Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
File: Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json)
Hash identifier: eja7fDswthYSOUmpFOLVjxUepjshOAl4lNIUBSSajc8=
Subject key identifier: AA:6E:FB:C8:C6:97:28:B9:33:61:4C:A4:3B:51:C3:D7:AE:19:71:87
Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Certificate serial: 019CAC47718E073ED32B8743A4E2C20B09BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
Manifest number: 0B92
Signing time: Mon 02 Mar 2026 02:01:28 +0000
Manifest this update: Mon 02 Mar 2026 02:01:28 +0000
Manifest next update: Tue 03 Mar 2026 02:01:28 +0000
Files and hashes: 1: HTK96uRhaCPEIKPa_uJkVUtYSro.roa (hash: YJYJVj428OJsUTfvfAdi4uBETofBiuE9K+NdS6ELexs=)
2: JQ2CDROzVuWPqXgateu16umo7lg.roa (hash: hQj8e4a5l+cytVF32sZTUFxC34J67XezC9sSXBkuvQg=)
3: Nd50iVrPYors-OE3V9sF40Sl2Ws.roa (hash: 8W9R9422ra+klJo6tlOJASq6q8gfKHZchw1aKhxM8nI=)
4: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: pPC/TfKcp5MGtWgVmfJqMVhuDgOZ0G7yVPzwZ9rh7XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:71:8e:07:3e:d3:2b:87:43:a4:e2:c2:0b:09:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Validity
Not Before: Mar 2 02:01:28 2026 GMT
Not After : Mar 3 02:01:28 2026 GMT
Subject: CN=aa6efbc8c69728b933614ca43b51c3d7ae197187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:eb:db:4b:e3:ef:d7:52:cf:bb:34:cd:d7:39:
bc:87:a3:dd:3c:13:1e:3a:47:7f:21:6e:af:42:b2:
2d:10:6c:fb:fa:ac:86:0e:4a:80:66:95:83:33:66:
9d:5f:b2:02:fe:7c:f9:bf:92:4f:e6:42:b2:7a:6e:
68:33:a5:4c:bd:cd:b8:94:c3:a0:81:d5:74:29:d7:
15:00:9c:db:f6:3a:f4:8c:b5:bf:8e:4b:3b:46:79:
07:18:ba:07:b3:fb:61:61:02:32:c6:49:b8:1e:0e:
76:12:95:d8:ec:4b:42:53:5a:fc:30:27:1b:d2:76:
44:2d:bc:9a:e9:08:fe:98:84:9d:01:8d:19:7f:2d:
f2:fe:df:0d:84:ba:9b:f3:6f:49:d9:0f:e8:85:fd:
5c:93:f5:65:ee:ac:88:1d:3e:19:89:9e:d4:97:53:
67:60:df:4a:e4:1e:08:fb:c7:5d:fd:50:2f:80:8b:
15:9a:b5:ce:df:6b:bc:53:c8:23:8d:82:ea:1a:ce:
69:61:e7:9c:3d:2a:f6:07:0c:08:5c:0c:3e:36:4e:
86:7a:cd:6e:be:0c:a8:cc:ad:c6:62:3a:45:da:e6:
f8:7a:dd:31:20:b7:c9:30:3e:51:7d:f1:ba:ad:08:
b4:7d:bb:e3:79:97:31:43:77:8e:fa:88:77:23:f6:
1c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6E:FB:C8:C6:97:28:B9:33:61:4C:A4:3B:51:C3:D7:AE:19:71:87
X509v3 Authority Key Identifier:
keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5e:f1:73:3f:b6:d5:88:26:55:77:fa:f2:b0:28:29:b5:c1:
