Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
File: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft (raw, json)
Hash identifier: gpm81yVylKy2dP/VOWiVIbOedmU3IOaYzOMd4R6ZV+Q=
Subject key identifier: 89:1B:36:6C:67:60:07:2B:61:65:38:52:9F:F0:E5:63:5B:EC:89:41
Authority key identifier: 36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
Certificate issuer: /CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Certificate serial: 019D382DEF5DD8F1E41C8C533C1534A69348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:00:27 +0000
Manifest this update: Sun 29 Mar 2026 06:00:27 +0000
Manifest next update: Mon 30 Mar 2026 06:00:27 +0000
Files and hashes: 1: 2faiVit9OjueZahp7YpMGI9nPX0.roa (hash: OgjxqGpyZOwTD9iVONTR2DO+mW7tsVQaXV48+jDEJWE=)
2: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl (hash: e/fWdkwP8zEMw+BK8RnMkB2+0J7bfpZoM+Zct1v+Nag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:ef:5d:d8:f1:e4:1c:8c:53:3c:15:34:a6:93:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Validity
Not Before: Mar 29 06:00:27 2026 GMT
Not After : Mar 30 06:00:27 2026 GMT
Subject: CN=891b366c6760072b616538529ff0e5635bec8941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:6d:dc:dc:70:45:ab:61:14:eb:ad:64:7f:
3f:de:70:76:f8:ac:f3:f5:cc:1d:15:af:f5:89:83:
ec:49:b0:1d:c6:14:af:cf:3d:18:2d:8b:b2:7c:c6:
4c:cf:9b:76:2c:4e:a4:b7:3d:d6:a5:fd:bd:fc:e5:
77:e2:91:8a:be:1c:ad:0f:98:c1:7c:0a:e6:d5:56:
95:b5:02:49:5a:b0:5c:b0:64:f2:85:58:05:3e:fc:
77:d0:78:c5:78:d4:57:74:22:ca:1e:1f:46:4c:a0:
21:74:6f:16:a7:b0:d7:3d:ae:6e:2e:0a:a8:78:85:
7a:ce:70:0e:3d:96:4b:2d:ce:50:ab:e7:29:64:8a:
49:c5:03:f8:a8:cc:68:73:45:c8:d8:12:a1:24:1b:
47:c8:86:d2:cb:b8:17:39:4a:cd:de:2a:13:22:25:
80:a2:e5:d3:76:e2:94:f5:e9:0b:fa:50:48:58:6f:
55:2f:c6:dd:14:dc:d7:e8:d9:15:6c:15:ba:f8:33:
26:da:40:02:04:10:b9:75:2e:1c:dc:8b:55:c6:ee:
eb:1a:df:fb:a3:84:c3:dc:65:fb:3d:70:c9:4f:6d:
00:30:59:64:fe:e0:38:fd:6d:22:62:39:f7:de:f8:
72:a6:81:73:6c:2e:74:e7:0b:d2:fe:bf:8e:b5:23:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1B:36:6C:67:60:07:2B:61:65:38:52:9F:F0:E5:63:5B:EC:89:41
X509v3 Authority Key Identifier:
keyid:36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:20:f4:4a:4f:a8:c2:ec:e7:cf:73:f0:3e:8c:b9:c8:2a:5b:
7f:0a:88:8e:1f:92:7c:bb:03:e9:98:61:f9:64:17:de:e1:9a:
dc:89:99:dc:74:59:c5:92:e1:16:dd:35:23:26:32:2b:e9:de:
15:41:52:be:04:d1:2e:04:57:21:9f:d3:ab:5a:f5:8d:f0:91:
54:91:ec:c2:5c:ba:0c:38:36:28:14:f9:c5:67:91:73:e8:f4:
3c:4b:14:05:5e:27:e4:38:8e:30:8e:f5:cd:f4:cb:0f:90:ee:
cf:eb:d3:eb:e1:c3:7f:cd:2f:5a:ad:87:4a:99:00:2d:05:10:
e2:03:7e:57:bf:3c:67:bd:42:08:b4:3d:57:e9:0c:85:dc:eb:
b0:10:da:32:df:45:13:6c:47:64:b8:ef:aa:74:6f:4d:01:bc:
33:af:4b:40:e9:56:23:58:12:13:1c:c8:c5:48:3a:4b:43:51:
15:2e:6b:60:d9:99:25:b4:f5:a8:dc:2a:0d:49:c4:19:00:12:
dc:0d:f3:16:33:56:08:23:7f:0c:68:3e:68:3a:16:72:2f:5b:
de:6e:15:e6:26:04:6e:94:b3:98:9e:cf:d1:72:ac:67:ad:18:
2e:1c:39:21:f7:92:40:d1:61:c9:bb:cb:cd:40:e9:25:d1:ed:
2c:c2:4f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:14 2026 by rpki-client