:23:0f:79:88:a9:
98:29:02:04:28:a6:fc:7a:fb:36:ae:b3:1e:3b:b0:
b7:17:d8:b8:3a:90:6b:26:87:02:f5:cc:01:60:f5:
61:f7:be:6c:f3:08:09:97:dd:f4:6e:33:fb:71:91:
98:12:45:3f:7a:e4:d7:d0:84:5c:ac:85:89:8d:54:
e7:a3:af:45:41:14:c2:51:8a:81:49:1b:dc:1b:79:
8d:4a:db:29:e1:1c:dd:b5:9c:9d:d7:99:04:a2:23:
81:b9:65:1a:50:d4:b7:6c:27:0f:2e:09:21:be:bc:
f8:64:d0:8b:3f:a0:54:c7:8d:a3:e8:96:c4:da:82:
88:d4:cc:b1:4b:c2:42:2a:6a:a0:1c:31:66:95:3d:
11:6d:d5:3c:c8:fc:bf:6c:99:ba:68:9a:4a:5f:20:
41:1f:3f:72:9e:f8:87:52:c6:94:3d:b1:70:1f:1d:
b1:9d:db:a0:29:af:15:74:92:ba:94:04:06:16:6b:
23:49:9b:6c:68:ae:54:70:f7:a8:04:5b:d3:02:1e:
31:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:01:16:94:13:2B:3E:E6:66:54:52:4E:C6:33:99:34:6B:C8:D9:BB
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ef:58:ec:3e:18:ce:9a:32:5a:0a:b6:f7:58:c2:98:df:e9:
7a:30:ce:a6:70:0b:4f:0b:4b:c5:da:92:e5:27:44:7d:42:a0:
61:f9:54:6d:76:7c:7c:12:cd:90:e7:1d:a6:77:56:d4:0e:6a:
13:8f:13:3b:cd:ec:af:3a:da:63:1e:f6:ec:16:1d:87:7a:a5:
ea:dc:b0:36:75:ef:d0:4e:b5:c8:7f:ef:a2:2b:0c:ae:92:34:
4b:9a:e3:ac:c8:0c:7d:36:23:82:a3:4f:d6:9d:45:51:2c:7c:
26:f4:28:dd:0f:0b:f3:4e:3b:78:f3:1b:d9:ac:44:a6:e5:b4:
69:21:0f:7e:7b:1e:d1:4a:01:68:50:70:2b:2d:0e:b5:78:03:
d7:9c:05:84:96:b6:f8:62:f7:a4:ae:27:e7:0c:a2:49:b9:d7:
c3:15:97:e6:53:49:6b:32:7d:54:73:5e:be:1c:b9:9d:2c:3e:
8a:e5:ed:c9:9a:bd:52:58:b7:71:89:73:22:32:f1:f3:a0:a5:
bf:e4:8c:5e:47:99:9d:5c:4c:2d:1c:59:ad:aa:6e:66:b2:3e:
33:f6:95:36:40:4f:cd:69:2c:6f:ad:18:a1:70:45:42:4b:0c:
d5:88:ca:54:8d:73:8c:e6:f3:31:b7:55:80:57:92:d8:6e:da:
e0:a1:b9:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEXT0jP+mR8CxgD1tsLC2Y6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZWFhMDBlYTc3NzA5OGIxYmYwMzY3NTZkNjQwZTlkMzFk
NjNiM2IwHhcNMjYxMDA3MTcwMDM0WhcNMjYxMDA4MTcwMDM0WjAzMTEwLwYDVQQD
EygyMDAxMTY5NDEzMmIzZWU2NjY1NDUyNGVjNjMzOTkzNDZiYzhkOWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWHfo2mE/+q67s4Xtb3im3GJ/LoZ
L7Da48kYuIhL8ko+9hqrkSBO7/4TdbWO17oq2iMY2GLfIw95iKmYKQIEKKb8evs2
rrMeO7C3F9i4OpBrJocC9cwBYPVh975s8wgJl930bjP7cZGYEkU/euTX0IRcrIWJ
jVTno69FQRTCUYqBSRvcG3mNStsp4RzdtZyd15kEoiOBuWUaUNS3bCcPLgkhvrz4
ZNCLP6BUx42j6JbE2oKI1MyxS8JCKmqgHDFmlT0RbdU8yPy/bJm6aJpKXyBBHz9y
nviHUsaUPbFwHx2xndugKa8VdJK6lAQGFmsjSZtsaK5UcPeoBFvTAh4xGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCABFpQTKz7mZlRSTsYzmTRryNm7MB8GA1UdIwQY
MBaAFDbqoA6ndwmLG/A2dW1kDp0x1js7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80MTAyMzItYjFmZC00MTM3LTgzMmQt
YmRiMjEzMTNjM2VjLzEvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80MTAyMzItYjFmZC00MTM3LTgzMmQtYmRiMjEzMTNjM2Vj
LzEvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXe9Y7D4Y
zpoyWgq291jCmN/pejDOpnALTwtLxdqS5SdEfUKgYflUbXZ8fBLNkOcdpndW1A5q
E48TO83srzraYx727BYdh3ql6tywNnXv0E61yH/voisMrpI0S5rjrMgMfTYjgqNP
1p1FUSx8JvQo3Q8L8047ePMb2axEpuW0aSEPfnse0UoBaFBwKy0OtXgD15wFhJa2
+GL3pK4n5wyiSbnXwxWX5lNJazJ9VHNevhy5nSw+iuXtyZq9Uli3cYlzIjLx86Cl
v+SMXkeZnVxMLRxZrapuZrI+M/aVNkBPzWksb60YoXBFQksM1YjKVI1zjObzMbdV
gFeS2G7a4KG5aw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 22:41:32 2026 by rpki-client