Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: Rz55GrZ31voSBNngpJneRi3wcdq/ZVIusShkgzCcv1o=
Subject key identifier: 93:8F:0E:B1:01:5B:58:4C:CD:DF:DD:B6:62:1E:FE:86:3A:0C:3B:53
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 019CAED9DC2676EE4F5D0A1AB22DC0709C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 1197
Signing time: Mon 02 Mar 2026 14:00:38 +0000
Manifest this update: Mon 02 Mar 2026 14:00:38 +0000
Manifest next update: Tue 03 Mar 2026 14:00:38 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: e87YOGNMAHuTeLPnEq8wrB1BCH1+9Bq1kBWoidPNfRM=)
2: fs8coMQW-wdjxvCj9ZMHuDg86fI.roa (hash: 9FrwB/m2Bh+Pc1afpUHCCGmxJk3UX+3t1k97wVkOTzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:dc:26:76:ee:4f:5d:0a:1a:b2:2d:c0:70:9c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Mar 2 14:00:38 2026 GMT
Not After : Mar 3 14:00:38 2026 GMT
Subject: CN=938f0eb1015b584ccddfddb6621efe863a0c3b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:e5:08:6a:b8:e0:49:cb:10:36:d1:a2:29:
88:4e:14:a5:de:68:eb:86:90:9c:88:ce:97:d1:c3:
d2:07:22:d0:32:03:2d:16:44:ae:87:46:75:ac:41:
5d:cd:94:f6:f4:a2:68:45:e6:cd:ac:57:f0:82:dd:
df:cc:e5:39:b5:55:7b:ba:63:ce:3c:8a:7e:29:c1:
fc:eb:71:05:86:1e:a8:50:12:c5:52:bc:9a:3a:ea:
ab:c4:94:f7:10:66:13:61:17:4a:06:8e:8b:65:f9:
0d:53:15:e8:a8:2e:da:5d:25:6a:09:ec:26:4b:48:
33:ae:17:53:a6:98:88:a9:7b:15:19:7c:3b:e0:11:
c1:ce:37:b8:29:46:c8:ff:95:75:c0:80:25:40:26:
76:d5:67:d4:b7:95:7a:3e:71:71:7d:d0:d4:64:42:
9a:1b:03:2e:de:fa:54:17:19:cd:9b:d9:ef:93:f4:
0d:bd:63:cc:f8:67:9e:23:df:d9:ec:f6:85:c1:52:
20:2e:18:47:31:4d:cb:b6:54:33:06:dd:10:7a:74:
75:fb:fc:3d:95:07:fe:64:d4:b8:c3:c1:81:3d:c2:
44:23:b6:80:18:da:3b:84:52:5e:13:b0:9f:46:28:
62:d9:01:0b:de:90:3f:71:9b:f9:5f:ce:a3:ee:af:
92:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8F:0E:B1:01:5B:58:4C:CD:DF:DD:B6:62:1E:FE:86:3A:0C:3B:53
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:de:2f:13:0c:b8:92:ea:1a:a0:40:d1:23:5a:d4:c7:71:d7:
70:01:30:60:8c:84:3f:6e:18:12:19:3c:15:6e:45:8d:6a:a3:
77:e2:39:3a:66:17:72:13:62:63:2e:10:a3:a5:b7:61:42:f0:
ab:12:29:8c:cd:9a:51:9a:9a:ed:23:23:ce:33:01:83:23:62:
06:10:84:1d:91:17:a9:45:08:32:11:57:81:4f:56:03:01:c3:
50:8d:7c:ff:4d:af:06:d1:10:22:1c:bd:b5:f5:9a:f0:41:01:
5d:46:fe:e2:9c:13:cb:9a:5b:30:2c:cb:5b:75:e3:2b:10:d7:
67:3b:34:8b:8c:71:fe:e8:2c:11:7c:04:55:ba:87:a7:73:58:
e8:d9:aa:47:68:28:05:ac:01:18:9d:d3:d6:b8:56:1b:66:e2:
f1:7f:31:87:48:60:69:ed:73:6f:d7:75:4f:57:1b:bc:ba:9a:
4a:34:7b:4c:84:da:27:d8:c2:78:a1:50:92:27:f6:19:c2:1e:
4a:7e:80:ef:b3:1f:93:ea:af:ff:2f:5a:1b:75:35:2c:1a:6b:
55:a6:fa:10:a2:86:d5:cb:e4:9d:e7:5e:2a:23:2d:06:62:dc:
3d:46:ce:45:65:34:73:af:3d:28:70:31:41:d3:f6:bf:47:1e:
ec:a4:a5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:39 2026 by rpki-client