Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: myFUzoeP69JUCFqpLdsf+8ykToWRXKKUkvPNfth24bw=
Subject key identifier: 0F:68:B6:9C:E1:A9:08:72:0E:D1:C5:69:06:05:80:8E:3A:54:BE:43
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 019D984FABA9638ED06BF045D1A2BCEA21D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 18CA
Signing time: Thu 16 Apr 2026 22:00:51 +0000
Manifest this update: Thu 16 Apr 2026 22:00:51 +0000
Manifest next update: Fri 17 Apr 2026 22:00:51 +0000
Files and hashes: 1: DOdbQIaTN2-U6lBMiFCsU2jbWrk.roa (hash: fX0ZPGU2Ep4sA5JGb1FOHePhR06Bt3nJo7FLowUZnbQ=)
2: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: rpozns9a51OIyY72BnowPTCyQwxaJrDPgpEklgzc9B4=)
3: dsrIojswrtCAaVDG7x95eUR5UNs.roa (hash: qILxj7yICSM2GLcGcjXclEWNMSwoXtcOFYbxsTUB7mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:ab:a9:63:8e:d0:6b:f0:45:d1:a2:bc:ea:21:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Apr 16 22:00:51 2026 GMT
Not After : Apr 17 22:00:51 2026 GMT
Subject: CN=0f68b69ce1a908720ed1c5690605808e3a54be43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:5e:58:0c:c0:dd:1a:be:30:b9:29:60:ea:
4f:2c:d0:f0:9b:d0:47:4d:5a:b2:4c:aa:f5:19:36:
6e:1f:3b:f5:8b:24:4c:bd:c7:54:7a:7d:a8:a9:7b:
25:70:7e:c9:c3:79:50:13:06:5a:68:ec:b3:a1:b5:
5b:c6:a0:fe:fc:be:f1:06:d8:41:27:2e:f9:f3:46:
8f:f9:e1:31:a2:ea:e5:03:7a:a0:b2:8c:83:7d:c3:
f3:88:71:71:ed:95:f9:cf:70:34:3a:09:43:7a:0c:
93:21:9f:24:9c:62:30:b3:93:c6:6d:a8:8c:3c:74:
02:2b:07:ef:ae:50:44:d7:2e:0a:8e:ca:7a:65:33:
89:72:aa:88:2f:16:cb:c1:a7:1a:cd:9b:26:8e:8d:
5b:87:fb:86:b2:83:2b:e7:e5:85:c9:e6:0b:bf:ea:
03:4c:7d:80:cb:1d:92:db:46:12:ed:8b:da:4e:6f:
ff:7c:f0:f1:67:b5:5a:d4:90:e9:e4:35:10:0e:7f:
16:04:1e:1e:b8:ff:be:8f:11:55:bc:d8:c1:f4:f8:
b8:e3:05:7b:4b:ef:f5:13:cc:3c:64:a4:f3:37:92:
85:89:09:63:d7:cf:89:cc:6e:be:4a:9c:11:19:6a:
d3:e3:b8:46:7c:0a:22:af:0a:fa:71:08:d7:c2:4b:
bf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:68:B6:9C:E1:A9:08:72:0E:D1:C5:69:06:05:80:8E:3A:54:BE:43
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:40:8b:e8:46:ae:cb:4d:c3:79:90:8e:97:7e:67:0e:d2:e9:
cd:b8:29:40:ea:df:86:3b:f0:ac:5f:a3:58:08:0d:db:96:57:
71:c2:e4:13:8f:ad:64:c6:da:2a:43:ac:4c:59:bb:61:d2:05:
09:4b:61:37:4e:77:fd:af:a6:78:ad:75:a4:1d:97:31:a7:0a:
37:90:a4:3d:3d:eb:23:11:50:ad:9d:3d:21:d3:9a:23:9d:38:
35:c0:bd:a1:de:8c:0b:53:fb:6c:04:fa:d6:10:80:fb:3f:45:
f0:40:78:54:1a:3c:a7:9d:d7:2e:c4:10:43:a6:b0:d4:16:f3:
71:f3:d4:01:e1:69:c3:f0:e9:a2:39:d9:9f:fa:c8:82:e2:3e:
48:88:e4:1a:21:d0:91:82:63:ce:7b:02:cb:c8:af:ac:bb:b4:
99:9b:a4:82:12:2d:fe:ae:5b:a6:ff:04:e0:a1:0f:d1:ac:0b:
25:3f:47:69:90:7d:b7:eb:a1:84:33:0c:68:87:33:0c:28:50:
07:4a:48:34:5d:62:ed:c8:97:39:7d:1a:a9:ce:25:d8:64:79:
ba:e0:df:9c:b5:b1:37:72:5f:82:9d:f8:89:dc:4e:2f:5d:7e:
88:2b:20:2d:ea:90:e2:cb:16:c3:a1:1a:4a:4d:6a:a0:59:e2:
a1:96:58:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:49 2026 by rpki-client