Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
File: Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft (raw, json)
Hash identifier: IWmVOsYYNK4RM+2h49wY7pX04JlKwFTjCSZ1YMc88CQ=
Subject key identifier: D9:CB:CF:F9:BB:CB:34:AA:60:20:19:17:08:FD:6B:6A:5B:6A:8D:ED
Authority key identifier: 36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
Certificate issuer: /CN=36ea22f04b94078aae015e00957b273ff038cf12
Certificate serial: 019F1340D35AC6E60BCFCE272297AD9FA2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
Manifest number: 0320
Signing time: Mon 29 Jun 2026 12:00:43 +0000
Manifest this update: Mon 29 Jun 2026 12:00:43 +0000
Manifest next update: Tue 30 Jun 2026 12:00:43 +0000
Files and hashes: 1: 1-nEjApMTEeRJIn7bUOz0OxxiBq0.roa (hash: lbYjjUbr12AR7hdRUjgCrN5cjs0fc01uAnttT1Qjcw4=)
2: Da4_S4SNOtv4x_AyFwLO2iZ2NTk.roa (hash: xJscPnkxP4a5FF40dHDyxZzM/Ukqt+kncsmZfw6FDtk=)
3: Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl (hash: As/Ya8E14a8ruikOwdC1lXnA8P8FzeccvP9aQjJ+9ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:40:d3:5a:c6:e6:0b:cf:ce:27:22:97:ad:9f:a2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea22f04b94078aae015e00957b273ff038cf12
Validity
Not Before: Jun 29 12:00:43 2026 GMT
Not After : Jun 30 12:00:43 2026 GMT
Subject: CN=d9cbcff9bbcb34aa6020191708fd6b6a5b6a8ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8b:ec:86:32:70:81:3e:3d:65:d0:6e:df:bc:
70:32:92:3c:20:16:29:27:11:f0:d5:19:65:49:4f:
7e:31:31:e1:32:fb:47:61:2b:92:8e:ad:8d:25:4c:
78:4c:88:87:38:83:24:d0:71:19:99:8e:82:0c:f2:
20:9d:7c:1c:d0:05:12:0e:d9:b4:78:85:59:fc:de:
61:93:e0:23:6f:68:0a:22:bd:41:8c:fe:63:a5:52:
98:a5:51:34:94:dc:c7:b9:70:8d:a9:55:ea:cd:f5:
2a:3c:72:fd:0a:e2:91:64:c0:9d:08:36:48:60:ad:
63:9d:10:db:64:b6:4b:0c:9a:82:38:0e:35:12:f2:
82:02:b6:bb:cc:40:ac:0c:c0:9b:83:41:b0:3d:b9:
dc:23:a4:9d:41:02:64:6f:b4:15:c8:51:3a:81:7b:
2a:86:dd:5d:a0:96:c3:f2:00:96:7a:fc:84:a9:97:
6f:f3:8a:a3:94:f5:63:cd:e3:61:2a:1b:6b:b6:9c:
90:d3:7f:cc:c3:93:fa:7d:ed:41:2b:1f:5b:ca:ce:
1d:fd:45:50:7b:3a:d7:41:01:50:14:24:14:40:7c:
88:f4:39:ba:45:d6:9a:f7:c5:f0:a5:dd:09:41:f0:
20:59:5a:c2:a1:f3:ff:d4:7d:2b:e4:c4:94:f2:33:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CB:CF:F9:BB:CB:34:AA:60:20:19:17:08:FD:6B:6A:5B:6A:8D:ED
X509v3 Authority Key Identifier:
keyid:36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:78:01:08:47:f4:01:bf:84:df:bd:1a:73:1b:d9:c6:bb:ce:
