Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: 8jzg5+Xq7KzBIydOVt4GL2A9xWWFZme7aT1iFsQxBqI=
Subject key identifier: 3F:D0:47:D2:96:8A:8F:4A:15:3F:CA:F3:C3:15:CA:F8:F6:C6:8B:5C
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 01A025E9D9A56BD649EECD529AB9FC4B44AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 1A17
Signing time: Fri 21 Aug 2026 20:01:17 +0000
Manifest this update: Fri 21 Aug 2026 20:01:17 +0000
Manifest next update: Sat 22 Aug 2026 20:01:17 +0000
Files and hashes: 1: JEy4ZJ62QYRRLVpb1W-o-3RjroA.roa (hash: UXVz9bhe0di3EXu2bm6AdG0DjlkQpOevHbzRqlRvjno=)
2: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: XEIasZxnYl0WrAom4nlicHxCKGIx6eFP0EL2kCzZnrk=)
3: UBW5R1HwaG9495WZauzqNIjn4nA.roa (hash: duZ19HoAidUjyBvwzeBCc3j9fnU5CniKN9o9GUrYQpw=)
4: j2Vt-vhnn-HkYm2cJoF8eB-3moE.roa (hash: mB8vuWp3NyFqQhgRZxGSvc7q78uxW5vC+14W4bnmoE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:e9:d9:a5:6b:d6:49:ee:cd:52:9a:b9:fc:4b:44:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Aug 21 20:01:17 2026 GMT
Not After : Aug 22 20:01:17 2026 GMT
Subject: CN=3fd047d2968a8f4a153fcaf3c315caf8f6c68b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:32:f3:12:de:1c:a3:11:6d:6e:1a:f0:ad:
d2:61:a7:88:56:97:a2:08:ae:64:c8:72:f1:28:8d:
2c:41:41:e9:52:f4:38:0d:6e:29:10:60:a2:e3:45:
ac:cf:5a:d6:74:6e:ad:c5:48:d4:41:66:b4:2e:f6:
4c:0f:c6:35:d1:3f:1c:e0:57:8c:c8:1b:24:bd:26:
23:53:b6:5e:b7:2e:cd:38:eb:04:a7:27:db:9b:e9:
82:5e:1c:d8:77:f5:3f:01:b3:c1:50:78:ff:fc:05:
f7:f9:32:bc:70:03:41:fa:3d:ed:c9:47:90:68:10:
70:98:b5:d0:22:57:5a:d9:97:32:c0:1b:84:3a:b6:
a5:6b:f2:93:d6:f0:2c:85:72:cb:c7:d2:9a:8c:cb:
78:ba:65:00:16:3b:73:8b:25:f3:7b:6a:fd:44:9a:
86:16:a5:5d:ac:06:ea:ce:b2:7c:f3:cf:4f:28:42:
40:a4:39:9c:fd:b6:6b:69:0c:e5:25:65:88:7c:6c:
08:2a:93:f0:30:7a:64:10:8c:43:3f:35:6a:bd:cb:
9b:a0:fd:7e:a6:83:5e:5d:a8:83:98:00:1f:f2:d8:
b7:64:63:f0:bc:b9:09:4f:ed:81:13:1c:2e:d7:a1:
24:b2:e1:2b:a8:9e:81:e2:3c:8f:79:21:56:00:f0:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D0:47:D2:96:8A:8F:4A:15:3F:CA:F3:C3:15:CA:F8:F6:C6:8B:5C
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0e:27:b1:64:73:c6:ed:d5:01:3d:13:9e:fa:68:f9:54:bb:
44:41:aa:40:d0:43:02:a4:ed:cc:3e:58:d1:57:6f:8a:88:dc:
47:11:bb:80:a0:41:65:e8:cf:53:30:ac:2d:25:c5:7a:b1:67:
a9:e9:d9:d7:9a:f4:16:fc:c1:9f:69:1a:55:c1:68:94:14:6d:
8c:60:7b:9c:37:4d:ad:6c:b2:cb:ae:0a:24:35:36:b3:36:0d:
75:e5:44:6e:00:8c:ae:ff:28:e5:53:af:d3:50:48:a7:4e:3f:
09:30:0a:08:7f:8a:5c:16:52:14:f9:32:4d:7c:24:6e:56:f7:
1b:29:40:07:b0:4a:da:1e:30:41:d7:b4:1a:8e:8e:03:d7:cd:
be:e5:eb:ae:7b:92:43:f9:4b:2e:d1:d5:68:1f:c3:ad:1a:d4:
5a:2a:97:97:2f:50:d8:7d:88:6f:f3:f3:5a:ea:f3:a4:d1:22:
95:ba:76:b8:76:24:31:d0:6c:5b:31:2c:02:40:84:8a:e0:bf:
68:52:63:82:31:bc:64:f6:8b:b0:85:7b:ab:ce:1d:62:65:4a:
f9:80:a3:cd:27:11:62:27:5b:4d:b3:3c:9c:eb:90:9f:a3:8d:
c9:4e:16:2b:b7:26:65:e3:ac:12:4d:a9:cd:56:ac:27:d6:c2:
6b:03:06:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:10:53 2026 by rpki-client