Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: A2Qr4GZyAYku2NPLsk7NIJRn0C0fO2s8RbezrYxr5I4=
Subject key identifier: ED:D5:F4:0D:5B:AE:AA:5C:37:4A:BF:1E:35:E6:C7:3E:BC:3A:D1:B0
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 019FAA507962FED8FD47B6BC0B486F82CDF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 20:00:28 +0000
Manifest this update: Tue 28 Jul 2026 20:00:28 +0000
Manifest next update: Wed 29 Jul 2026 20:00:28 +0000
Files and hashes: 1: JEy4ZJ62QYRRLVpb1W-o-3RjroA.roa (hash: UXVz9bhe0di3EXu2bm6AdG0DjlkQpOevHbzRqlRvjno=)
2: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: WcUW9CKEixHKipxtNSlVoOLe9d/1IbpMHmu4z09/rVA=)
3: UBW5R1HwaG9495WZauzqNIjn4nA.roa (hash: duZ19HoAidUjyBvwzeBCc3j9fnU5CniKN9o9GUrYQpw=)
4: j2Vt-vhnn-HkYm2cJoF8eB-3moE.roa (hash: mB8vuWp3NyFqQhgRZxGSvc7q78uxW5vC+14W4bnmoE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:79:62:fe:d8:fd:47:b6:bc:0b:48:6f:82:cd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Jul 28 20:00:28 2026 GMT
Not After : Jul 29 20:00:28 2026 GMT
Subject: CN=edd5f40d5baeaa5c374abf1e35e6c73ebc3ad1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:ee:30:8c:74:bb:a5:2e:da:0e:ce:7e:ae:
0c:98:73:46:cb:f4:7d:fe:3d:b4:09:ac:17:12:a3:
f4:5b:56:85:47:ab:2d:8a:91:69:0c:bc:7c:f2:1c:
85:ee:8f:15:c8:b7:0d:00:d9:37:71:8c:43:df:3a:
8b:43:6f:3c:04:55:5d:d7:85:91:60:d3:1a:e9:b3:
72:99:92:d3:9d:00:fa:9f:88:dc:83:16:71:56:e7:
e3:69:82:d9:41:c1:c3:db:08:19:e0:a9:d3:c6:7f:
2e:68:ff:e0:78:e4:db:b3:fc:1e:3a:43:bf:8a:54:
41:58:61:95:2a:98:e8:89:2f:16:84:23:08:75:a8:
39:3e:88:de:ac:4f:ec:76:b6:81:24:81:e8:02:c3:
1d:d1:a9:b9:0f:e5:90:83:14:60:ea:8e:3f:bb:87:
c7:dd:1b:0c:56:04:6d:af:eb:fe:da:5e:82:2a:8e:
6d:b8:5d:0a:3f:f6:b7:ce:3e:21:b7:9c:5d:0c:f6:
42:c4:ae:40:89:46:c4:26:10:73:d7:2c:a7:62:99:
c2:6c:ba:7f:de:5f:ca:5a:a1:c2:fc:6b:5e:87:bf:
b8:2c:5c:bf:c9:6b:7f:61:a9:69:32:62:08:e9:de:
b6:b8:e9:d5:fc:a5:4d:3e:5c:ba:6b:27:e7:65:e7:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D5:F4:0D:5B:AE:AA:5C:37:4A:BF:1E:35:E6:C7:3E:BC:3A:D1:B0
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c6:eb:83:9d:b0:e3:ac:97:43:74:5b:26:4d:c9:85:bb:4d:
bf:77:08:dc:9c:42:84:38:cb:7c:a8:f3:64:ae:b3:4c:cf:c1:
ed:f8:58:90:9f:37:51:cd:eb:65:c4:4e:11:a6:98:70:4c:1d:
a3:8f:7a:e6:e7:b0:56:88:19:b2:fd:6a:97:3b:38:98:da:07:
65:25:89:71:e1:34:66:9f:6a:f0:5c:51:40:bd:c2:f9:0e:2b:
7c:97:9f:76:4a:a3:5d:9e:f9:89:e1:2d:5d:2e:80:8e:74:52:
4e:c9:05:96:b9:72:4c:12:95:f5:a9:95:72:23:08:a3:c3:80:
51:03:b1:4a:bf:5e:b9:bb:ac:26:26:b6:e9:32:98:b5:93:6b:
e0:23:77:22:82:3f:f7:eb:a7:d7:25:3e:47:61:65:68:40:e5:
92:e6:eb:94:28:f9:d9:c6:b7:6f:2a:9b:32:3d:89:3e:10:d0:
e8:da:05:2f:39:a5:fa:79:49:9d:40:d1:49:0a:c4:98:2c:04:
c5:4d:af:c5:cc:5d:57:fc:37:77:d5:26:3c:28:dc:ea:46:ad:
48:7e:0f:65:9c:51:d5:49:53:ed:e4:32:9c:02:d4:26:fc:8e:
5c:d9:be:9a:b1:99:0d:69:03:69:2d:bc:63:5b:ad:d0:81:0d:
ba:21:83:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:13:34 2026 by rpki-client