Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: DytoFtH26VJBKOrNMO2u73SQ2GaaHVIaUqG4jbmRwMg=
Subject key identifier: 9A:2B:93:86:EE:66:95:21:D9:32:CE:5B:78:D1:05:06:47:F3:F3:9A
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 019CABA26AEDF7465A6C72AA06EDC199813D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 23:01:14 +0000
Manifest this update: Sun 01 Mar 2026 23:01:14 +0000
Manifest next update: Mon 02 Mar 2026 23:01:14 +0000
Files and hashes: 1: LQ7ZfmmMPaH0iabZ6SpEuDwVwhY.roa (hash: 63IcTifvN7GIBHWbBH7b1IB+sm33d6kXpSsxO8UgQ20=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: gQiwSV3gjN0xvYlwo+UbVg2j/QGjsO63wsxdz6A4Ar8=)
3: nAYbbcKPFybTolioZUuHNTDXSns.roa (hash: G2BPAGwcm8vlEODkeUJvlJFoh73yV7+X0s3ozIpcRZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:6a:ed:f7:46:5a:6c:72:aa:06:ed:c1:99:81:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Mar 1 23:01:14 2026 GMT
Not After : Mar 2 23:01:14 2026 GMT
Subject: CN=9a2b9386ee669521d932ce5b78d1050647f3f39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:92:4e:d1:15:64:f9:a6:f9:5f:e6:aa:5c:
58:de:20:0b:6a:19:72:d8:da:d5:53:64:a0:cf:04:
be:74:cb:ba:68:6a:3e:e4:95:61:bb:33:29:7e:75:
f6:e9:fd:a9:60:29:3b:f0:f8:f6:b0:1b:75:03:36:
4c:66:4e:31:ac:5e:e9:4d:98:25:fd:77:88:7c:34:
17:a3:c3:8c:37:2f:ed:03:ad:21:0c:53:ea:b5:71:
d0:fb:64:5a:ca:51:05:de:1b:d8:5d:3e:f5:a3:66:
aa:71:93:d4:71:a3:4c:23:ec:af:8b:67:3d:58:46:
0a:4d:09:0f:19:ea:64:17:2b:3e:cc:49:5d:fb:30:
78:de:01:21:ac:58:56:9b:95:37:a0:49:81:e1:58:
fc:be:dd:ec:0d:bb:b2:e9:cc:53:a8:0a:69:8b:1f:
eb:65:b2:cb:8a:09:73:88:bb:f3:9c:26:d0:23:3f:
04:cb:9a:8f:8d:38:6c:7b:9d:85:fc:84:64:9e:a7:
9b:9a:ff:71:96:4a:de:99:4b:a0:d3:b3:63:e4:b9:
a8:8f:d5:e9:4c:32:97:9b:a5:14:0d:49:7d:ba:b9:
d1:17:fa:b6:52:fd:7b:85:00:b8:8b:02:b5:95:18:
04:66:49:a2:e4:1b:bb:2f:7e:cb:d6:a2:56:23:7e:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2B:93:86:EE:66:95:21:D9:32:CE:5B:78:D1:05:06:47:F3:F3:9A
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7e:12:6c:36:15:46:ed:84:e8:28:17:b1:28:3a:4c:da:22:
31:ab:d5:f4:0f:29:47:14:d5:45:ca:42:54:83:0c:46:cd:45:
8f:f3:fa:f4:2a:19:bf:63:eb:67:5d:79:6a:0a:c3:89:58:cf:
6b:ca:b5:db:25:7d:24:39:8e:33:12:27:df:ef:12:a0:47:0c:
64:04:9e:bb:d6:cf:42:b9:5d:cf:4f:63:ad:bd:53:22:84:24:
c9:31:1b:52:82:3e:c6:6e:3d:cd:0d:b4:7b:15:8a:17:d8:80:
22:8a:2d:0c:c5:f4:0b:1e:92:98:bf:b3:97:85:1f:69:0d:e6:
7e:34:24:4a:a0:91:95:07:12:62:af:12:b7:b0:e3:38:34:16:
d6:d0:9d:75:15:09:1d:32:86:25:ca:7f:3f:02:38:c2:b9:66:
a4:eb:d3:fa:ad:01:ae:c3:97:3c:d7:b0:a6:b3:ff:3b:10:6d:
50:91:71:3c:7d:88:3d:ec:7d:47:69:f7:53:57:72:40:19:61:
03:b3:50:34:17:ca:6d:38:7a:cc:3a:b2:fa:c3:42:68:b9:39:
e9:0b:ce:67:4c:81:e9:f4:23:ca:01:6e:91:13:68:39:3d:ce:
8d:01:60:1b:2b:da:35:cd:bc:45:2b:6e:a2:88:b8:d3:e5:93:
f8:e2:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:58 2026 by rpki-client