Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
File: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft (raw, json)
Hash identifier: zjHH4IPWDqX5tl0Rdg3tByEXdeqOIjVyfCq+kQSCHK0=
Subject key identifier: 4C:B5:FB:E2:A8:E9:CA:08:D5:30:C6:AB:0D:66:4E:39:7A:09:C8:04
Authority key identifier: 36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
Certificate issuer: /CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Certificate serial: 019D992B6833CADE7949712FA15F0DB0E4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 02:00:51 +0000
Manifest this update: Fri 17 Apr 2026 02:00:51 +0000
Manifest next update: Sat 18 Apr 2026 02:00:51 +0000
Files and hashes: 1: LQ7ZfmmMPaH0iabZ6SpEuDwVwhY.roa (hash: 63IcTifvN7GIBHWbBH7b1IB+sm33d6kXpSsxO8UgQ20=)
2: NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl (hash: z+k1Dk/LTwDFLZ0/fSeCfL2MYmZRz5i0N+dyA90ye8I=)
3: nAYbbcKPFybTolioZUuHNTDXSns.roa (hash: G2BPAGwcm8vlEODkeUJvlJFoh73yV7+X0s3ozIpcRZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:68:33:ca:de:79:49:71:2f:a1:5f:0d:b0:e4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36a4668ff83814af90a78b4fc8d262325058cbc6
Validity
Not Before: Apr 17 02:00:51 2026 GMT
Not After : Apr 18 02:00:51 2026 GMT
Subject: CN=4cb5fbe2a8e9ca08d530c6ab0d664e397a09c804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:6c:80:57:12:55:b0:e7:0d:bc:be:8c:eb:
70:54:8f:35:c2:ad:fe:05:0c:b9:09:07:fb:95:99:
3f:8d:3e:49:5e:1d:52:eb:97:b5:77:7e:fe:f6:a1:
bc:e2:d3:67:03:22:dc:24:bf:f8:cb:41:9d:91:cd:
de:41:a2:1b:f8:f0:95:8a:06:40:72:0f:54:92:ee:
dc:42:c4:92:b3:bd:ff:47:e6:80:f5:66:23:0f:39:
aa:f0:fa:76:48:4a:ca:7d:40:07:75:37:91:56:bb:
f4:b5:a6:4f:b7:79:2e:33:6d:c9:f6:e7:4f:e8:d7:
b6:48:95:e4:13:2a:bb:d2:e8:b6:d3:15:cf:8b:e3:
fb:d8:3e:50:18:97:43:85:be:3a:f4:f3:b7:ab:4a:
0d:dc:b4:af:d5:0a:92:90:59:20:bc:fc:07:58:43:
64:f6:e1:af:a3:88:db:e4:47:a5:90:f1:3e:07:47:
45:49:aa:55:3d:8b:19:d5:e2:8c:07:6e:e1:13:52:
4a:b7:e9:f8:25:4b:4b:1f:ce:e0:25:9a:bc:36:47:
2d:d7:82:bf:1d:09:7d:d6:c7:0f:a7:4f:3f:74:91:
a3:40:d3:f9:ac:18:34:32:22:cd:91:43:33:e3:c2:
59:8d:ae:c2:df:26:30:69:c3:d5:08:aa:c6:dc:6f:
ba:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B5:FB:E2:A8:E9:CA:08:D5:30:C6:AB:0D:66:4E:39:7A:09:C8:04
X509v3 Authority Key Identifier:
keyid:36:A4:66:8F:F8:38:14:AF:90:A7:8B:4F:C8:D2:62:32:50:58:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/031fcb-b74e-4e75-a7b9-90e65412252a/1/NqRmj_g4FK-Qp4tPyNJiMlBYy8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ba:8c:1e:52:b7:91:d1:76:f9:4b:84:ec:0a:50:0e:b8:12:
a4:78:2c:6f:a6:1c:ef:16:74:22:b1:6a:fc:75:68:f2:74:9e:
e9:d9:60:a2:32:2c:2e:fa:5f:f2:e1:4e:29:2a:c5:a2:f7:d7:
d6:5f:20:97:0d:48:bc:e1:41:95:89:ad:48:d2:d6:11:28:d4:
75:60:86:94:25:5a:a8:22:09:b3:17:10:3f:02:37:18:73:4a:
4f:73:23:2d:46:56:9b:16:9e:84:2e:fb:88:1f:90:3c:64:19:
bb:58:0d:3c:6a:73:bf:1e:ed:29:51:72:56:77:86:68:8b:a6:
ac:eb:09:3d:9c:27:be:cd:ad:68:87:41:bd:35:99:48:e4:9d:
c0:8b:64:db:f1:7a:c6:22:5d:6d:19:b6:eb:2e:62:95:9b:e6:
cf:38:c8:34:44:fe:83:85:30:2e:d7:0d:84:23:de:2b:5c:cd:
c9:6b:97:97:a5:00:28:4c:8f:52:56:b0:f6:c6:67:9b:90:0e:
34:dc:11:8f:82:4b:7e:c5:07:cc:37:4f:11:c8:52:1d:45:3f:
2b:42:61:ae:4a:a3:4d:97:f3:2e:e3:53:d7:76:42:80:a9:ce:
de:30:d4:97:3f:e9:98:20:7c:37:e9:e3:7a:a6:db:3f:c9:37:
7c:84:eb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:47 2026 by rpki-client