Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
File: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft (raw, json)
Hash identifier: emsUdvtFBshm3R6hKe88ziuNvwYJJqpqZxXMVCABY2Q=
Subject key identifier: 9B:14:28:80:71:B9:2A:91:0A:60:4A:D9:57:55:E3:E0:AA:7E:69:D9
Authority key identifier: 36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
Certificate issuer: /CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Certificate serial: 01A0ECD3F8759159DA1E5EEE3DD9C52E55A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
Manifest number: 1A7E
Signing time: Tue 29 Sep 2026 11:01:49 +0000
Manifest this update: Tue 29 Sep 2026 11:01:49 +0000
Manifest next update: Wed 30 Sep 2026 11:01:49 +0000
Files and hashes: 1: JEy4ZJ62QYRRLVpb1W-o-3RjroA.roa (hash: UXVz9bhe0di3EXu2bm6AdG0DjlkQpOevHbzRqlRvjno=)
2: NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl (hash: vyvuYo4aNe6KgtcDui74qzU4wgDhlcWAxQxyQc+Mgpw=)
3: UBW5R1HwaG9495WZauzqNIjn4nA.roa (hash: duZ19HoAidUjyBvwzeBCc3j9fnU5CniKN9o9GUrYQpw=)
4: j2Vt-vhnn-HkYm2cJoF8eB-3moE.roa (hash: mB8vuWp3NyFqQhgRZxGSvc7q78uxW5vC+14W4bnmoE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:f8:75:91:59:da:1e:5e:ee:3d:d9:c5:2e:55:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36eaa00ea777098b1bf036756d640e9d31d63b3b
Validity
Not Before: Sep 29 11:01:49 2026 GMT
Not After : Sep 30 11:01:49 2026 GMT
Subject: CN=9b14288071b92a910a604ad95755e3e0aa7e69d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:ce:4d:78:e5:a6:71:c8:d7:e1:9e:8d:2e:
c0:75:3c:f6:5b:fa:98:13:ad:08:4e:de:bb:68:5d:
fe:38:05:2c:6f:d6:cd:e3:63:b5:0a:b1:ad:4e:a4:
9a:af:1a:2a:ac:ed:f6:b1:1b:32:ae:92:2e:f6:a7:
74:80:16:7f:97:f4:a4:d5:9b:2e:c7:b1:8f:8a:7e:
ef:75:21:29:a8:58:10:58:24:89:17:a0:96:57:70:
b2:4a:dd:68:9e:65:96:4c:2f:66:98:d2:54:de:9e:
d5:df:9a:52:db:da:82:e3:b5:69:24:35:00:91:31:
10:97:f6:0f:95:58:58:bf:5e:92:44:55:d2:8d:ce:
ce:58:6b:2e:26:cf:d0:ef:89:c4:6b:0a:ff:36:01:
8a:0f:93:5a:51:65:2b:1d:10:eb:b7:7e:c7:87:42:
63:ea:e8:5d:d2:2a:98:fc:55:c6:c6:7f:27:60:ac:
4b:ce:93:91:70:2e:db:1f:8c:a2:47:48:74:5e:02:
20:d7:cb:77:2f:dc:87:87:f8:b6:19:a9:ce:92:21:
dd:28:5b:fa:bf:75:36:41:00:a6:b2:2a:71:6b:c0:
e7:fb:1f:23:cb:83:b2:d6:a3:f2:f7:2c:73:b1:65:
59:cd:d8:69:58:4b:55:9f:16:1a:7e:62:e7:f0:55:
42:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:14:28:80:71:B9:2A:91:0A:60:4A:D9:57:55:E3:E0:AA:7E:69:D9
X509v3 Authority Key Identifier:
keyid:36:EA:A0:0E:A7:77:09:8B:1B:F0:36:75:6D:64:0E:9D:31:D6:3B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/410232-b1fd-4137-832d-bdb21313c3ec/1/NuqgDqd3CYsb8DZ1bWQOnTHWOzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fb:68:e4:87:d5:7f:28:cb:4a:9a:66:27:d5:ac:18:2d:63:
8f:f9:0b:09:ad:b7:02:db:d6:5e:b7:1b:31:2e:54:4b:b6:a7:
2f:75:99:c2:cb:9f:ae:61:90:6b:bf:9c:af:c1:2c:85:73:ac:
4a:8e:0c:7f:04:d7:c8:7c:1d:e5:49:a2:82:a9:17:55:2f:a1:
fe:dd:ba:14:5a:f6:c9:77:c8:a9:4f:ed:b2:7c:bd:d6:a7:c9:
bd:b7:51:8f:77:1a:6d:cd:b1:4c:a4:8c:4b:11:6e:39:df:2a:
f7:61:db:eb:cf:83:b6:6d:9d:4c:3c:64:54:bd:59:e1:50:3c:
d0:00:6c:ee:4d:37:ec:2b:04:71:a3:77:24:a7:16:5c:20:d6:
7a:49:40:f7:f4:86:cc:13:b9:21:84:3d:81:75:c9:eb:bf:b9:
4b:f5:93:fd:77:3b:3f:29:ed:9b:f5:c7:e5:e8:06:79:b3:04:
56:2a:22:7f:53:b1:1a:e1:d2:7c:3d:ed:ed:c6:0e:dc:60:cb:
48:a5:f2:2a:ad:8f:7b:fb:34:1f:7f:8d:17:93:9d:2b:ae:c8:
ee:d9:2b:6b:fe:9f:e0:1c:a1:fc:db:c4:63:fb:a0:7a:b3:30:
48:8c:23:76:d9:c0:85:71:01:03:55:eb:76:d7:58:b0:17:5d:
c2:d2:12:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:59:31 2026 by rpki-client