Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: ZxKiPuyhi/9eUl+aytrSIfVE/VtHY/26d1/xgvdXzRE=
Subject key identifier: 15:98:39:62:0A:C6:5F:86:5A:94:47:2C:EF:D4:F1:08:87:BD:13:9D
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 01A192434702C89E7EF3A5BFA15209348528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 141F
Signing time: Sat 31 Oct 2026 14:00:44 +0000
Manifest this update: Sat 31 Oct 2026 14:00:44 +0000
Manifest next update: Sun 01 Nov 2026 14:00:44 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: e6p7wGhmaV/5UZUI+5vTKex861n7AzKKWEUqFdLBJ6Q=)
2: fs8coMQW-wdjxvCj9ZMHuDg86fI.roa (hash: 9FrwB/m2Bh+Pc1afpUHCCGmxJk3UX+3t1k97wVkOTzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:43:47:02:c8:9e:7e:f3:a5:bf:a1:52:09:34:85:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Oct 31 14:00:44 2026 GMT
Not After : Nov 1 14:00:44 2026 GMT
Subject: CN=159839620ac65f865a94472cefd4f10887bd139d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cb:f6:ee:13:52:1c:77:24:5f:1c:61:e1:16:
87:7c:9f:74:f8:27:a7:c8:ee:ad:23:20:2c:28:68:
61:7e:18:c5:66:1f:e4:66:f8:f1:fb:c6:70:71:2b:
6b:57:c4:20:0a:f9:76:2f:fd:e4:ec:24:20:9b:f0:
88:50:0d:56:9b:e7:10:38:d4:58:9d:07:87:05:4b:
f3:9b:60:0e:52:32:97:8b:7f:b6:34:53:22:4a:6a:
51:95:da:6a:cd:87:62:ae:f6:66:be:8e:f9:a1:32:
73:15:f5:a9:79:a6:fc:32:58:01:7a:c7:34:16:8e:
72:c5:3a:ef:4f:48:39:50:c0:ce:23:be:43:97:1e:
9d:e6:d2:75:f3:d4:f3:87:4f:e8:95:88:cf:bc:a2:
21:1d:3b:40:74:2d:32:eb:e1:77:79:1a:2e:81:42:
e2:7a:44:36:2d:e4:73:e6:23:67:fa:79:54:64:ec:
ce:b8:6e:88:0c:95:ca:4b:1e:73:58:e9:f8:a3:0e:
02:d0:8e:37:a1:9f:3e:c8:4a:1c:07:f8:72:96:19:
13:13:c1:cb:ee:8c:b0:08:da:eb:3f:75:7a:7a:20:
2e:b3:32:0c:db:6c:f7:99:79:72:fd:f2:10:46:a5:
5c:cc:8d:d2:12:0c:08:13:aa:7e:0c:89:24:51:cc:
1d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:98:39:62:0A:C6:5F:86:5A:94:47:2C:EF:D4:F1:08:87:BD:13:9D
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0e:68:a0:de:45:26:1c:f5:6d:94:b1:19:2a:a3:52:17:d4:
d1:c9:e1:70:64:58:36:13:f1:dd:5b:8f:b5:53:71:ca:07:c8:
4e:56:04:0a:8c:e6:74:d3:f0:f0:67:26:2e:9a:af:44:bc:5e:
60:d2:fb:a2:00:2d:fd:18:e8:1c:bd:62:79:92:8d:bb:20:3a:
a3:e6:20:b1:ee:a2:9f:24:b9:cd:fe:bb:e4:5c:50:31:fd:e8:
d5:ae:be:2a:fe:0e:56:f5:59:b4:73:bd:5c:20:fa:f2:89:57:
d4:62:97:bf:7d:bd:fa:8a:53:23:e3:4c:28:f4:37:10:0a:b4:
fb:d8:ca:cd:f3:b3:aa:c8:45:fb:17:77:cb:e4:14:6f:a8:65:
53:9b:f7:1d:13:02:3e:d6:9f:78:83:fb:9c:bd:be:d3:96:d7:
57:c0:b5:ca:bd:28:d0:94:0e:b8:a7:01:26:2a:f7:50:63:fb:
1c:01:e0:90:2e:6d:c8:49:1b:e6:db:4c:4a:06:30:73:6a:1e:
7a:fa:17:75:72:3e:dc:77:f2:e6:b3:8e:35:1e:23:3b:80:84:
99:d9:2d:77:39:a6:56:36:e2:d2:28:b4:44:dc:00:a0:6b:74:
25:76:27:c6:f0:c2:dd:d3:99:02:e8:1e:d2:a4:37:fb:d5:33:
62:12:46:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:57:32 2026 by rpki-client