Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
File: Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json)
Hash identifier: dVWBnsUQrgGG8dcUJMhi99n5evf3rChffpEMWPHFX4Q=
Subject key identifier: 0E:27:42:8C:93:29:16:A9:16:72:4B:C0:E8:8F:6F:2D:AC:82:88:6B
Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Certificate serial: 019CAA593FEBB702D1979D35E38589ADFA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
Manifest number: 0B91
Signing time: Sun 01 Mar 2026 17:01:41 +0000
Manifest this update: Sun 01 Mar 2026 17:01:41 +0000
Manifest next update: Mon 02 Mar 2026 17:01:41 +0000
Files and hashes: 1: HTK96uRhaCPEIKPa_uJkVUtYSro.roa (hash: YJYJVj428OJsUTfvfAdi4uBETofBiuE9K+NdS6ELexs=)
2: JQ2CDROzVuWPqXgateu16umo7lg.roa (hash: hQj8e4a5l+cytVF32sZTUFxC34J67XezC9sSXBkuvQg=)
3: Nd50iVrPYors-OE3V9sF40Sl2Ws.roa (hash: 8W9R9422ra+klJo6tlOJASq6q8gfKHZchw1aKhxM8nI=)
4: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: cmC8U7KmyWmJKasN3IB1K5XeZRhFh+VQIGFiS/A7Xxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:3f:eb:b7:02:d1:97:9d:35:e3:85:89:ad:fa:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Validity
Not Before: Mar 1 17:01:41 2026 GMT
Not After : Mar 2 17:01:41 2026 GMT
Subject: CN=0e27428c932916a916724bc0e88f6f2dac82886b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:49:95:86:ec:57:2a:42:7c:ad:4c:a0:ae:
39:9f:3c:f8:b8:23:1c:d7:ed:35:39:2a:17:cf:0a:
f3:b4:ff:70:bb:2c:1f:9e:4c:ee:dd:37:b2:18:f9:
76:fb:f6:3f:2c:5e:74:2a:1d:32:b9:f7:c6:74:ca:
ee:de:79:67:49:a6:89:50:79:ea:87:07:57:63:4b:
87:9c:e3:a1:44:5c:09:cf:81:7c:e0:c4:37:c2:3f:
43:30:10:f7:d4:df:e8:3e:57:cf:82:4c:7a:13:17:
f1:17:9f:d6:70:81:fd:d2:0b:d3:41:8d:54:f7:f3:
99:9a:12:5a:99:f4:81:bc:9f:96:0b:6c:3a:6a:53:
82:1c:f9:03:75:79:fd:46:6a:3e:a8:a0:1d:48:ba:
0b:3b:41:32:68:7b:50:10:85:e9:5a:d3:4e:c6:53:
a4:76:75:a3:03:28:90:4c:e9:be:20:5c:4f:13:1b:
03:bb:fb:56:d2:d9:9f:0e:6d:68:50:86:54:a4:c5:
a4:90:30:cd:08:cc:c9:28:05:dc:d7:6d:57:19:e8:
38:37:6d:ea:a8:44:3c:23:ed:20:04:3d:88:79:24:
c6:6c:2a:08:91:64:54:bf:cc:76:39:d0:68:22:74:
15:86:b8:84:92:58:8f:7a:75:c6:e1:b8:95:b8:76:
55:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:27:42:8C:93:29:16:A9:16:72:4B:C0:E8:8F:6F:2D:AC:82:88:6B
X509v3 Authority Key Identifier:
keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:75:b9:84:a3:38:85:1a:84:17:a9:09:ed:8f:4d:f8:0d:a0:
15:03:42:35:de:d0:ef:b6:0b:c0:79:0b:d0:67:88:fa:82:95:
54:fd:35:7f:67:4e:3d:90:d1:c4:75:23:b7:c8:82:a7:c1:9d:
cb:71:32:f0:8c:55:3e:78:7b:6b:72:d0:cc:d7:81:6f:89:4e:
df:22:7f:bd:aa:9d:c0:2b:c4:4d:ed:d6:09:77:d5:3c:0b:2a:
23:73:88:4b:4c:29:ea:ec:bb:0b:f7:c0:7e:d5:81:7a:2b:d0:
1a:a7:dc:6e:11:3c:6c:d5:f4:18:77:bc:b3:71:27:33:97:e6:
70:bb:42:95:e7:8c:00:a4:9c:08:0c:9a:38:4c:77:56:0d:fd:
4e:25:b5:bc:ef:fe:01:04:38:ce:b4:58:d6:13:ee:ae:c5:8d:
af:81:f3:bc:74:8f:50:90:00:53:58:8c:6a:d1:63:71:a6:b0:
01:3c:0f:7e:47:89:c3:ac:7f:5f:81:5a:fd:0c:d3:74:e4:eb:
0f:a3:23:f1:06:85:d3:25:7c:a6:2f:56:82:b0:d7:01:91:31:
85:9b:24:05:6a:15:54:43:7d:23:46:c3:44:ce:45:dd:96:74:
5c:e2:90:55:a1:b0:db:b5:af:49:49:57:6a:1c:f3:fa:d5:77:
b6:c4:2c:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWT/rtwLRl50144WJrfqaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YmQ0YTM4MmRhZTJiZTVjYjk4YjM1ZTVhMDQ4ZDAzYjRj
Y2JlMmIwHhcNMjYwMzAxMTcwMTQxWhcNMjYwMzAyMTcwMTQxWjAzMTEwLwYDVQQD
EygwZTI3NDI4YzkzMjkxNmE5MTY3MjRiYzBlODhmNmYyZGFjODI4ODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQJJlYbsVypCfK1MoK45nzz4uCMc
1+01OSoXzwrztP9wuywfnkzu3TeyGPl2+/Y/LF50Kh0yuffGdMru3nlnSaaJUHnq
hwdXY0uHnOOhRFwJz4F84MQ3wj9DMBD31N/oPlfPgkx6ExfxF5/WcIH90gvTQY1U
9/OZmhJamfSBvJ+WC2w6alOCHPkDdXn9Rmo+qKAdSLoLO0EyaHtQEIXpWtNOxlOk
dnWjAyiQTOm+IFxPExsDu/tW0tmfDm1oUIZUpMWkkDDNCMzJKAXc121XGeg4N23q
qEQ8I+0gBD2IeSTGbCoIkWRUv8x2OdBoInQVhriEkliPenXG4biVuHZVDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4nQoyTKRapFnJLwOiPby2sgohrMB8GA1UdIwQY
MBaAFDa9Sjgtrivly5izXloEjQO0zL4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lNzRmNWYtNzVjNS00YTc1LTk4Yjkt
OWZlY2JkMjVkNDM0LzEvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9lNzRmNWYtNzVjNS00YTc1LTk4YjktOWZlY2JkMjVkNDM0
LzEvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHW5hKM4
hRqEF6kJ7Y9N+A2gFQNCNd7Q77YLwHkL0GeI+oKVVP01f2dOPZDRxHUjt8iCp8Gd
y3Ey8IxVPnh7a3LQzNeBb4lO3yJ/vaqdwCvETe3WCXfVPAsqI3OIS0wp6uy7C/fA
ftWBeivQGqfcbhE8bNX0GHe8s3EnM5fmcLtCleeMAKScCAyaOEx3Vg39TiW1vO/+
AQQ4zrRY1hPursWNr4HzvHSPUJAAU1iMatFjcaawATwPfkeJw6x/X4Fa/QzTdOTr
D6Mj8QaF0yV8pi9WgrDXAZExhZskBWoVVEN9I0bDRM5F3ZZ0XOKQVaGw27WvSUlX
ahzz+tV3tsQs/w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:28:49 2026 by rpki-client