Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File: Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier: A64805zaxfHRuKc7xNPJ+XpAN5dS/x8oy5Z25ruNN+Q=
Subject key identifier: D4:62:F0:E4:A5:F2:B1:A6:07:2F:95:EB:6E:30:4C:DE:DB:3E:1D:34
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer: /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial: 01A0EA4061D27D32ADF2042F196F516FA8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number: 13C8
Signing time: Mon 28 Sep 2026 23:01:22 +0000
Manifest this update: Mon 28 Sep 2026 23:01:22 +0000
Manifest next update: Tue 29 Sep 2026 23:01:22 +0000
Files and hashes: 1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: fltwsMJ1qyyTVxpH5PEx8afi6kjFdXHlSSEX3wu/b+Y=)
2: fs8coMQW-wdjxvCj9ZMHuDg86fI.roa (hash: 9FrwB/m2Bh+Pc1afpUHCCGmxJk3UX+3t1k97wVkOTzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:61:d2:7d:32:ad:f2:04:2f:19:6f:51:6f:a8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Validity
Not Before: Sep 28 23:01:22 2026 GMT
Not After : Sep 29 23:01:22 2026 GMT
Subject: CN=d462f0e4a5f2b1a6072f95eb6e304cdedb3e1d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:65:e2:4a:81:4a:4b:4d:dc:b3:d7:e8:11:
d7:d4:93:4d:3e:db:e4:b2:f2:3b:e5:c5:5d:fb:ec:
c4:ef:cc:70:60:38:58:89:86:ea:37:e0:40:16:1f:
fc:0f:62:d3:be:54:81:1b:9b:27:32:61:0c:93:07:
97:de:0d:82:e3:05:c0:70:50:59:8b:30:ef:16:b8:
05:16:a0:ee:60:b5:a3:e5:d3:ef:46:ef:56:f2:14:
d4:df:92:dc:02:a3:6c:77:71:1d:56:82:f9:37:b7:
11:7f:9b:83:37:a9:f3:e2:8b:7e:7b:44:dd:32:a2:
d4:6a:93:8e:cd:79:5a:ae:54:a3:ba:fd:af:c0:4a:
70:d5:da:f9:c7:3c:70:3b:1a:08:a2:d5:eb:8b:22:
87:0b:78:df:56:c5:b0:5f:fb:8c:25:51:65:6d:dc:
ee:d5:7f:1e:52:b0:97:e6:1d:11:42:9d:d7:a5:40:
4a:9b:2e:c3:b1:c7:28:56:46:7a:fd:e6:f5:56:e9:
e7:08:4d:0d:51:69:ca:0a:93:a4:1b:e2:8e:37:5b:
6b:0e:64:4a:13:e7:18:bf:d8:98:f8:7a:8c:54:45:
c6:a5:b8:49:72:c7:f4:26:ba:92:4f:89:b4:7f:f7:
35:cd:0b:08:df:29:46:f9:0c:cf:f1:52:a5:3c:07:
e8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:62:F0:E4:A5:F2:B1:A6:07:2F:95:EB:6E:30:4C:DE:DB:3E:1D:34
X509v3 Authority Key Identifier:
keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:52:09:71:a9:85:6f:b5:f9:9e:ef:3e:14:ca:cb:02:8c:f3:
11:3b:45:ac:3a:e6:e9:a0:bd:fc:cf:bb:b2:10:df:03:8e:d0:
9c:cb:b6:2c:86:71:5c:d9:7a:d7:e8:00:64:cf:ae:4f:f3:56:
26:58:0b:31:2e:5b:fc:ef:b4:9e:ac:0a:6b:be:44:ea:82:7d:
01:01:7d:e8:42:1c:ae:9d:37:e2:f8:99:9b:3c:a2:a1:81:ca:
8f:3c:05:ba:ed:41:2a:ce:d5:11:bb:c9:a0:fa:2d:c9:e7:25:
23:e4:3f:62:89:06:e7:f5:d2:2e:8a:68:53:76:be:8b:2e:32:
a5:c7:d4:27:2d:d0:24:d4:a1:d1:6b:14:fc:8f:b4:d8:4a:aa:
5a:67:41:7f:ad:ba:67:db:52:83:29:b8:e0:92:f3:a1:d1:b8:
b2:78:e4:cc:8b:49:ed:e7:c1:8d:cf:79:81:a2:b9:2b:f9:74:
b7:fb:63:97:9a:e4:4a:f7:13:40:6d:c3:d1:5d:82:93:4b:e6:
f3:3f:ab:53:64:5b:e1:55:10:dc:0e:99:5a:b4:eb:21:94:8d:
be:11:c7:41:3e:82:c1:06:fb:46:3f:97:ce:55:08:f8:bf:f3:
8d:40:2c:c8:57:37:4f:e9:67:d2:23:c0:c7:ee:c6:7d:16:af:
b2:2c:99:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:17:42 2026 by rpki-client