Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: FLTfSRYH8R1gG3mSmxdOXXTOG1C1n1g35flfPanaDyY=
Subject key identifier: A9:E8:DA:FD:15:51:42:F9:58:D2:B4:9E:33:D2:E2:D3:C5:4E:0A:AB
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 019EBEB5BE980EB92494D071373DF86800EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 02:00:42 +0000
Manifest this update: Sat 13 Jun 2026 02:00:42 +0000
Manifest next update: Sun 14 Jun 2026 02:00:42 +0000
Files and hashes: 1: LQ7ZfmmMPaH0iabZ6SpEuDwVwhY.roa (hash: 63IcTifvN7GIBHWbBH7b1IB+sm33d6kXpSsxO8UgQ20=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: q42S2JsyVRNsbGnle8nI1bTR04ivKPq7oCxQw803IFI=)
3: nAYbbcKPFybTolioZUuHNTDXSns.roa (hash: G2BPAGwcm8vlEODkeUJvlJFoh73yV7+X0s3ozIpcRZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:be:98:0e:b9:24:94:d0:71:37:3d:f8:68:00:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Jun 13 02:00:42 2026 GMT
Not After : Jun 14 02:00:42 2026 GMT
Subject: CN=a9e8dafd155142f958d2b49e33d2e2d3c54e0aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:74:5f:08:53:37:3c:2c:54:f2:35:21:03:
ca:ce:d2:bd:f0:83:38:f4:2e:e7:f0:b6:b6:d2:84:
42:1b:b8:23:6c:78:48:7e:5c:ed:8c:31:20:e4:1d:
13:ed:0a:3a:51:45:d6:dc:94:83:11:42:53:c9:20:
a0:c1:f9:31:7c:8c:31:bd:27:7e:d9:e5:16:43:bb:
f1:41:d7:70:f1:96:02:c2:45:8f:90:b0:d6:07:43:
ad:65:41:99:65:cd:8b:bd:08:9c:79:b7:72:9a:9c:
f9:59:d6:27:b1:9d:18:15:2e:37:e5:ca:2b:89:ea:
b3:a1:85:85:d2:58:3e:c4:59:fc:68:64:b2:7d:0c:
e0:8e:9b:5d:70:35:0e:79:d4:cf:99:c1:bf:a3:65:
a5:62:ea:2f:af:13:d6:d4:ef:9f:bd:84:44:c2:4e:
e1:b5:17:6a:55:d7:44:f7:58:70:3d:ab:80:59:27:
5c:a5:74:6a:20:67:55:6e:55:61:1c:35:ef:72:19:
22:f2:50:90:55:81:6f:c0:d7:5d:5f:b5:37:66:05:
6c:e9:a3:25:1f:c6:6d:43:fd:d9:e9:73:fd:8c:24:
b3:72:85:91:a4:b2:22:6c:d1:91:7b:9a:68:7c:7f:
f5:06:20:8e:83:69:49:e7:d6:7f:81:d0:f8:87:7e:
04:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E8:DA:FD:15:51:42:F9:58:D2:B4:9E:33:D2:E2:D3:C5:4E:0A:AB
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:5d:96:fa:cf:5c:8f:5e:01:20:32:3e:47:3b:a8:97:f5:fa:
09:bf:06:2d:aa:36:a7:65:a9:61:17:5d:84:c2:a4:db:a5:33:
be:c9:e2:b9:10:39:23:1c:5a:9c:7d:93:ec:c2:7f:5b:21:3d:
85:b9:5c:01:29:11:79:76:fc:d7:ef:b5:9e:06:84:ed:60:b4:
58:49:85:a8:41:54:d8:a1:c3:65:57:90:64:8c:1d:b0:d3:17:
10:7d:c1:51:6d:f9:d1:84:79:de:44:6e:0a:7b:5a:fc:b3:94:
15:20:0d:79:4e:35:09:0f:64:45:d8:80:aa:45:88:80:43:7a:
66:0f:50:a0:26:29:6e:2e:be:b7:32:5f:73:da:3c:2b:21:7c:
e2:e6:4e:1d:36:4e:02:0b:58:98:72:5d:fe:3a:61:1e:8d:68:
3f:d9:33:8b:b0:91:72:38:c6:1a:a9:28:ec:05:89:4e:eb:ac:
2c:2f:d3:ed:06:49:2d:6a:ac:4c:13:b9:08:14:9e:fa:95:cb:
ed:60:e7:cf:d4:81:08:e8:ca:df:2b:43:8b:af:a5:07:0f:60:
c9:ff:79:6c:0f:77:e7:02:c8:23:a8:c4:54:e5:de:20:15:e4:
b3:cf:c7:cd:43:a6:af:a1:99:30:12:11:29:49:bf:9e:47:13:
30:63:c8:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+tb6YDrkklNBxNz34aADuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YTQ2NjhmZjgzODE0YWY5MGE3OGI0ZmM4ZDI2MjMyNTA1
OGNiYzYwHhcNMjYwNjEzMDIwMDQyWhcNMjYwNjE0MDIwMDQyWjAzMTEwLwYDVQQD
EyhhOWU4ZGFmZDE1NTE0MmY5NThkMmI0OWUzM2QyZTJkM2M1NGUwYWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0h0XwhTNzwsVPI1IQPKztK98IM4
9C7n8La20oRCG7gjbHhIflztjDEg5B0T7Qo6UUXW3JSDEUJTySCgwfkxfIwxvSd+
2eUWQ7vxQddw8ZYCwkWPkLDWB0OtZUGZZc2LvQicebdympz5WdYnsZ0YFS435cor
ieqzoYWF0lg+xFn8aGSyfQzgjptdcDUOedTPmcG/o2WlYuovrxPW1O+fvYREwk7h
tRdqVddE91hwPauAWSdcpXRqIGdVblVhHDXvchki8lCQVYFvwNddX7U3ZgVs6aMl
H8ZtQ/3Z6XP9jCSzcoWRpLIibNGRe5pofH/1BiCOg2lJ59Z/gdD4h34ExQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKno2v0VUUL5WNK0njPS4tPFTgqrMB8GA1UdIwQY
MBaAFDakZo/4OBSvkKeLT8jSYjJQWMvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3Yjkt
OTBlNjU0MTIyNTJhLzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8wMzFmY2ItYjc0ZS00ZTc1LWE3YjktOTBlNjU0MTIyNTJh
LzEvTnFSbWpfZzRGSy1RcDR0UHlOSmlNbEJZeThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOF2W+s9c
j14BIDI+Rzuol/X6Cb8GLao2p2WpYRddhMKk26UzvsniuRA5IxxanH2T7MJ/WyE9
hblcASkReXb81++1ngaE7WC0WEmFqEFU2KHDZVeQZIwdsNMXEH3BUW350YR53kRu
Cnta/LOUFSANeU41CQ9kRdiAqkWIgEN6Zg9QoCYpbi6+tzJfc9o8KyF84uZOHTZO
AgtYmHJd/jphHo1oP9kzi7CRcjjGGqko7AWJTuusLC/T7QZJLWqsTBO5CBSe+pXL
7WDnz9SBCOjK3ytDi6+lBw9gyf95bA935wLII6jEVOXeIBXks8/HzUOmr6GZMBIR
KUm/nkcTMGPI6Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:22:35 2026 by rpki-client