Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
File: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json)
Hash identifier: 4OZWJFDroOYaPcFZKVa+0Echg9OyLT1PKSdsxkmKoyI=
Subject key identifier: 2B:DC:82:CA:6A:D7:1A:D6:F1:77:75:C2:FA:83:6E:B0:55:27:52:52
Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
Certificate issuer: /CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Certificate serial: 019DDD689BEA1491A60FBAEEE1C8775EA5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
Manifest number: 0AA0
Signing time: Thu 30 Apr 2026 08:01:53 +0000
Manifest this update: Thu 30 Apr 2026 08:01:53 +0000
Manifest next update: Fri 01 May 2026 08:01:53 +0000
Files and hashes: 1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: GVlTyF+IvxyGhY19PN+PJsRaH3u7LEqQmQgWIo6TogQ=)
2: QeaLiE9j4ankS_phkxa_qrN9g1Q.roa (hash: aTNhEv7p3O+ErWEZXlpo2u9L43e8YHpY2vq29krIAK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:68:9b:ea:14:91:a6:0f:ba:ee:e1:c8:77:5e:a5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Validity
Not Before: Apr 30 08:01:53 2026 GMT
Not After : May 1 08:01:53 2026 GMT
Subject: CN=2bdc82ca6ad71ad6f17775c2fa836eb055275252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:eb:50:d9:4a:27:22:a5:32:30:4f:13:96:
79:8f:e9:5e:16:55:87:81:ab:3e:dc:71:1e:e2:ab:
16:cb:db:46:f1:83:37:72:8b:8e:38:bf:c8:3f:08:
a5:10:4b:da:fb:cd:42:6a:8c:f5:66:73:53:4a:7c:
bb:50:e4:4f:cf:39:5e:3e:03:64:05:7e:7f:4a:06:
a4:2c:99:cc:37:bb:6e:73:86:65:11:5f:2b:f1:e0:
7d:28:b5:3f:ad:64:d4:a6:74:2b:0a:a1:47:14:24:
a7:d9:73:b4:19:92:3f:ae:cf:f9:c5:b8:f7:9a:ff:
60:7c:88:58:b2:83:61:1a:eb:31:bf:c5:78:ef:fe:
59:3d:e7:77:a7:99:fb:8b:1f:91:77:ba:44:33:4f:
5b:2b:59:7f:4f:b2:b7:48:7c:f6:6b:a2:0a:20:a4:
65:bd:03:50:61:bb:e1:0e:0a:32:02:c2:f6:ae:14:
36:fd:ea:98:4f:6b:12:cb:a0:d9:cb:bb:e9:f7:de:
ff:d1:a7:84:d7:e9:f7:7e:92:1b:3d:a6:5c:92:90:
63:c8:30:13:ab:59:c3:18:6c:d2:81:c3:02:fd:6f:
fb:6c:6f:17:67:88:60:43:b7:fa:3c:d2:7d:21:49:
3e:20:a8:fd:3d:51:7f:66:a3:13:a5:b6:aa:0a:f1:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DC:82:CA:6A:D7:1A:D6:F1:77:75:C2:FA:83:6E:B0:55:27:52:52
X509v3 Authority Key Identifier:
keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ee:f9:73:9f:3f:70:13:e7:eb:c2:ad:fd:9e:86:e6:d6:fe:
1f:83:fa:17:85:c5:a6:31:32:d1:ba:32:43:8e:49:6b:3d:67:
90:f3:d3:1b:64:b7:57:eb:e0:32:f7:0d:2a:b1:f2:d4:d4:d8:
3a:90:fe:e3:05:5c:8a:63:88:be:e9:61:3d:5b:de:9f:e6:76:
c2:41:c9:3b:91:f2:b7:92:8f:e2:30:c7:b5:1c:f5:42:00:6a:
ab:11:0b:bc:ba:c5:27:27:45:32:c9:f6:de:10:f3:e1:f4:17:
5c:4b:ee:3a:c5:2f:9e:9c:c6:b2:3b:e0:19:41:57:36:2e:38:
4e:40:50:8e:10:46:65:a0:d2:06:1e:41:c7:6b:c0:05:b6:a6:
f8:0b:76:0d:40:fc:fe:48:31:50:a1:12:67:e4:6f:1a:f5:75:
1a:5e:74:23:2e:95:01:ea:92:d4:89:9c:b1:28:3f:ca:cc:93:
7c:4b:2d:2d:95:38:64:b8:f6:48:19:e0:95:aa:34:c8:3b:58:
31:1a:5d:b5:4a:59:27:9c:2c:6b:a3:4e:49:0a:56:8c:6d:a6:
99:17:4c:7b:d3:54:d8:e3:75:b8:3e:7c:49:48:6f:a0:5c:d7:
9e:a5:21:1a:59:86:65:c0:b9:3f:d4:af:d4:89:4c:9c:ff:a3:
0a:00:ed:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3daJvqFJGmD7ru4ch3XqXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDZmZjQ1Y2U1MDU1N2VkYzRjMDMwNmUxZjg2OTQ4MmFk
NDIzZTAwHhcNMjYwNDMwMDgwMTUzWhcNMjYwNTAxMDgwMTUzWjAzMTEwLwYDVQQD
EygyYmRjODJjYTZhZDcxYWQ2ZjE3Nzc1YzJmYTgzNmViMDU1Mjc1MjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8TrUNlKJyKlMjBPE5Z5j+leFlWH
gas+3HEe4qsWy9tG8YM3couOOL/IPwilEEva+81Caoz1ZnNTSny7UORPzzlePgNk
BX5/SgakLJnMN7tuc4ZlEV8r8eB9KLU/rWTUpnQrCqFHFCSn2XO0GZI/rs/5xbj3
mv9gfIhYsoNhGusxv8V47/5ZPed3p5n7ix+Rd7pEM09bK1l/T7K3SHz2a6IKIKRl
vQNQYbvhDgoyAsL2rhQ2/eqYT2sSy6DZy7vp997/0aeE1+n3fpIbPaZckpBjyDAT
q1nDGGzSgcMC/W/7bG8XZ4hgQ7f6PNJ9IUk+IKj9PVF/ZqMTpbaqCvE6twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvcgspq1xrW8Xd1wvqDbrBVJ1JSMB8GA1UdIwQY
MBaAFDVG/0XOUFV+3EwDBuH4aUgq1CPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUt
NjQwYzc0YTk0Y2M2LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUtNjQwYzc0YTk0Y2M2
LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+75c58/
cBPn68Kt/Z6G5tb+H4P6F4XFpjEy0boyQ45Jaz1nkPPTG2S3V+vgMvcNKrHy1NTY
OpD+4wVcimOIvulhPVven+Z2wkHJO5Hyt5KP4jDHtRz1QgBqqxELvLrFJydFMsn2
3hDz4fQXXEvuOsUvnpzGsjvgGUFXNi44TkBQjhBGZaDSBh5Bx2vABbam+At2DUD8
/kgxUKESZ+RvGvV1Gl50Iy6VAeqS1ImcsSg/ysyTfEstLZU4ZLj2SBnglao0yDtY
MRpdtUpZJ5wsa6NOSQpWjG2mmRdMe9NU2ON1uD58SUhvoFzXnqUhGlmGZcC5P9Sv
1IlMnP+jCgDtKg==
-----END CERTIFICATE-----
Generated at Thu Apr 30 14:56:50 2026 by rpki-client