Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: W9TIgoDfFzjBACjQjInWF3O4UYZ2XiANXsULTmJ8OIs=
Subject key identifier: 31:F8:6D:6A:C2:81:3B:45:1D:55:5B:7B:41:0E:3E:12:A0:89:7C:64
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 01A18E667A38724ACACE0C16D80DC9C6BF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 141D
Signing time: Fri 30 Oct 2026 20:00:42 +0000
Manifest this update: Fri 30 Oct 2026 20:00:42 +0000
Manifest next update: Sat 31 Oct 2026 20:00:42 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: zy+b3AeQ6L4LiVSalaP0uWK1peKMBm1DhbdJB35ZMKE=)
2: fs8coMQW-wdjxvCj9ZMHuDg86fI.roa (hash: 9FrwB/m2Bh+Pc1afpUHCCGmxJk3UX+3t1k97wVkOTzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:66:7a:38:72:4a:ca:ce:0c:16:d8:0d:c9:c6:bf:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Oct 30 20:00:42 2026 GMT
Not After : Oct 31 20:00:42 2026 GMT
Subject: CN=31f86d6ac2813b451d555b7b410e3e12a0897c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:28:71:8c:17:5c:4e:30:c5:24:42:0a:a2:
c1:d3:48:95:fe:76:21:0a:31:c9:f8:77:e2:8f:d7:
0d:ec:1d:40:73:7e:e7:35:a4:c6:0d:dd:b4:ec:74:
c6:8a:36:46:62:e8:72:ac:20:f8:49:bb:0b:eb:15:
57:79:40:a6:5e:58:90:4b:78:26:be:8b:04:df:ca:
50:f6:33:94:ba:2d:9d:9d:d9:a7:d0:bd:06:57:f9:
17:7e:3e:3f:83:a8:a7:48:13:1b:62:c3:82:80:41:
a6:94:8e:39:2a:43:44:01:9b:8c:f2:3d:5e:2d:fe:
66:d8:da:a5:36:4c:7c:7d:29:4b:33:4b:63:c1:39:
ac:6d:02:7a:87:b3:40:aa:23:6c:ba:48:f2:17:bd:
13:72:7b:0f:07:78:22:0c:57:b4:57:07:79:af:1d:
88:2d:34:0c:6e:42:7e:8e:9b:f8:a7:58:38:2e:64:
cc:b5:2e:0b:e5:35:03:a9:ff:3b:03:08:89:bf:9b:
2b:56:4c:83:c2:fe:89:3e:3e:0f:d9:be:02:a8:fe:
16:1d:66:80:61:d1:96:96:18:9b:10:f5:3e:32:93:
19:e2:b0:67:62:8c:29:2b:01:43:5b:72:cd:a4:34:
e8:b1:f8:d3:03:15:03:32:5c:34:8d:a2:10:4c:0c:
f5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F8:6D:6A:C2:81:3B:45:1D:55:5B:7B:41:0E:3E:12:A0:89:7C:64
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ff:3e:21:87:6f:4d:f3:30:39:19:fe:51:8f:05:12:19:0e:
22:4e:82:ae:f2:3a:e3:f8:fb:27:fc:67:2e:de:e2:15:fa:a6:
37:b7:49:5e:be:d1:3a:8f:84:18:44:af:65:90:b1:9c:c9:d4:
62:3d:ae:7c:ef:bb:87:16:4a:ee:16:46:5d:fa:28:16:40:89:
25:b7:d8:67:de:72:54:20:97:94:7e:9b:5e:93:b0:dd:ed:ce:
2a:56:0b:0c:24:41:f9:5c:8f:3f:84:1c:86:d5:61:78:e1:f3:
1e:7f:21:e2:e6:a8:b0:f8:d2:44:05:ee:05:76:8f:71:15:f8:
cc:00:c4:28:09:b3:a6:ed:6c:3b:1b:15:b0:53:c7:4f:9d:7e:
3b:ba:62:61:91:eb:86:24:ad:91:c2:de:35:cb:8b:c8:59:60:
8c:58:53:fa:b1:37:a6:89:95:dc:9c:a9:b0:f6:ea:f4:8b:0f:
9c:27:63:5e:39:f8:ce:8b:ed:44:38:6f:61:89:ac:c1:8e:1a:
f6:e6:4d:11:c1:93:27:53:e5:a3:a2:27:40:aa:03:42:06:e7:
d5:2d:ef:9a:d2:0a:03:f3:3d:0a:7c:50:fd:45:fb:55:b0:22:
4c:8a:77:1e:7b:29:3d:6f:2d:d4:26:f7:74:be:99:1d:2f:83:
0c:ce:56:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:43:45 2026 by rpki-client