Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: q2EmgmUEppRyneqtMjhrGC66nSjsQwDGBEDeANVO9rQ=
Subject key identifier: 09:6C:DF:FA:26:A0:48:E0:4F:7E:52:E0:C8:9E:AA:1E:D0:77:57:40
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 019D9773E61B88CF326074FCF240C76F6EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 18:00:48 +0000
Manifest this update: Thu 16 Apr 2026 18:00:48 +0000
Manifest next update: Fri 17 Apr 2026 18:00:48 +0000
Files and hashes: 1: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: lH8yCopJc/Tjd0oma5AjCv3GV7oUP13KQplME69Vago=)
2: UBW5R1HwaG9495WZauzqNIjn4nA.roa (hash: duZ19HoAidUjyBvwzeBCc3j9fnU5CniKN9o9GUrYQpw=)
3: XbqOwXYkjht0nJnceNJjzX2ebKs.roa (hash: knPH99gttVNm7VTufmRAs4k/asX/iKOhw3wnBmFxMfs=)
4: j2Vt-vhnn-HkYm2cJoF8eB-3moE.roa (hash: mB8vuWp3NyFqQhgRZxGSvc7q78uxW5vC+14W4bnmoE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:e6:1b:88:cf:32:60:74:fc:f2:40:c7:6f:6e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Apr 16 18:00:48 2026 GMT
Not After : Apr 17 18:00:48 2026 GMT
Subject: CN=096cdffa26a048e04f7e52e0c89eaa1ed0775740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:21:37:3a:6d:34:4a:7e:6b:cb:cf:80:5d:a0:
5a:3f:71:a7:71:2a:64:11:4f:ee:57:42:41:24:34:
a6:c6:dd:fb:be:1a:f6:94:a5:62:91:59:27:d6:bb:
6d:e1:0b:bb:ad:34:93:53:cf:10:d6:68:d3:f8:ef:
42:a6:69:ef:b5:e5:b0:ec:88:b3:33:0a:a6:07:e1:
0c:92:d0:4e:72:19:02:17:78:06:5e:25:73:85:9e:
e1:70:fb:77:0e:ab:33:9a:36:fa:df:17:b6:ae:c0:
bf:58:03:60:aa:a1:9c:ec:22:9e:8f:6c:32:e9:48:
50:fe:fe:8a:18:a6:eb:b3:d5:80:f9:c7:a3:ff:c0:
1d:bb:29:6c:b1:a0:fc:b3:51:c5:60:b1:5e:25:a2:
1f:fa:41:46:67:83:e8:21:68:4a:66:12:75:0b:1e:
bf:ba:43:25:66:d2:a5:25:b8:0d:37:d4:e0:39:df:
cc:f7:b6:ac:ee:9e:5e:9d:c2:78:b1:62:ae:24:c2:
e2:ee:a7:49:83:0a:60:3a:95:3a:77:e8:66:81:65:
82:c6:b9:3c:d6:9f:4b:1d:ab:88:5f:11:ff:d6:d9:
fc:93:68:74:03:90:41:1a:21:2f:63:bd:21:e8:aa:
ba:8b:90:c3:04:05:81:68:20:a1:38:1f:18:43:4f:
2b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6C:DF:FA:26:A0:48:E0:4F:7E:52:E0:C8:9E:AA:1E:D0:77:57:40
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:29:70:4e:a4:23:d1:90:e3:17:79:8e:0f:94:6a:38:d1:b4:
57:f0:1a:5e:ae:fb:b6:34:d6:1a:e1:7e:6b:ee:cb:ea:ca:66:
83:82:35:34:ef:ab:f3:3c:65:e4:64:4b:a7:9e:13:48:fd:51:
63:82:e7:f6:b0:e3:f9:fa:fb:4a:61:4a:91:6b:67:2a:f9:a7:
ad:89:25:dd:65:99:ef:e5:66:e8:21:91:d0:21:29:3c:56:76:
82:dd:7e:d1:94:b7:e2:91:53:5e:4a:c4:0e:dd:58:af:5b:73:
21:06:80:75:06:02:e6:e6:e2:5a:ea:a9:bd:bb:4f:e8:7a:4b:
4b:44:1e:f5:97:31:86:4c:96:1d:1b:1e:7a:87:86:0b:54:01:
c8:6c:8c:59:10:1e:9c:a3:80:ec:49:62:d4:03:36:42:41:68:
e6:92:13:99:41:bf:2c:f5:06:26:3b:c2:8e:b8:b7:db:c9:5f:
95:b4:7a:d9:b3:e3:1c:06:79:22:1f:44:4e:86:2e:22:f3:1c:
16:61:c2:e0:d7:93:ba:17:73:af:0b:67:3c:85:b2:b8:39:29:
76:9a:94:67:26:51:03:16:f1:54:9a:a1:7e:4d:60:aa:d5:97:
41:bb:1f:2f:a6:30:d4:ba:74:cc:39:a5:4d:e8:7b:32:7a:05:
95:4e:2c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:12:09 2026 by rpki-client