Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: TLPhz1colvGhuEpEqMDbp6N9jZtjB8Qu+fuVyjB2kj0=
Subject key identifier: 95:7A:21:D4:D0:C3:48:6B:AA:CA:38:FE:2F:05:46:9C:FA:E4:FA:7C
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 019EC0A405F459EAA75FE146C302F64E3634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 11:00:35 +0000
Manifest this update: Sat 13 Jun 2026 11:00:35 +0000
Manifest next update: Sun 14 Jun 2026 11:00:35 +0000
Files and hashes: 1: JEy4ZJ62QYRRLVpb1W-o-3RjroA.roa (hash: UXVz9bhe0di3EXu2bm6AdG0DjlkQpOevHbzRqlRvjno=)
2: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: LINYmR8YzKpT7faZTMlcPmGFCo3Cm7CUJpPC23jIz6o=)
3: UBW5R1HwaG9495WZauzqNIjn4nA.roa (hash: duZ19HoAidUjyBvwzeBCc3j9fnU5CniKN9o9GUrYQpw=)
4: j2Vt-vhnn-HkYm2cJoF8eB-3moE.roa (hash: mB8vuWp3NyFqQhgRZxGSvc7q78uxW5vC+14W4bnmoE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:05:f4:59:ea:a7:5f:e1:46:c3:02:f6:4e:36:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Jun 13 11:00:35 2026 GMT
Not After : Jun 14 11:00:35 2026 GMT
Subject: CN=957a21d4d0c3486baaca38fe2f05469cfae4fa7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:a9:be:88:de:63:19:25:2c:e4:87:58:1d:
20:0b:af:45:87:48:54:b5:84:f5:34:2c:8c:87:fc:
c8:99:90:13:39:e0:cb:a4:07:56:f5:b1:c0:65:17:
03:ed:d4:56:e0:af:f8:a0:35:a6:86:b2:b4:cb:a1:
4a:5b:21:ba:88:59:63:c5:10:85:79:ec:54:14:20:
f1:67:9a:41:00:dc:c8:ad:2b:38:50:8d:cb:e6:db:
5f:97:61:e4:15:b0:e4:74:15:4e:d6:0d:2d:d9:81:
8f:a1:d5:38:d3:fb:d2:0c:7b:4c:0b:48:8d:77:d1:
ac:91:98:49:ef:41:57:b6:1d:62:8e:ad:42:a0:2c:
18:01:76:d0:50:17:f2:3d:d3:64:69:58:66:27:83:
9a:ed:79:90:56:8f:86:71:8e:95:47:82:73:55:f3:
8a:dd:73:46:0d:75:a0:ab:f7:e4:71:00:b2:03:60:
bd:4d:42:0f:04:4c:31:f2:2d:35:8f:2e:6d:27:1a:
5f:63:bb:da:1e:e7:90:36:06:9b:09:62:a0:53:ab:
d7:15:74:96:51:16:d7:c4:4a:2d:cc:1b:17:7d:95:
76:5c:cb:37:b3:6e:3b:01:df:40:93:4e:54:f3:e1:
b4:04:f0:13:48:c2:8c:c7:d3:e8:b8:50:e4:f6:21:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7A:21:D4:D0:C3:48:6B:AA:CA:38:FE:2F:05:46:9C:FA:E4:FA:7C
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ef:81:7a:78:a4:57:b8:e6:58:1b:e1:b1:c4:12:56:9e:92:
ec:d9:58:8e:dd:73:55:d5:3d:83:07:53:da:e9:60:8a:0c:b0:
39:5f:b9:a7:66:cc:be:2f:9b:ba:9d:9c:ab:cd:bc:8f:19:46:
ed:e1:be:68:48:de:65:2d:9c:7e:6a:3b:b1:49:61:e8:09:39:
09:67:3c:3c:ce:19:5f:fb:88:b6:d6:ee:1e:f2:57:1b:38:77:
f8:13:6d:59:d9:a2:54:05:d2:8a:97:10:72:a5:d2:97:10:04:
a9:1b:bf:fd:df:9f:67:42:a0:a2:38:6d:11:5f:73:d5:64:4f:
7a:31:cc:54:77:6e:8d:1b:15:d2:62:46:d8:14:87:df:bf:d8:
c9:1c:69:9f:f3:35:12:93:eb:44:1d:03:d8:a8:00:41:fa:cf:
03:5e:b9:eb:8c:e7:47:8c:f9:e4:32:ae:97:8b:29:8e:a1:a9:
02:e4:82:b5:a8:51:e7:b5:1d:c2:d1:17:bf:fb:59:b4:de:9f:
03:1d:15:3d:9e:9a:76:52:f0:1f:ed:d3:46:19:b3:97:14:2e:
f2:06:09:22:6c:03:f3:de:98:57:f6:ef:78:10:bd:cf:85:a9:
85:a2:a8:f8:e6:cd:3e:b6:54:dd:d8:20:4b:e0:f5:e1:85:3a:
41:b1:31:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ApAX0WeqnX+FGwwL2TjY0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZWFhMDBlYTc3NzA5OGIxYmYwMzY3NTZkNjQwZTlkMzFk
NjNiM2IwHhcNMjYwNjEzMTEwMDM1WhcNMjYwNjE0MTEwMDM1WjAzMTEwLwYDVQQD
Eyg5NTdhMjFkNGQwYzM0ODZiYWFjYTM4ZmUyZjA1NDY5Y2ZhZTRmYTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV6pvojeYxklLOSHWB0gC69Fh0hU
tYT1NCyMh/zImZATOeDLpAdW9bHAZRcD7dRW4K/4oDWmhrK0y6FKWyG6iFljxRCF
eexUFCDxZ5pBANzIrSs4UI3L5ttfl2HkFbDkdBVO1g0t2YGPodU40/vSDHtMC0iN
d9GskZhJ70FXth1ijq1CoCwYAXbQUBfyPdNkaVhmJ4Oa7XmQVo+GcY6VR4JzVfOK
3XNGDXWgq/fkcQCyA2C9TUIPBEwx8i01jy5tJxpfY7vaHueQNgabCWKgU6vXFXSW
URbXxEotzBsXfZV2XMs3s247Ad9Ak05U8+G0BPATSMKMx9PouFDk9iHX8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJV6IdTQw0hrqso4/i8FRpz65Pp8MB8GA1UdIwQY
MBaAFDbqoA6ndwmLG/A2dW1kDp0x1js7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80MTAyMzItYjFmZC00MTM3LTgzMmQt
YmRiMjEzMTNjM2VjLzEvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80MTAyMzItYjFmZC00MTM3LTgzMmQtYmRiMjEzMTNjM2Vj
LzEvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVe+Benik
V7jmWBvhscQSVp6S7NlYjt1zVdU9gwdT2ulgigywOV+5p2bMvi+bup2cq828jxlG
7eG+aEjeZS2cfmo7sUlh6Ak5CWc8PM4ZX/uIttbuHvJXGzh3+BNtWdmiVAXSipcQ
cqXSlxAEqRu//d+fZ0KgojhtEV9z1WRPejHMVHdujRsV0mJG2BSH37/YyRxpn/M1
EpPrRB0D2KgAQfrPA16564znR4z55DKul4spjqGpAuSCtahR57UdwtEXv/tZtN6f
Ax0VPZ6adlLwH+3TRhmzlxQu8gYJImwD896YV/bveBC9z4WphaKo+ObNPrZU3dgg
S+D14YU6QbExrA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:37:18 2026 by rpki-client