Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: sGlIjSLKd+y4zIVLHH77FqCfSXQd1PbkNYlbt3aX1lM=
Subject key identifier: 14:5D:F8:98:DF:30:9A:B7:CB:1E:16:4B:DD:05:7D:6F:C8:56:0A:DF
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 019CABD952CB3F867AF1112D1088AED9A378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 00:01:12 +0000
Manifest this update: Mon 02 Mar 2026 00:01:12 +0000
Manifest next update: Tue 03 Mar 2026 00:01:12 +0000
Files and hashes: 1: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: k023vZ64U4GTB6mB3wPNqNIW9GxynQW9NYI2GHByBFo=)
2: UBW5R1HwaG9495WZauzqNIjn4nA.roa (hash: duZ19HoAidUjyBvwzeBCc3j9fnU5CniKN9o9GUrYQpw=)
3: XbqOwXYkjht0nJnceNJjzX2ebKs.roa (hash: knPH99gttVNm7VTufmRAs4k/asX/iKOhw3wnBmFxMfs=)
4: j2Vt-vhnn-HkYm2cJoF8eB-3moE.roa (hash: mB8vuWp3NyFqQhgRZxGSvc7q78uxW5vC+14W4bnmoE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:52:cb:3f:86:7a:f1:11:2d:10:88:ae:d9:a3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Mar 2 00:01:12 2026 GMT
Not After : Mar 3 00:01:12 2026 GMT
Subject: CN=145df898df309ab7cb1e164bdd057d6fc8560adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:65:3a:36:f7:c3:bd:03:49:54:25:1f:1a:
38:6f:b5:ff:ea:a7:bd:df:82:b4:74:04:96:0c:25:
e6:fe:e6:a4:2f:07:ff:5b:8a:a2:68:83:cf:82:fd:
b0:08:37:fb:63:bf:0d:85:dc:71:c2:58:2f:14:b4:
0e:4f:df:4d:0a:68:41:05:59:04:da:51:9e:0a:61:
ea:21:60:bb:07:3c:8b:93:da:fe:a5:b0:af:bd:60:
60:40:5d:d0:14:12:9c:f0:55:6f:a8:8c:46:91:78:
b3:c5:b7:4f:3e:ad:ed:61:ed:97:20:cb:8d:bb:ff:
45:45:2f:ae:0b:46:a2:a8:30:ae:f2:a6:e3:d3:b7:
20:b8:ef:2a:f9:e9:e2:31:6c:50:e4:ac:e7:8a:98:
31:3a:46:e6:0c:39:64:fd:59:ee:39:66:17:ac:98:
8a:10:9f:4c:ad:f7:7a:f4:d3:78:e7:6d:d6:a8:e7:
0c:62:fa:a8:7a:4b:44:74:b1:eb:e2:3b:b9:e9:9e:
b4:08:db:45:25:34:4e:bb:80:6c:8f:ec:42:2b:f0:
3c:04:ac:48:f6:60:09:02:cc:eb:5d:8d:a3:94:95:
36:fa:5f:7f:f6:f4:db:1d:2f:ad:31:b6:59:fe:7c:
c4:5d:8f:52:89:6e:7e:4c:a5:4e:49:ba:61:47:90:
8e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5D:F8:98:DF:30:9A:B7:CB:1E:16:4B:DD:05:7D:6F:C8:56:0A:DF
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:87:a8:81:14:9b:b0:17:32:03:58:4d:c1:6f:77:70:0f:02:
cb:60:0d:be:c4:59:9a:3b:54:b7:3f:c3:23:c0:46:60:f0:fe:
54:15:46:9b:0c:01:1f:14:ad:6c:86:9e:70:2e:ee:38:35:79:
d6:fc:54:ce:76:a8:3a:18:5a:1e:b4:66:32:19:9c:76:6d:3c:
5b:80:fc:75:1b:50:cc:b1:ed:eb:75:13:8a:9f:47:e8:9a:ea:
ee:62:74:ad:c1:c9:c2:86:07:34:50:de:0c:5f:d9:e2:78:3e:
ec:7c:78:86:86:bb:d4:a3:06:65:ad:d3:83:e8:d3:b2:ea:20:
11:a9:d2:b2:12:35:17:49:9a:ef:ba:2d:75:1e:30:6d:2e:39:
c5:0f:26:f8:6e:8d:3f:cd:01:25:e9:90:7f:de:36:9d:20:11:
69:1c:b8:15:a3:10:a7:24:68:89:3f:20:5e:b0:eb:1b:be:67:
d4:42:bd:63:39:3a:54:2d:c6:bc:07:56:85:23:3c:c4:b4:d9:
f4:38:1e:1f:20:fd:9c:74:17:14:81:45:00:9f:e5:3f:23:54:
75:60:9b:e9:15:49:d7:6b:2a:92:2b:bb:b2:3b:eb:15:43:58:
35:94:1d:12:84:8c:2c:ec:b5:90:9a:09:70:2b:a5:dc:9d:d7:
51:72:8c:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2VLLP4Z68REtEIiu2aN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZWFhMDBlYTc3NzA5OGIxYmYwMzY3NTZkNjQwZTlkMzFk
NjNiM2IwHhcNMjYwMzAyMDAwMTEyWhcNMjYwMzAzMDAwMTEyWjAzMTEwLwYDVQQD
EygxNDVkZjg5OGRmMzA5YWI3Y2IxZTE2NGJkZDA1N2Q2ZmM4NTYwYWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfVlOjb3w70DSVQlHxo4b7X/6qe9
34K0dASWDCXm/uakLwf/W4qiaIPPgv2wCDf7Y78NhdxxwlgvFLQOT99NCmhBBVkE
2lGeCmHqIWC7BzyLk9r+pbCvvWBgQF3QFBKc8FVvqIxGkXizxbdPPq3tYe2XIMuN
u/9FRS+uC0aiqDCu8qbj07cguO8q+eniMWxQ5KznipgxOkbmDDlk/VnuOWYXrJiK
EJ9Mrfd69NN4523WqOcMYvqoektEdLHr4ju56Z60CNtFJTROu4Bsj+xCK/A8BKxI
9mAJAszrXY2jlJU2+l9/9vTbHS+tMbZZ/nzEXY9SiW5+TKVOSbphR5CONwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRd+JjfMJq3yx4WS90FfW/IVgrfMB8GA1UdIwQY
MBaAFDbqoA6ndwmLG/A2dW1kDp0x1js7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80MTAyMzItYjFmZC00MTM3LTgzMmQt
YmRiMjEzMTNjM2VjLzEvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80MTAyMzItYjFmZC00MTM3LTgzMmQtYmRiMjEzMTNjM2Vj
LzEvTnVxZ0RxZDNDWXNiOERaMWJXUU9uVEhXT3pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIeogRSb
sBcyA1hNwW93cA8Cy2ANvsRZmjtUtz/DI8BGYPD+VBVGmwwBHxStbIaecC7uODV5
1vxUznaoOhhaHrRmMhmcdm08W4D8dRtQzLHt63UTip9H6Jrq7mJ0rcHJwoYHNFDe
DF/Z4ng+7Hx4hoa71KMGZa3Tg+jTsuogEanSshI1F0ma77otdR4wbS45xQ8m+G6N
P80BJemQf942nSARaRy4FaMQpyRoiT8gXrDrG75n1EK9Yzk6VC3GvAdWhSM8xLTZ
9DgeHyD9nHQXFIFFAJ/lPyNUdWCb6RVJ12sqkiu7sjvrFUNYNZQdEoSMLOy1kJoJ
cCul3J3XUXKMrQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:26 2026 by rpki-client