Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: JtiB/jMILnhMbD1diAxmm2ut8YXU8/alR8aS++vxMF0=
Subject key identifier: CE:9A:FC:0C:74:86:0E:37:FE:42:FB:3A:64:4E:39:9B:DB:B2:50:25
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 019FAC3F16FD864C31642FDA07056FD494DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 05:00:43 +0000
Manifest this update: Wed 29 Jul 2026 05:00:43 +0000
Manifest next update: Thu 30 Jul 2026 05:00:43 +0000
Files and hashes: 1: LQ7ZfmmMPaH0iabZ6SpEuDwVwhY.roa (hash: 63IcTifvN7GIBHWbBH7b1IB+sm33d6kXpSsxO8UgQ20=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: 5R+99vsJPlSoDsb73HShM/INmCmFa+8gS0O3YKTl6lw=)
3: nAYbbcKPFybTolioZUuHNTDXSns.roa (hash: G2BPAGwcm8vlEODkeUJvlJFoh73yV7+X0s3ozIpcRZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:16:fd:86:4c:31:64:2f:da:07:05:6f:d4:94:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Jul 29 05:00:43 2026 GMT
Not After : Jul 30 05:00:43 2026 GMT
Subject: CN=ce9afc0c74860e37fe42fb3a644e399bdbb25025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:46:39:ff:36:5e:8b:db:ae:97:ef:20:40:
a5:6b:06:00:03:78:69:b9:8b:46:05:1b:a3:74:bf:
e2:0f:1d:7f:b4:90:d5:1d:2d:b2:48:4b:96:34:8a:
ac:e0:d0:a5:50:8a:6d:d3:49:47:78:11:9a:91:1b:
07:a3:25:cc:80:97:c5:96:6a:2f:c2:77:96:80:02:
6a:67:50:15:2e:01:85:9f:0e:81:dc:9c:b3:d4:2f:
cd:99:51:0c:84:4d:55:6f:ce:f4:bd:90:77:02:5f:
bf:89:46:06:09:30:5d:16:4b:fe:33:1e:4b:89:65:
e7:90:e0:71:be:d8:f1:ea:90:60:f3:b2:19:15:d6:
1d:0a:ae:9a:43:95:ae:0e:a5:60:92:4b:f9:ba:c3:
4b:02:ed:16:b4:51:13:1a:76:f0:d2:18:0f:6e:73:
f0:09:fc:de:f8:59:1f:82:bd:c6:21:66:e2:ca:e3:
b1:f9:0f:f7:5d:04:05:2e:93:ae:a8:0e:12:2c:9f:
d0:c1:8c:fb:5c:b9:6f:2b:33:10:cd:43:df:c0:fb:
3d:30:9c:cd:75:2d:65:3b:dd:56:6b:f2:a1:39:d9:
97:64:91:83:c0:64:d3:a8:61:44:59:53:b0:5e:c5:
00:08:53:db:55:2e:57:b2:59:c1:55:0e:80:a4:f8:
74:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9A:FC:0C:74:86:0E:37:FE:42:FB:3A:64:4E:39:9B:DB:B2:50:25
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6d:23:16:ca:03:2e:37:72:28:40:64:e9:ad:83:b8:23:09:
60:df:9b:c4:fe:00:75:b0:3c:9d:c4:eb:ff:e2:e3:83:64:19:
90:b8:df:16:aa:7b:4a:b3:74:11:21:55:d2:d2:97:05:8b:fb:
e8:ca:91:1c:0e:5a:85:c8:7d:c6:c6:24:5b:61:01:e8:88:a9:
3c:49:72:c4:6f:c6:16:90:eb:c6:54:c8:69:a7:51:90:62:57:
b3:c3:cb:67:a8:24:8a:cc:a4:94:f9:66:ef:99:d7:4c:83:2a:
c1:33:1b:22:fe:ec:81:c6:84:de:b3:ea:01:13:14:16:56:9d:
df:c4:ff:c6:6b:d3:17:22:84:58:1d:c1:f0:bd:e2:25:03:97:
88:13:fa:74:f6:86:58:52:1b:76:2a:51:82:2f:07:05:cb:b5:
37:2e:dc:62:9b:8c:f6:15:ef:f7:69:b7:d3:85:ff:62:35:3b:
f7:21:eb:8b:5d:91:99:67:6b:7c:c3:72:80:e1:51:5b:db:0f:
ee:8e:31:bd:20:b6:48:8e:da:19:13:14:4e:b8:39:94:b8:5b:
a4:b8:3b:25:a3:99:7b:aa:b4:59:81:38:df:ce:2e:a4:14:6d:
fb:b1:84:4c:d9:ba:c2:81:91:20:cd:a0:ba:73:10:53:13:34:
8c:3d:7e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:16:57 2026 by rpki-client