Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: FNwBuuOjDLfxb012NENu6FDj4LwbObRD+viANNHMNEA=
Subject key identifier: EB:C3:BD:13:92:0E:5A:82:FF:36:E3:40:A1:A2:95:CC:6F:6A:02:AD
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 019CAAC6432AAE5DF79DF42397FA333FDEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 184F
Signing time: Sun 01 Mar 2026 19:00:45 +0000
Manifest this update: Sun 01 Mar 2026 19:00:45 +0000
Manifest next update: Mon 02 Mar 2026 19:00:45 +0000
Files and hashes: 1: DOdbQIaTN2-U6lBMiFCsU2jbWrk.roa (hash: fX0ZPGU2Ep4sA5JGb1FOHePhR06Bt3nJo7FLowUZnbQ=)
2: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: JILoXU/1Jev666VPAu5mikzifSVqay5CqA5Jf3No1PM=)
3: dsrIojswrtCAaVDG7x95eUR5UNs.roa (hash: qILxj7yICSM2GLcGcjXclEWNMSwoXtcOFYbxsTUB7mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:43:2a:ae:5d:f7:9d:f4:23:97:fa:33:3f:de:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Mar 1 19:00:45 2026 GMT
Not After : Mar 2 19:00:45 2026 GMT
Subject: CN=ebc3bd13920e5a82ff36e340a1a295cc6f6a02ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a8:1e:4d:27:db:bb:26:d9:1a:a5:b5:9e:b3:
3d:9c:4a:48:ce:55:c7:cc:0f:ca:f7:16:69:0b:fa:
a0:d5:3b:75:28:70:97:1a:60:30:d9:02:72:46:2b:
36:d2:aa:6e:db:4e:24:7d:4c:dc:19:77:aa:5c:75:
f7:34:e2:81:d7:3a:19:4d:ef:d1:8f:67:d8:49:ae:
08:87:c4:eb:41:06:00:34:ac:65:0c:31:3e:46:e6:
dc:4b:5c:7f:9b:b8:c1:9e:82:cc:64:a1:a0:83:ab:
8c:74:09:93:24:c9:01:43:59:4d:22:e3:de:1e:4f:
98:0f:99:4f:d1:6c:b9:0b:bc:75:68:a5:33:41:cc:
4b:2b:9a:c7:19:c3:d0:db:60:52:fe:e5:3e:bf:25:
71:1b:6c:3a:d7:a4:a0:59:65:2c:db:e3:21:57:3c:
04:aa:96:da:2c:c3:01:2a:08:c0:6e:44:3c:78:2c:
76:e2:68:5a:30:5d:01:ce:fc:4f:8e:96:0a:ac:87:
ae:f7:64:95:9d:82:69:d8:7f:b4:f1:12:b1:e1:77:
ab:97:49:f3:f5:7d:3e:f7:63:cb:0a:7f:0c:c4:0c:
51:80:87:e4:31:f2:c5:d5:c0:cc:9d:fe:35:11:b3:
0b:b7:98:da:65:8a:9d:b8:9c:31:1d:42:68:03:30:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C3:BD:13:92:0E:5A:82:FF:36:E3:40:A1:A2:95:CC:6F:6A:02:AD
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4a:ac:75:b1:b0:87:25:c4:cc:55:97:92:9e:06:1c:e8:a2:
25:0e:85:88:d0:2f:d4:e5:20:b2:7d:ae:3c:8f:17:2d:0d:a5:
24:b1:23:77:a5:71:f5:db:d3:98:16:c7:4c:5c:9b:dc:7a:aa:
53:1c:c1:1f:92:bf:d6:18:90:89:d4:3f:be:39:57:a3:41:66:
eb:f0:f0:f5:cc:6f:9e:f8:cf:4d:c5:76:3f:77:e4:59:58:ab:
51:6a:00:d6:b5:b8:d2:12:9e:89:fd:09:ff:67:a4:e3:ac:4d:
7e:54:19:32:3a:89:29:2f:6d:84:2b:65:15:3b:e0:79:1b:f5:
bc:ad:ff:7a:5e:aa:13:62:d9:c4:38:10:74:98:da:fa:18:45:
89:7a:87:db:6d:81:61:2a:c6:34:b1:3c:f8:7f:df:33:ef:97:
b6:58:7f:b3:71:eb:dc:59:7c:05:13:ea:d8:d0:5b:bf:59:fc:
7b:f7:5d:79:1d:ca:1e:95:04:84:b0:59:e0:a0:e9:15:8a:31:
f1:54:3e:5c:cc:7e:39:ed:a9:a6:fc:48:35:59:08:c3:d2:70:
be:82:e7:54:5d:e0:26:66:08:73:82:7c:81:1f:61:06:0c:62:
c3:7a:7b:52:03:ca:fa:82:c9:de:b3:2d:70:16:cc:d8:d4:4e:
61:b3:3f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:36 2026 by rpki-client