Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: tukNc6MpBHANG8C9eSgnhEUe3D3vXXYNHOUsHoq889k=
Subject key identifier: 5F:EC:A1:D7:34:BD:65:92:7F:E3:B9:16:13:16:86:47:68:23:69:39
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 019D37F6EE68214ABFE20CA67F14306FBBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 11DE
Signing time: Sun 29 Mar 2026 05:00:22 +0000
Manifest this update: Sun 29 Mar 2026 05:00:22 +0000
Manifest next update: Mon 30 Mar 2026 05:00:22 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: pJ0SG/sUPLRSH28VntkHfmuywl5pFvTQzUBA/iC3HBQ=)
2: fs8coMQW-wdjxvCj9ZMHuDg86fI.roa (hash: 9FrwB/m2Bh+Pc1afpUHCCGmxJk3UX+3t1k97wVkOTzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:ee:68:21:4a:bf:e2:0c:a6:7f:14:30:6f:bb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Mar 29 05:00:22 2026 GMT
Not After : Mar 30 05:00:22 2026 GMT
Subject: CN=5feca1d734bd65927fe3b9161316864768236939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:db:77:3b:fa:43:f5:86:ec:05:b8:15:9c:
0d:9a:bd:34:a1:d7:66:2a:a3:9b:4c:04:b6:da:90:
cc:c3:e8:cd:a7:a8:d1:0e:2d:b2:17:9d:27:3c:4e:
23:52:0e:7e:5e:60:93:6d:5b:35:f8:05:74:1e:88:
c9:4a:1f:2f:ad:76:b5:97:65:2d:7f:11:5e:4a:3c:
09:5c:c7:27:e2:12:0b:c9:67:26:56:b0:2b:8e:e8:
6b:ab:52:95:fe:bb:29:9d:aa:f2:3d:dc:3b:00:cd:
ef:2a:6d:b0:50:00:4d:46:2a:05:eb:d9:05:7f:10:
67:d7:c5:92:5d:9c:7f:df:ba:2a:70:90:b4:7b:86:
07:81:9c:7e:12:b7:7f:fa:01:0b:2a:f3:e9:57:33:
c1:28:fc:8e:28:41:44:ee:b5:82:31:cc:66:b1:28:
94:82:d5:fd:d4:e0:c1:72:4a:70:2f:54:28:1b:0c:
a9:bc:d4:3c:d0:f8:82:40:cb:c5:fd:fc:6e:93:dc:
fc:49:d4:8f:db:63:0d:12:99:2f:12:4c:09:72:d5:
d6:99:9b:38:ef:63:3f:65:dc:ea:74:3f:23:2e:5d:
35:4d:a1:a7:97:d5:cf:a0:ab:9c:2b:aa:2b:b9:b1:
db:85:ba:cd:26:36:04:46:0f:36:35:a0:da:b5:9d:
dd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EC:A1:D7:34:BD:65:92:7F:E3:B9:16:13:16:86:47:68:23:69:39
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:85:fc:b1:7d:2c:0c:75:d7:a4:a5:c5:30:ec:fb:fa:4a:b1:
e1:a0:b7:42:0f:e7:91:4b:e3:e6:97:6f:75:ad:c7:94:53:2e:
df:22:f0:c0:9a:3c:16:18:b4:b8:4b:11:6b:d1:7c:61:1e:ad:
65:02:9d:b0:3b:36:d4:6f:45:e6:c0:e3:85:89:6f:e2:19:8d:
4c:a5:30:40:ad:52:48:04:13:fb:b1:9b:d5:53:8f:d4:38:e7:
50:25:62:af:2a:6a:4c:d9:f5:b8:cb:14:a4:3e:9f:63:e5:76:
c5:44:0b:7b:74:13:ff:b8:2f:06:e8:60:a2:bf:c8:02:b2:2c:
b1:18:36:2a:a9:92:3f:46:32:db:95:a1:09:fa:42:ab:a6:d2:
fa:d8:ab:1d:1e:4b:81:e5:15:e6:75:4e:a7:f0:c4:07:11:77:
d2:ee:c8:b0:c7:97:90:31:f6:4e:11:a3:23:df:51:8e:34:19:
a3:ba:05:d6:00:6c:59:7e:38:87:c4:fc:81:17:74:c7:a3:32:
52:fb:b1:2e:96:40:34:21:b8:ef:30:c6:af:1e:ee:a8:47:70:
80:e1:9a:ca:e8:a5:f4:4f:c4:3f:ea:3e:4c:dc:4f:41:bb:86:
3d:cd:8f:16:bc:1c:f9:58:a0:0f:dd:de:f4:ff:bb:fd:e0:f9:
57:9e:a6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:39 2026 by rpki-client