Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: oS65VNuJ5rg5luZwTqYiHGT6q5kfP9aj5vBv7uuhD1E=
Subject key identifier: 65:C2:B5:EC:A8:AA:18:C1:AE:65:1A:ED:37:91:D9:CF:99:E9:7D:0E
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 01A0C444F812D6CDE35689C8502841A4EB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 14:00:49 +0000
Manifest this update: Mon 21 Sep 2026 14:00:49 +0000
Manifest next update: Tue 22 Sep 2026 14:00:49 +0000
Files and hashes: 1: LQ7ZfmmMPaH0iabZ6SpEuDwVwhY.roa (hash: 63IcTifvN7GIBHWbBH7b1IB+sm33d6kXpSsxO8UgQ20=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: uJaWTX0ZDcfcP/iQaKa6TJLGHYpk9KPELHNSULSLhgw=)
3: nAYbbcKPFybTolioZUuHNTDXSns.roa (hash: G2BPAGwcm8vlEODkeUJvlJFoh73yV7+X0s3ozIpcRZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:f8:12:d6:cd:e3:56:89:c8:50:28:41:a4:eb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Sep 21 14:00:49 2026 GMT
Not After : Sep 22 14:00:49 2026 GMT
Subject: CN=65c2b5eca8aa18c1ae651aed3791d9cf99e97d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:93:de:06:eb:93:ed:1c:53:59:43:d8:05:
24:d0:6f:36:87:c5:e0:29:c4:1c:3f:27:bd:86:24:
f5:56:37:78:31:c6:26:fa:93:41:b2:f7:8f:59:40:
69:45:38:06:d5:25:95:f0:e8:8a:09:fb:32:aa:db:
73:e4:bf:47:85:25:17:89:73:00:35:65:d6:62:6d:
52:6a:89:14:5d:1f:14:fd:83:7e:ee:76:98:8b:d3:
66:3a:87:d0:50:03:82:62:85:a7:41:05:28:29:c5:
7e:bf:e3:46:2f:1c:56:e4:55:48:47:b8:08:15:6b:
11:57:80:42:e4:45:b8:a6:cf:ab:98:4e:d1:6d:7f:
f8:22:d5:d1:73:f1:43:2c:3b:6b:c2:cc:dc:57:2c:
82:33:6e:a4:56:9f:60:ab:48:76:e2:3d:4f:05:92:
6e:8c:97:a1:0c:ed:32:09:a9:5e:f4:ea:a6:0e:a6:
24:c7:bb:21:55:f7:70:4e:aa:e5:30:42:16:d6:a4:
92:be:c2:93:07:88:0f:52:88:5f:09:44:3c:aa:d4:
f3:c5:1b:58:2c:af:46:e6:d5:db:17:0c:0b:30:5c:
7d:5e:16:21:72:2b:96:95:65:28:cd:1c:13:8f:52:
b1:15:5b:fd:0f:1c:31:a6:83:49:67:35:d7:e7:7f:
ee:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C2:B5:EC:A8:AA:18:C1:AE:65:1A:ED:37:91:D9:CF:99:E9:7D:0E
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9d:57:0b:b2:3c:6a:51:8c:df:4c:29:ec:c5:b3:ea:07:ff:
00:11:31:ed:78:04:e6:a2:1c:76:9d:36:81:a1:d0:28:4f:76:
d2:93:e6:29:da:8a:d9:47:3c:72:9b:d0:77:13:d6:5e:67:c9:
6a:27:7c:6a:87:27:ad:8d:b6:72:6b:65:49:80:05:5e:55:f9:
f7:dc:2b:7c:d5:6f:ca:80:1f:30:dd:7b:a3:4b:6e:63:34:f5:
76:33:a4:f4:17:12:b5:08:9f:0e:2b:93:2e:72:1b:a7:be:12:
4e:e2:e1:8b:d9:ae:10:3e:bf:6e:f6:ec:cc:dd:92:24:85:8e:
07:f4:57:66:d2:1a:6a:30:c6:3f:b7:6f:d5:ef:87:8c:8a:e9:
ae:bb:da:e1:fe:3a:d7:e4:68:73:55:10:c8:43:f6:ad:ad:c5:
d4:23:96:5f:c8:da:66:f7:2c:6b:50:58:cb:a1:f3:11:cd:7c:
2b:20:61:ec:ac:48:a5:7f:c8:27:08:15:21:3d:c6:e2:01:bf:
47:e0:a5:7a:30:c0:e1:f0:55:51:0b:ef:37:24:18:88:29:15:
2b:b8:f7:c0:9b:d4:93:f6:13:23:19:99:f6:74:f3:4f:a7:9c:
b3:ff:e2:d1:17:8b:b9:4f:97:9f:53:89:12:c0:c7:4d:ba:2a:
0e:8a:e4:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDERPgS1s3jVonIUChBpOuFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YTQ2NjhmZjgzODE0YWY5MGE3OGI0ZmM4ZDI2MjMyNTA1
OGNiYzYwHhcNMjYwOTIxMTQwMDQ5WhcNMjYwOTIyMTQwMDQ5WjAzMTEwLwYDVQQD
Eyg2NWMyYjVlY2E4YWExOGMxYWU2NTFhZWQzNzkxZDljZjk5ZTk3ZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiaT3gbrk+0cU1lD2AUk0G82h8Xg
KcQcPye9hiT1Vjd4McYm+pNBsvePWUBpRTgG1SWV8OiKCfsyqttz5L9HhSUXiXMA
NWXWYm1SaokUXR8U/YN+7naYi9NmOofQUAOCYoWnQQUoKcV+v+NGLxxW5FVIR7gI
FWsRV4BC5EW4ps+rmE7RbX/4ItXRc/FDLDtrwszcVyyCM26kVp9gq0h24j1PBZJu
jJehDO0yCale9OqmDqYkx7shVfdwTqrlMEIW1qSSvsKTB4gPUohfCUQ8qtTzxRtY
LK9G5tXbFwwLMFx9XhYhciuWlWUozRwTj1KxFVv9DxwxpoNJZzXX53/u2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXCteyoqhjBrmUa7TeR2c+Z6X0OMB8GA1UdIwQY
MBaAFDakZo/4OBSvkKeLT8jSYjJQWMvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3Yjkt
OTBlNjU0MTIyNTJhLzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3YjktOTBlNjU0MTIyNTJh
LzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnp1XC7I8
alGM30wp7MWz6gf/ABEx7XgE5qIcdp02gaHQKE920pPmKdqK2Uc8cpvQdxPWXmfJ
aid8aocnrY22cmtlSYAFXlX599wrfNVvyoAfMN17o0tuYzT1djOk9BcStQifDiuT
LnIbp74STuLhi9muED6/bvbszN2SJIWOB/RXZtIaajDGP7dv1e+HjIrprrva4f46
1+Roc1UQyEP2ra3F1COWX8jaZvcsa1BYy6HzEc18KyBh7KxIpX/IJwgVIT3G4gG/
R+ClejDA4fBVUQvvNyQYiCkVK7j3wJvUk/YTIxmZ9nTzT6ecs//i0ReLuU+Xn1OJ
EsDHTboqDork+w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:08:12 2026 by rpki-client