Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: 5RuKPN+4hvCdbIer9N5KFAouhqSNUaGuNLxUXs6XlvE=
Subject key identifier: E0:2F:03:FB:8D:52:D3:EB:A8:67:4D:8E:46:12:78:2A:DB:AB:68:16
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 01A0F1C371A92407915486CF1591A9919E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 1A86
Signing time: Wed 30 Sep 2026 10:01:52 +0000
Manifest this update: Wed 30 Sep 2026 10:01:52 +0000
Manifest next update: Thu 01 Oct 2026 10:01:52 +0000
Files and hashes: 1: DOdbQIaTN2-U6lBMiFCsU2jbWrk.roa (hash: fX0ZPGU2Ep4sA5JGb1FOHePhR06Bt3nJo7FLowUZnbQ=)
2: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: RHtKFo1o+ErJrtXw+jTxQCzVmEwWpjaTR1HuyFSgSGY=)
3: dsrIojswrtCAaVDG7x95eUR5UNs.roa (hash: qILxj7yICSM2GLcGcjXclEWNMSwoXtcOFYbxsTUB7mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c3:71:a9:24:07:91:54:86:cf:15:91:a9:91:9e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Sep 30 10:01:52 2026 GMT
Not After : Oct 1 10:01:52 2026 GMT
Subject: CN=e02f03fb8d52d3eba8674d8e4612782adbab6816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7c:52:f4:74:ff:b7:8c:b9:b0:b6:35:7b:af:
53:55:50:89:9a:c9:72:92:4f:04:7d:77:f4:fb:2a:
8d:12:cf:f4:c5:d5:aa:05:8d:d9:c6:ec:f1:3a:ab:
81:00:93:8d:94:43:3d:81:dd:d7:fc:f5:63:0d:f8:
32:83:2d:9d:e6:6e:c2:50:00:4b:c4:b6:da:56:b4:
a4:6c:5a:37:ac:01:da:3c:64:d7:a4:74:a0:8f:56:
1f:17:f4:24:bf:db:91:4d:24:93:9b:84:62:38:13:
e1:9c:16:70:4a:28:95:8f:f3:b1:11:2c:0b:d9:9d:
8d:eb:b1:a4:29:be:60:20:f9:24:4c:96:67:c3:e5:
36:77:7b:b6:8e:0d:2a:f8:eb:62:9a:16:02:0f:cc:
8a:b4:e7:df:2f:2d:d2:90:82:37:b2:e5:0a:34:e6:
32:5c:01:6b:a5:82:07:91:e8:7b:8b:46:50:6f:7e:
32:77:e3:1f:a7:03:e7:67:08:d3:e4:e8:70:4a:ca:
77:3b:ea:4b:b9:af:35:da:16:11:bd:ee:a5:6e:df:
69:e9:33:22:4e:ac:28:2b:64:08:b5:2f:3c:0f:d4:
a7:e2:08:93:c8:9d:bc:ee:8f:aa:21:cd:11:1a:60:
8b:18:b7:9a:31:e9:4b:f7:08:81:43:dc:52:1d:bd:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2F:03:FB:8D:52:D3:EB:A8:67:4D:8E:46:12:78:2A:DB:AB:68:16
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:12:32:ca:2c:52:42:61:0f:fe:a4:9b:0e:15:a9:20:06:89:
89:54:c1:4a:74:92:1b:95:b6:74:89:5c:ab:05:be:3e:f5:d0:
3e:66:3e:f4:ef:bc:82:9a:bb:cc:e5:22:ba:59:2f:34:c9:a4:
3b:68:c1:fc:67:39:55:2e:4c:8f:d2:dc:c6:13:b6:4e:61:2e:
16:82:88:c2:c9:a2:fc:83:6c:3b:3c:e6:91:55:2e:ed:79:c4:
92:62:18:7b:03:06:05:c6:2e:74:d7:72:c1:88:05:ae:a1:1d:
0a:6a:5e:df:ad:42:db:20:9c:d8:38:85:89:51:f0:ef:d0:60:
d3:3b:f1:8c:af:67:9f:00:c1:44:5c:9d:dd:7f:cd:a9:ab:d3:
58:07:22:53:c1:cf:c2:80:e5:28:56:be:1a:bb:15:10:83:f4:
f6:1f:a0:78:ce:3e:26:a7:04:ac:52:8f:68:bd:56:19:44:f5:
13:b4:80:54:c0:fb:4e:85:27:ee:c1:e0:c9:00:39:ed:e0:24:
62:b9:e8:36:63:81:5b:b8:52:b9:0d:d8:e6:c4:9f:08:fe:f2:
47:57:16:c1:49:e6:10:24:95:b8:06:e6:be:48:9c:67:e0:a3:
53:16:45:1a:a0:46:ee:35:e9:1b:e4:88:f3:d6:dc:7d:7f:59:
d8:d2:91:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 16:51:16 2026 by rpki-client