Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: Qfq5e9qHUhOl5Z6tqIKHMKJ0ce3qip/ik3K/RwAU1K4=
Subject key identifier: 70:73:58:67:73:5F:C7:7B:16:16:04:6A:05:48:A8:BB:DB:69:DC:0C
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 019D9A753272B21DBA327793C5132EDA9BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 1211
Signing time: Fri 17 Apr 2026 08:01:04 +0000
Manifest this update: Fri 17 Apr 2026 08:01:04 +0000
Manifest next update: Sat 18 Apr 2026 08:01:04 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: 6WqDXqjoMcPaY2W/BIKL8I3h7pEcH1Q3JyIuvozH1AI=)
2: fs8coMQW-wdjxvCj9ZMHuDg86fI.roa (hash: 9FrwB/m2Bh+Pc1afpUHCCGmxJk3UX+3t1k97wVkOTzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:32:72:b2:1d:ba:32:77:93:c5:13:2e:da:9b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Apr 17 08:01:04 2026 GMT
Not After : Apr 18 08:01:04 2026 GMT
Subject: CN=70735867735fc77b1616046a0548a8bbdb69dc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f8:12:d6:86:9b:65:a0:e4:d1:f4:03:c6:46:
9b:bd:4d:57:b3:55:d2:45:23:3a:bf:e0:63:14:78:
7a:ce:86:ec:45:34:f7:e4:40:ba:a7:1f:53:57:b5:
71:5e:f5:19:c4:71:66:95:1f:be:74:ac:3a:57:2b:
ac:b2:0c:18:5e:36:14:73:92:2d:d3:00:88:7b:73:
66:a6:97:77:59:fd:dc:70:66:c5:cb:b7:d5:49:45:
ce:9c:cd:17:9d:74:b2:d9:f1:4b:4a:4d:74:be:a8:
17:61:35:b5:2b:db:92:ea:9c:f8:48:f8:e6:fc:16:
dc:2c:98:3c:58:ab:f3:66:22:86:2a:ee:2a:97:5a:
e2:4f:3c:ba:35:18:db:26:9c:cf:4e:b5:61:8c:a5:
6d:b4:7c:34:20:3d:1c:35:ba:65:79:72:98:3e:6d:
45:bc:6c:f9:d6:83:40:2a:45:44:15:f8:cb:43:29:
4f:cd:12:ef:04:c5:5e:74:15:21:37:39:34:1d:23:
06:65:69:ea:7d:1f:52:25:8f:e0:8a:b1:52:95:70:
27:b7:fc:9f:f7:26:c4:b0:9f:fc:db:4e:79:0c:96:
ad:6f:9a:43:10:31:f1:1e:c9:88:bf:28:c6:e1:6b:
e7:81:9b:90:e4:6f:f8:08:8e:de:d5:57:01:17:3e:
36:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:73:58:67:73:5F:C7:7B:16:16:04:6A:05:48:A8:BB:DB:69:DC:0C
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:16:c2:f1:69:fb:a0:08:2b:e7:48:e1:66:84:84:12:58:f6:
c6:51:65:57:77:24:a8:80:e5:4a:e8:d1:a9:04:91:28:f9:ce:
21:1a:b5:06:8e:22:fa:06:8c:d9:c6:82:11:e6:5c:6a:72:49:
7a:23:14:dd:1e:a3:3b:06:5d:94:99:5f:84:eb:df:ea:d0:04:
1c:ec:d6:e4:c1:cb:0b:bc:e8:5c:91:2c:4a:f3:74:82:2e:b6:
38:72:6b:b8:8c:7b:2a:fc:26:bd:06:77:87:7b:0e:ab:27:ad:
31:97:02:36:5e:46:d6:fb:1a:23:a7:95:d5:8c:26:74:8e:13:
a7:63:01:ac:24:5f:14:e2:54:c8:2a:b9:e1:1d:78:0f:d8:38:
89:09:36:aa:13:59:5f:00:a6:c2:bd:64:7e:85:ef:33:0e:f8:
8f:09:8c:7a:f9:fd:43:e1:59:cd:c5:5b:46:0b:f4:28:de:31:
13:47:c6:13:45:a8:5a:8c:67:8d:b1:e1:1d:7e:d6:36:61:0a:
fc:90:40:7c:72:b3:c9:b2:fb:d1:b2:25:ca:7b:bc:64:43:1d:
5e:e7:45:13:c8:d0:ad:c0:72:64:93:9d:21:ed:32:cc:fb:d7:
3f:c8:73:c9:03:4a:63:8c:0c:0d:d8:ea:9c:19:20:53:a3:61:
66:b6:8e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:08:24 2026 by rpki-client