Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
File: Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft (raw, json)
Hash identifier: yX1SOy+rbt9mZygrX5vWLQBePOc4JQ4Ej9fPTU8kPIM=
Subject key identifier: E5:67:67:E0:CB:7C:B2:ED:ED:90:97:D6:E1:20:37:2F:91:B2:E2:E7
Authority key identifier: 36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
Certificate issuer: /CN=36ea22f04b94078aae015e00957b273ff038cf12
Certificate serial: 019DD42E2FDDCABD564830333B4532BEFD0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
Manifest number: 0277
Signing time: Tue 28 Apr 2026 13:01:29 +0000
Manifest this update: Tue 28 Apr 2026 13:01:29 +0000
Manifest next update: Wed 29 Apr 2026 13:01:29 +0000
Files and hashes: 1: Da4_S4SNOtv4x_AyFwLO2iZ2NTk.roa (hash: xJscPnkxP4a5FF40dHDyxZzM/Ukqt+kncsmZfw6FDtk=)
2: Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl (hash: emeR+XC4kgON1rfHwQj7jeTYDGsQ/yz3orGrzx/YDSw=)
3: ko6ImljslX8xwBeiLCk3I9LplCE.roa (hash: wxQ+AHB8I0TGwqdWlDutPolU/PoZbv8ro+r43WDFBLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:2e:2f:dd:ca:bd:56:48:30:33:3b:45:32:be:fd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea22f04b94078aae015e00957b273ff038cf12
Validity
Not Before: Apr 28 13:01:29 2026 GMT
Not After : Apr 29 13:01:29 2026 GMT
Subject: CN=e56767e0cb7cb2eded9097d6e120372f91b2e2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:5b:0f:01:36:dc:b4:7d:43:cb:7f:01:88:
b4:d7:db:f1:9c:40:03:49:1a:0e:70:43:89:4f:4b:
05:59:de:2b:e5:e6:6e:dd:82:41:08:50:ce:12:aa:
3f:c5:ac:4a:a9:56:09:a3:d2:b5:cf:13:a9:c0:22:
ee:19:07:3d:86:32:28:2a:8e:68:75:3d:de:71:3d:
01:29:4f:0b:b7:e7:7c:41:c3:40:cb:c1:27:c5:f9:
ba:76:16:21:83:f9:c1:0f:2c:43:e4:30:91:c9:9b:
65:f2:a2:74:5b:9c:a8:a6:e8:dc:b8:f5:c1:40:9f:
1c:99:26:95:5b:80:c8:ce:af:41:3e:b9:1d:cf:24:
6b:51:4a:9c:75:11:bf:64:15:93:df:43:65:fa:3b:
c3:53:51:50:4a:9e:71:e0:36:83:82:b5:2d:92:7f:
91:99:81:e2:34:e7:d3:fd:52:c9:2d:e0:93:f9:34:
53:3d:fb:d1:88:d7:8d:83:25:80:c9:43:81:85:b3:
71:a7:cc:10:48:33:9b:84:ef:31:39:5b:a4:d7:7b:
93:5e:b7:08:ef:c8:b0:ac:22:a9:5b:31:45:57:6d:
8e:1b:4c:14:09:2b:df:a4:d2:63:a5:4d:4d:06:9e:
36:1c:88:66:a0:f5:e9:85:f3:ef:a1:1a:43:ad:c7:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:67:67:E0:CB:7C:B2:ED:ED:90:97:D6:E1:20:37:2F:91:B2:E2:E7
X509v3 Authority Key Identifier:
keyid:36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1e:c8:a2:e3:07:2c:7a:ca:0c:b2:73:20:3a:a4:bd:ea:63:
b9:5c:da:ef:2e:1c:8b:60:8c:fa:35:e8:be:5d:e3:57:50:0e:
de:b9:e0:95:df:2b:e9:a1:58:e5:d7:23:b0:30:ab:a9:26:e6:
ff:bf:34:05:f5:ad:de:a0:ca:a1:f9:13:35:58:1d:dd:4b:c0:
bd:0e:bf:e2:27:48:36:ec:e2:53:7d:f2:09:77:0a:25:45:a1:
48:38:5e:d0:13:59:bb:76:65:72:c9:21:1a:a1:d4:ba:3c:97:
a7:42:0c:6f:84:e2:43:a2:80:b7:ef:f8:36:3c:97:50:01:02:
43:59:5d:93:34:7b:45:00:1c:55:8e:ac:92:51:8b:21:1b:9b:
13:10:46:cb:d5:e6:95:68:95:42:2c:2c:f9:c3:8d:c8:e5:f3:
a1:55:03:dc:f0:d9:33:0e:74:00:89:af:3f:22:38:71:5a:5c:
48:21:19:91:37:d2:a5:94:83:c6:9e:99:a0:c7:ae:83:61:15:
af:65:8b:7f:d6:7f:7b:62:89:a6:af:e7:a9:67:4b:c2:9e:9a:
8c:f4:75:8b:4c:f8:37:06:ea:a5:74:21:c2:ca:18:f3:e5:7d:
ca:8d:ad:a9:75:cf:ee:84:3c:57:ce:6c:c7:6c:3b:29:b8:dd:
d8:fd:88:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 18:40:41 2026 by rpki-client