Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: c9VIoe6NwU8RjK8+pilUKCUIb53caIbZk8nbQsMebVw=
Subject key identifier: 0D:A5:98:A5:3E:2E:EE:6D:5A:DE:CA:C7:56:10:5D:33:EC:CE:28:01
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 019E50A22845E175B0FB36DDA3E94DBB053C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 1924
Signing time: Fri 22 May 2026 17:01:04 +0000
Manifest this update: Fri 22 May 2026 17:01:04 +0000
Manifest next update: Sat 23 May 2026 17:01:04 +0000
Files and hashes: 1: JEy4ZJ62QYRRLVpb1W-o-3RjroA.roa (hash: UXVz9bhe0di3EXu2bm6AdG0DjlkQpOevHbzRqlRvjno=)
2: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: l4H5qkii0mp5LPqw/gUPHT/4tHiNHSCu48lnPE0/9ks=)
3: UBW5R1HwaG9495WZauzqNIjn4nA.roa (hash: duZ19HoAidUjyBvwzeBCc3j9fnU5CniKN9o9GUrYQpw=)
4: j2Vt-vhnn-HkYm2cJoF8eB-3moE.roa (hash: mB8vuWp3NyFqQhgRZxGSvc7q78uxW5vC+14W4bnmoE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:50:a2:28:45:e1:75:b0:fb:36:dd:a3:e9:4d:bb:05:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: May 22 17:01:04 2026 GMT
Not After : May 23 17:01:04 2026 GMT
Subject: CN=0da598a53e2eee6d5adecac756105d33ecce2801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:22:ad:bc:19:41:3c:e1:4c:c5:5a:e5:26:
e6:6f:54:32:5c:b7:cc:a9:6b:3a:03:c6:93:05:f4:
c2:4d:6f:05:1c:8e:4d:fa:47:e5:44:d7:05:7a:01:
f7:3c:9e:da:e4:bb:36:fd:2f:3a:4b:5b:ea:cf:3a:
b6:00:41:f6:e3:0f:1d:20:99:d8:3c:c7:d2:2d:68:
63:90:11:01:2e:09:5f:4d:2f:6b:6a:d2:07:8f:98:
f8:e2:96:de:50:3f:67:ee:51:9a:fa:c7:74:b5:a3:
3e:39:7c:b4:78:64:58:2e:cb:a9:c4:df:e4:33:1c:
4d:fb:09:ce:ff:5c:1a:d8:4b:d4:8e:5d:02:94:a4:
86:99:ed:07:a5:5e:9e:15:cf:d8:57:51:59:54:d9:
4b:41:e0:58:40:c2:f1:c5:d5:1a:fb:3a:ee:44:8d:
f6:77:58:4e:42:9d:ef:92:84:8d:c8:d0:14:27:87:
f7:7f:92:b6:51:c5:ee:ff:ff:4d:46:ef:bd:66:2f:
2c:8e:03:4a:3d:1b:c3:6d:38:69:93:23:7c:6b:62:
99:3d:50:2d:6a:22:06:17:07:95:28:8c:f9:66:a3:
fd:54:d8:8a:9e:1f:76:aa:f8:44:bf:dc:a4:a7:f9:
78:d3:e4:1e:0f:f1:cb:93:f6:d3:be:93:74:cf:ce:
d3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A5:98:A5:3E:2E:EE:6D:5A:DE:CA:C7:56:10:5D:33:EC:CE:28:01
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7a:51:08:96:ce:ae:14:47:0f:f4:52:ab:d6:ae:ed:ca:28:
f8:14:60:a9:61:af:f8:f3:ad:53:83:a5:62:28:f4:c1:e6:3d:
56:e9:8a:e7:28:8d:ff:7c:db:63:b6:40:53:e7:8f:c2:57:e7:
e1:d2:50:fa:48:29:51:20:f2:8a:d4:73:06:4a:4c:26:3a:29:
12:d2:b3:58:21:0f:9f:85:9c:9d:06:2f:14:44:06:c1:0c:4b:
93:90:57:0a:26:76:ea:be:42:d5:d2:9f:10:70:c2:f1:5f:70:
b4:7d:96:ee:75:d8:c1:d2:e8:bc:39:15:15:5f:18:58:fb:d5:
20:d2:a8:5d:02:71:5b:f8:18:5d:eb:e1:91:b3:c0:93:9a:6d:
47:52:87:2c:fd:d1:3e:c3:ed:dc:68:53:03:dd:4c:8d:94:c9:
a6:8c:0a:a9:7c:6a:4e:36:c0:93:f2:cc:20:c5:e3:14:36:b4:
f5:f4:6f:b0:2b:47:63:0a:5a:e6:61:16:8b:a8:ec:76:d7:ae:
08:55:ac:58:b8:cf:d1:f5:2d:1f:98:9d:25:e7:38:ca:0e:dd:
29:66:81:00:33:76:e3:dc:d6:ca:5b:02:35:51:aa:15:57:2e:
de:65:81:63:ec:fa:37:7b:b6:15:c7:00:d8:1c:5c:a4:1f:86:
e1:0e:5c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:47:59 2026 by rpki-client