fe:a9:05:a9:c9:84:97:8f:c3:31:38:26:ea:a4:c2:15:83:3d:
4e:55:b2:f3:94:3d:48:0d:04:17:a1:f2:32:94:f8:cc:54:f4:
ad:b1:a4:41:4a:c4:22:71:d8:8a:99:5f:95:90:6d:72:1f:3b:
9a:0c:22:62:e2:db:d3:6f:18:9b:c9:7f:e3:3f:dc:1e:6b:29:
f1:af:1c:98:b5:68:9b:26:02:e4:f1:f5:bd:d4:6d:a9:ea:3b:
91:7b:ee:c0:69:90:01:54:33:28:67:6e:25:e5:4a:85:62:da:
61:0d:94:fc:1b:a4:dc:b1:ff:eb:a9:2f:44:3c:97:d7:4e:56:
7b:6b:a4:a0:a9:88:8f:54:6a:23:f2:f1:2a:30:01:81:bb:34:
b2:82:19:6d:1a:7b:27:16:08:ac:26:96:93:93:0b:75:2f:65:
7b:ac:8f:80:e0:40:4d:4c:a6:5f:7d:3f:51:36:ca:36:78:43:
74:72:21:4b:a8:75:f6:63:26:bd:91:bb:4c:bf:54:b7:94:13:
d7:62:1d:d1:12:20:8a:d5:f5:08:4d:96:85:68:43:e4:2d:25:
3e:04:c8:40:e8:65:5e:2b:d5:92:f9:5d:f5:8b:01:86:2c:86:
ae:b8:27:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR3GOBz7TK4dDpOLCCwm+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YmQ0YTM4MmRhZTJiZTVjYjk4YjM1ZTVhMDQ4ZDAzYjRj
Y2JlMmIwHhcNMjYwMzAyMDIwMTI4WhcNMjYwMzAzMDIwMTI4WjAzMTEwLwYDVQQD
EyhhYTZlZmJjOGM2OTcyOGI5MzM2MTRjYTQzYjUxYzNkN2FlMTk3MTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OvbS+Pv11LPuzTN1zm8h6PdPBMe
Okd/IW6vQrItEGz7+qyGDkqAZpWDM2adX7IC/nz5v5JP5kKyem5oM6VMvc24lMOg
gdV0KdcVAJzb9jr0jLW/jks7RnkHGLoHs/thYQIyxkm4Hg52EpXY7EtCU1r8MCcb
0nZELbya6Qj+mISdAY0Zfy3y/t8NhLqb829J2Q/ohf1ck/Vl7qyIHT4ZiZ7Ul1Nn
YN9K5B4I+8dd/VAvgIsVmrXO32u8U8gjjYLqGs5pYeecPSr2BwwIXAw+Nk6Ges1u
vgyozK3GYjpF2ub4et0xILfJMD5RffG6rQi0fbvjeZcxQ3eO+oh3I/YcUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpu+8jGlyi5M2FMpDtRw9euGXGHMB8GA1UdIwQY
MBaAFDa9Sjgtrivly5izXloEjQO0zL4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lNzRmNWYtNzVjNS00YTc1LTk4Yjkt
OWZlY2JkMjVkNDM0LzEvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9lNzRmNWYtNzVjNS00YTc1LTk4YjktOWZlY2JkMjVkNDM0
LzEvTnIxS09DMnVLLVhMbUxOZVdnU05BN1RNdmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUF7xcz+2
1YgmVXf68rAoKbXB/qkFqcmEl4/DMTgm6qTCFYM9TlWy85Q9SA0EF6HyMpT4zFT0
rbGkQUrEInHYiplflZBtch87mgwiYuLb028Ym8l/4z/cHmsp8a8cmLVomyYC5PH1
vdRtqeo7kXvuwGmQAVQzKGduJeVKhWLaYQ2U/Buk3LH/66kvRDyX105We2ukoKmI
j1RqI/LxKjABgbs0soIZbRp7JxYIrCaWk5MLdS9le6yPgOBATUymX30/UTbKNnhD
dHIhS6h19mMmvZG7TL9Ut5QT12Id0RIgitX1CE2WhWhD5C0lPgTIQOhlXivVkvld
9YsBhiyGrrgnmg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:00 2026 by rpki-client