Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: MiQD5S+B4VuhcOLdXujYGxvEpMSCrVys+2gbRt0ebPk=
Subject key identifier: A4:6A:68:88:F8:A3:D6:2E:B4:EB:A3:36:E5:0B:D2:01:E9:57:61:0A
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 019D3AC1AAAF02826D52BA85F27D65EFB4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 18:01:03 +0000
Manifest this update: Sun 29 Mar 2026 18:01:03 +0000
Manifest next update: Mon 30 Mar 2026 18:01:03 +0000
Files and hashes: 1: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: cQrcPKmJP/eJPC81F8cL8DL+wTRL1ziCV0dcBYu1iiI=)
2: UBW5R1HwaG9495WZauzqNIjn4nA.roa (hash: duZ19HoAidUjyBvwzeBCc3j9fnU5CniKN9o9GUrYQpw=)
3: XbqOwXYkjht0nJnceNJjzX2ebKs.roa (hash: knPH99gttVNm7VTufmRAs4k/asX/iKOhw3wnBmFxMfs=)
4: j2Vt-vhnn-HkYm2cJoF8eB-3moE.roa (hash: mB8vuWp3NyFqQhgRZxGSvc7q78uxW5vC+14W4bnmoE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:aa:af:02:82:6d:52:ba:85:f2:7d:65:ef:b4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Mar 29 18:01:03 2026 GMT
Not After : Mar 30 18:01:03 2026 GMT
Subject: CN=a46a6888f8a3d62eb4eba336e50bd201e957610a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2c:8b:8e:be:ad:f3:48:de:50:8d:45:83:0a:
5b:16:ea:72:a7:5f:9d:57:9f:15:c7:3b:90:85:93:
0a:f0:75:eb:61:0a:03:0a:40:9a:48:13:5a:95:51:
3e:cd:2b:1b:9a:78:9a:c4:5a:70:b6:10:80:b2:b3:
dd:91:25:b3:d6:d0:20:62:70:e5:79:1f:45:23:95:
44:a2:6d:1c:5e:3a:5e:06:35:fc:f5:a4:7d:53:4d:
8e:89:20:bf:c5:b7:50:2f:ba:8b:a8:f8:34:3f:c6:
b2:db:64:10:79:a1:8b:78:4d:02:5b:7c:7e:23:7e:
34:26:2b:f9:2b:9b:1c:23:97:d9:29:72:90:7b:1c:
72:0a:a2:be:be:34:33:62:6f:69:8f:80:66:9b:cf:
f1:d1:09:7d:1e:b8:01:2c:35:bc:e0:2c:c7:ba:72:
95:78:6f:0b:a9:a5:1c:7c:25:24:70:9d:0c:91:b6:
91:b6:32:0c:e3:5f:8a:5f:61:64:58:3f:07:ae:61:
b9:14:23:5a:61:65:6d:db:3b:93:bf:40:fe:59:5d:
2e:c3:e2:d5:2a:f4:d6:67:3f:4e:f6:72:21:86:cb:
cf:94:be:c1:15:1f:e1:fe:4a:50:5e:28:d7:07:b3:
3e:db:72:3e:a9:4b:dc:32:10:aa:cc:09:f8:7b:25:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6A:68:88:F8:A3:D6:2E:B4:EB:A3:36:E5:0B:D2:01:E9:57:61:0A
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4f:82:f5:ea:79:9b:7d:53:a7:ea:05:44:e8:6b:f9:6e:50:
d0:ff:ba:3c:72:21:19:c7:99:8a:60:01:7f:eb:e1:04:63:92:
c8:a5:93:a4:41:88:85:de:34:da:d1:0b:62:5c:2f:e0:9f:f2:
c6:3b:bc:04:90:06:3c:3c:23:cb:34:f3:a9:8d:82:87:e1:09:
41:e3:5b:8c:67:1a:e1:23:f9:34:67:cd:fa:0c:b5:f9:07:fe:
0b:01:74:66:91:35:ae:dc:19:07:ff:bc:23:78:07:ac:55:7c:
eb:e7:30:b9:f4:f5:e9:87:dd:70:85:66:82:6d:d1:a6:51:af:
7e:fa:4a:9e:96:5f:ac:13:cb:cd:2b:43:90:4b:c0:9d:7a:c5:
fe:bb:ef:47:42:68:d2:a6:c4:f5:b4:29:95:79:de:5b:1c:d4:
44:46:39:c4:d9:5e:30:9b:a1:33:de:d9:31:10:aa:e9:d8:db:
41:47:d4:a6:c4:b6:f5:bc:05:45:8d:a3:ff:26:c7:d2:4f:15:
bc:32:2d:b6:bf:6a:ac:cc:15:a5:fa:38:97:cc:5e:30:e8:f1:
50:87:e2:33:ec:7e:1a:45:3a:95:ad:c1:f6:26:d0:9e:99:51:
a5:3e:f9:95:0e:0d:87:7e:ca:16:f6:0c:93:e0:30:f1:53:f7:
b9:f5:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:02 2026 by rpki-client