Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: pdIIo5geRFVg9jC7IogdMwsEgVXy3Pzz6utR4JjV5d4=
Subject key identifier: 6C:54:92:70:AF:1D:6E:19:B7:BF:E0:C1:88:68:38:5E:CD:C7:5F:18
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 019F3A4E6C9DB8BA13F9D62888438F593615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 199D
Signing time: Tue 07 Jul 2026 02:00:45 +0000
Manifest this update: Tue 07 Jul 2026 02:00:45 +0000
Manifest next update: Wed 08 Jul 2026 02:00:45 +0000
Files and hashes: 1: JEy4ZJ62QYRRLVpb1W-o-3RjroA.roa (hash: UXVz9bhe0di3EXu2bm6AdG0DjlkQpOevHbzRqlRvjno=)
2: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: inOJk+nulim3qq1juhty9ixBeMTdUVsX7ozeeAJ5sWA=)
3: UBW5R1HwaG9495WZauzqNIjn4nA.roa (hash: duZ19HoAidUjyBvwzeBCc3j9fnU5CniKN9o9GUrYQpw=)
4: j2Vt-vhnn-HkYm2cJoF8eB-3moE.roa (hash: mB8vuWp3NyFqQhgRZxGSvc7q78uxW5vC+14W4bnmoE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:4e:6c:9d:b8:ba:13:f9:d6:28:88:43:8f:59:36:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Jul 7 02:00:45 2026 GMT
Not After : Jul 8 02:00:45 2026 GMT
Subject: CN=6c549270af1d6e19b7bfe0c18868385ecdc75f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f9:17:1f:4b:57:fd:6c:3e:02:92:91:b1:62:
59:ea:59:7e:aa:2b:6c:ed:a0:11:5e:2e:bb:4c:d5:
c9:8e:1b:d0:91:3b:e8:5f:8d:29:4b:c4:90:f5:df:
cf:2a:5c:e6:b2:6c:15:f1:00:8c:63:c9:97:84:91:
13:84:e2:55:87:28:35:c7:18:b0:af:06:da:8a:df:
7c:cc:30:d9:d6:76:5a:39:64:ad:ba:0c:07:5e:38:
f1:d7:da:24:60:e2:23:8c:11:80:37:aa:00:18:54:
51:3a:44:af:b4:3a:47:a0:2f:8a:78:8c:75:c8:1a:
d4:cb:bc:18:29:ad:e5:da:d0:c9:b3:04:29:5b:89:
9d:5c:dd:be:7c:58:13:27:48:c6:48:3c:9e:41:99:
e2:05:94:e1:1b:c2:46:b9:6c:38:aa:52:4b:80:af:
c3:f9:37:08:41:b4:49:e2:c6:98:04:cf:e0:12:4b:
9a:0a:d4:8f:cb:88:1b:59:6f:92:26:39:03:8b:4a:
31:ff:70:2d:f6:ca:eb:6d:ad:61:46:c5:ba:c9:9e:
e2:3c:8a:fb:44:40:4b:b1:95:0f:b8:e7:88:a6:4b:
6f:d6:ff:8a:f9:0f:27:83:88:9b:67:b4:ee:10:aa:
41:92:57:be:7f:6e:84:a6:c2:67:ea:6d:d8:a5:aa:
b0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:54:92:70:AF:1D:6E:19:B7:BF:E0:C1:88:68:38:5E:CD:C7:5F:18
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b5:72:d7:ac:91:15:97:4c:bf:88:45:41:b1:37:70:1e:b1:
e8:c9:c7:de:6b:83:c6:66:25:49:19:b5:7c:88:18:58:c8:4b:
28:00:13:23:7b:c5:1c:42:d3:e6:e0:01:fd:54:75:02:ca:50:
79:79:3f:f8:aa:5a:f3:55:70:e3:9b:47:55:ff:c1:5a:4f:31:
60:07:92:38:61:ec:1e:d5:61:de:4f:68:96:43:32:27:65:21:
18:64:54:85:ec:2e:b3:94:45:a8:10:93:75:64:3e:58:33:8d:
7a:5d:c9:b6:21:bf:6b:e5:c8:ae:46:a5:73:dd:cb:13:a9:0a:
af:5c:2b:2f:57:28:9b:f9:7f:ae:aa:52:30:27:1e:d9:03:88:
09:d1:80:bf:ef:41:38:51:7a:f6:e0:cc:4c:b7:e6:bd:22:f5:
ad:8b:91:8f:79:eb:c0:6e:4a:d6:e3:ed:bc:38:3e:98:1c:03:
4b:df:a4:92:78:28:4c:47:81:fb:a6:42:2f:66:34:94:4e:20:
44:a8:62:77:8e:2f:2c:24:ec:0e:5f:2a:f0:74:2d:ad:13:84:
06:85:94:5b:3a:37:bb:bb:7e:cb:d4:15:5a:3d:ad:50:2b:aa:
1e:4c:25:d9:cb:4d:9e:fe:46:e7:03:ee:e3:92:16:19:8b:62:
7b:9c:5f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:46:55 2026 by rpki-client