91:38:0d:7d:cb:94:0c:00:58:9e:3b:28:52:3c:4b:b0:2f:bb:
84:51:a6:7c:2f:1d:76:73:07:0f:8b:c1:42:1a:e0:9b:c6:46:
6d:ac:09:46:d0:12:ae:de:f9:e1:04:93:25:2f:db:86:1a:b7:
98:3b:60:01:8b:af:67:d4:9c:da:92:f3:3b:e0:8c:0d:47:5c:
db:d3:66:6b:ff:03:fa:64:e3:65:9d:15:52:f4:46:49:9d:57:
44:d1:19:09:c5:5a:be:a3:50:4a:97:68:55:cf:bf:4d:27:99:
7a:bc:aa:e0:60:ea:ee:6e:03:82:df:4b:f5:fa:cf:ac:35:3e:
54:51:d4:f9:01:f4:f9:28:d5:8d:6c:b4:a4:48:4c:20:a9:42:
58:42:d5:bd:81:bd:42:4a:03:9c:66:59:2c:74:5c:20:60:7b:
8c:b8:a4:3b:72:10:19:0d:6e:9e:41:a5:d8:46:cf:12:44:a4:
14:bf:95:59:23:34:97:8b:36:b1:58:df:67:1f:08:1b:20:88:
34:e6:d5:4d:1b:e3:d2:fe:54:eb:65:2a:a4:bb:9e:d7:31:08:
fc:1f:d5:b5:9e:41:d8:1c:65:19:be:45:da:9a:be:6c:d2:f8:
32:50:f4:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8TQNNaxuYLz84nIpetn6LYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZWEyMmYwNGI5NDA3OGFhZTAxNWUwMDk1N2IyNzNmZjAz
OGNmMTIwHhcNMjYwNjI5MTIwMDQzWhcNMjYwNjMwMTIwMDQzWjAzMTEwLwYDVQQD
EyhkOWNiY2ZmOWJiY2IzNGFhNjAyMDE5MTcwOGZkNmI2YTViNmE4ZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ovshjJwgT49ZdBu37xwMpI8IBYp
JxHw1RllSU9+MTHhMvtHYSuSjq2NJUx4TIiHOIMk0HEZmY6CDPIgnXwc0AUSDtm0
eIVZ/N5hk+Ajb2gKIr1BjP5jpVKYpVE0lNzHuXCNqVXqzfUqPHL9CuKRZMCdCDZI
YK1jnRDbZLZLDJqCOA41EvKCAra7zECsDMCbg0GwPbncI6SdQQJkb7QVyFE6gXsq
ht1doJbD8gCWevyEqZdv84qjlPVjzeNhKhtrtpyQ03/Mw5P6fe1BKx9bys4d/UVQ
ezrXQQFQFCQUQHyI9Dm6Rdaa98Xwpd0JQfAgWVrCofP/1H0r5MSU8jPl5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnLz/m7yzSqYCAZFwj9a2pbao3tMB8GA1UdIwQY
MBaAFDbqIvBLlAeKrgFeAJV7Jz/wOM8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnVvaThFdVVCNHF1QVY0QWxYc25QX0E0enhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mM2JmY2YtYjBjZC00NWYxLWFlOWUt
NWMzZjc2ZDExNjA3LzEvTnVvaThFdVVCNHF1QVY0QWxYc25QX0E0enhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9mM2JmY2YtYjBjZC00NWYxLWFlOWUtNWMzZjc2ZDExNjA3
LzEvTnVvaThFdVVCNHF1QVY0QWxYc25QX0E0enhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvXgBCEf0
Ab+E370acxvZxrvOkTgNfcuUDABYnjsoUjxLsC+7hFGmfC8ddnMHD4vBQhrgm8ZG
bawJRtASrt754QSTJS/bhhq3mDtgAYuvZ9Sc2pLzO+CMDUdc29Nma/8D+mTjZZ0V
UvRGSZ1XRNEZCcVavqNQSpdoVc+/TSeZeryq4GDq7m4Dgt9L9frPrDU+VFHU+QH0
+SjVjWy0pEhMIKlCWELVvYG9QkoDnGZZLHRcIGB7jLikO3IQGQ1unkGl2EbPEkSk
FL+VWSM0l4s2sVjfZx8IGyCINObVTRvj0v5U62UqpLue1zEI/B/VtZ5B2BxlGb5F
2pq+bNL4MlD0OA==
-----END CERTIFICATE-----
Generated at Mon Jun 29 14:37:12 2026 by rpki-client