Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File: NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier: 8RmETuA8k5NSqIBMYDzKaZv5ALxOg34QPmkSLf3aFYM=
Subject key identifier: 3A:9F:B9:76:D4:60:0B:A9:0D:BE:18:20:0F:65:C2:EF:01:14:1B:9E
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 019EC1B75988D2D856DB22567F180CCEB3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number: 1964
Signing time: Sat 13 Jun 2026 16:01:19 +0000
Manifest this update: Sat 13 Jun 2026 16:01:19 +0000
Manifest next update: Sun 14 Jun 2026 16:01:19 +0000
Files and hashes: 1: DOdbQIaTN2-U6lBMiFCsU2jbWrk.roa (hash: fX0ZPGU2Ep4sA5JGb1FOHePhR06Bt3nJo7FLowUZnbQ=)
2: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: PrEdR0JIJL9MblMGtvGfDIuClRjhwhmWKcpOC/GAM14=)
3: dsrIojswrtCAaVDG7x95eUR5UNs.roa (hash: qILxj7yICSM2GLcGcjXclEWNMSwoXtcOFYbxsTUB7mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:59:88:d2:d8:56:db:22:56:7f:18:0c:ce:b3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Jun 13 16:01:19 2026 GMT
Not After : Jun 14 16:01:19 2026 GMT
Subject: CN=3a9fb976d4600ba90dbe18200f65c2ef01141b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:c9:bb:77:fb:29:93:42:e7:3c:e9:80:4e:
44:3a:99:6e:86:3f:8f:91:fa:74:f6:1d:f9:c8:1d:
45:ea:99:0c:77:9f:93:ab:98:8d:f6:d7:fd:ce:a7:
07:f8:7b:4f:21:31:0a:8d:36:dd:23:52:9c:f9:0b:
59:bf:bf:96:04:dc:df:22:85:0b:20:52:03:8d:c3:
6c:cc:67:25:8b:77:df:e3:1f:68:4c:a4:a8:e6:42:
76:da:68:1a:8e:bd:7f:82:e3:75:a1:d5:0d:ce:af:
f0:04:07:cc:14:6a:94:58:a2:26:21:9d:da:4c:f3:
68:7b:a0:b9:36:9c:26:a7:c9:48:f2:22:72:cf:1a:
6b:02:4c:94:5b:d1:0b:32:4a:3c:cf:01:83:9f:14:
50:ab:b6:a7:a3:93:3a:8c:9c:e0:0a:02:f1:80:61:
ed:74:e5:96:5c:6d:16:73:3d:9d:8c:6b:72:54:59:
52:23:39:f1:a2:c5:cb:63:23:83:11:f0:a8:3f:c5:
cd:22:7f:e6:f7:6c:18:c0:4e:7c:7c:96:e8:45:be:
66:fa:2d:bb:d5:96:c8:2d:e0:e1:89:29:43:7c:b1:
41:25:4c:ff:d9:e1:05:67:8b:1c:cb:6c:e8:c9:51:
d2:12:27:b1:16:7e:6a:14:dd:a7:7e:46:9b:98:44:
b8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9F:B9:76:D4:60:0B:A9:0D:BE:18:20:0F:65:C2:EF:01:14:1B:9E
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:ac:d2:67:75:e6:e8:68:80:58:27:0f:ef:70:a9:49:bf:89:
75:6a:86:ea:5b:67:af:32:46:32:c3:b0:a2:83:dd:67:41:f0:
8e:c4:d9:96:e8:79:0b:d5:bf:72:52:58:8f:b6:da:83:b2:b5:
24:e2:d8:b3:8c:c9:0e:fa:cf:51:ad:38:c8:92:3d:7a:2d:92:
0c:da:57:ac:30:33:d3:60:94:04:11:cd:22:14:0d:ec:83:88:
5b:72:44:85:20:4b:60:e6:d7:9f:30:6c:73:31:e0:04:48:b4:
bc:13:09:17:45:14:b1:64:7c:10:52:7b:98:1e:f8:7f:4c:a8:
cb:3e:a5:5c:65:59:1a:f1:38:b6:bf:4b:82:b9:7d:38:7c:2e:
46:0a:63:30:95:c0:b3:58:d4:6c:68:28:df:96:ca:fe:cc:d0:
d7:0c:54:6f:30:59:3a:e6:27:0c:ab:76:27:d8:f9:56:5a:39:
c6:ce:af:f4:a2:f5:4c:b9:76:6e:dd:d8:0e:a9:be:d6:3e:d5:
47:cd:e0:c8:bf:f6:31:b7:ec:2b:df:96:09:9f:ec:9f:89:68:
a1:86:6f:6a:0f:cd:15:38:59:d5:87:f1:20:ef:63:b4:d9:c1:
61:79:f1:0a:95:04:67:90:22:01:62:7b:31:02:f5:0b:1c:76:
04:95:b8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:46:02 2026 by rpki-client