Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
File: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft (raw, json)
Hash identifier: 4ewyXHWZggoFaYHZ41ECU0fZrqS37ewDfD6rHC5oIhE=
Subject key identifier: CB:51:F3:BB:C9:DA:79:4B:47:EB:88:31:40:C0:C7:52:D8:7C:6A:CF
Authority key identifier: 36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
Certificate issuer: /CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Certificate serial: 019CAD229519CB8C875153428AC5CAE5790E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 06:00:50 +0000
Manifest this update: Mon 02 Mar 2026 06:00:50 +0000
Manifest next update: Tue 03 Mar 2026 06:00:50 +0000
Files and hashes: 1: 2faiVit9OjueZahp7YpMGI9nPX0.roa (hash: OgjxqGpyZOwTD9iVONTR2DO+mW7tsVQaXV48+jDEJWE=)
2: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl (hash: WUrQh/nPY8ZyzMNnp/ixQa9fEfRaFGMwgKcTg4+e1/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:95:19:cb:8c:87:51:53:42:8a:c5:ca:e5:79:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Validity
Not Before: Mar 2 06:00:50 2026 GMT
Not After : Mar 3 06:00:50 2026 GMT
Subject: CN=cb51f3bbc9da794b47eb883140c0c752d87c6acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:97:63:96:a4:3c:f5:ed:5e:98:7a:9e:a0:
b8:08:06:57:1b:1e:a4:91:66:0a:9c:53:0d:81:bf:
f4:56:db:99:1f:5b:8b:7c:62:8a:44:1d:6d:bd:66:
10:12:36:82:9b:62:20:3e:89:c7:5d:10:a7:c9:8a:
e9:d8:7b:19:3a:1e:c6:8c:67:bf:ba:a5:b7:c7:00:
f1:ac:f2:51:f6:30:2a:00:93:25:22:9b:ec:45:87:
76:ac:0c:a2:75:3c:ea:83:08:0e:af:bd:b2:86:00:
8b:e6:e9:79:40:58:36:1b:86:c0:6c:05:85:a9:f6:
cc:7c:59:c4:4a:49:e1:16:b3:e6:0e:5a:6f:f9:2c:
55:fb:81:75:f4:b5:40:dd:99:fc:85:4b:e9:27:1c:
59:17:d6:a3:85:d1:d9:d2:c7:ce:01:37:16:e4:b8:
04:62:e8:7d:c4:9d:85:b1:ea:25:a5:75:e6:32:0c:
19:e6:94:6d:45:1e:47:1a:53:d4:9d:3c:36:30:64:
81:a6:3a:af:76:1b:6e:e0:4f:23:bd:fd:9b:58:bd:
86:2f:21:9d:48:b2:3f:2a:8f:cb:ca:c1:17:19:55:
c5:8a:0a:3e:80:39:30:e8:9b:e5:89:20:b4:29:82:
ff:10:88:a5:0c:65:7d:b0:28:b4:ab:08:d2:6c:65:
d1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:51:F3:BB:C9:DA:79:4B:47:EB:88:31:40:C0:C7:52:D8:7C:6A:CF
X509v3 Authority Key Identifier:
keyid:36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2f:41:83:fd:88:23:cf:d7:db:6f:b1:77:87:32:a9:c0:52:
2d:69:46:29:60:41:fb:59:ca:32:19:1a:f4:85:f7:ed:b1:40:
94:cf:4f:da:33:91:7f:5f:f7:64:1a:ef:a8:0c:0e:ce:67:5f:
8e:db:bb:8c:05:75:ae:ca:ef:e6:7c:22:1a:62:49:65:73:6a:
e8:91:43:6e:a9:3c:f9:c0:b6:34:f8:46:9b:cd:b9:a0:37:87:
61:a8:96:74:37:99:b7:dd:3d:0c:a0:01:19:78:43:e2:cd:c8:
87:2c:bc:1a:de:86:b6:62:37:ce:82:f0:4d:c0:97:c0:94:ed:
9a:eb:6f:1a:70:52:a7:e9:2c:e8:48:7c:17:71:de:fb:2d:df:
2d:55:af:3d:51:52:96:34:0f:52:f9:05:b5:9f:e5:ba:1b:8f:
97:ef:1b:07:89:5d:8c:7c:fd:ea:88:ef:f5:ba:08:92:01:69:
89:de:e7:33:eb:41:d1:47:db:77:21:4e:94:a3:79:7c:aa:44:
eb:84:5c:25:3e:a0:d5:8c:09:4e:19:11:4e:1d:de:28:59:8a:
16:b9:40:f9:20:49:1b:e4:c3:ae:51:58:fb:5e:1e:0c:b9:b6:
cf:ea:76:6f:35:28:e2:36:4c:d5:1a:dc:8e:49:e7:f1:72:33:
29:0e:35:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIpUZy4yHUVNCisXK5XkOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YWFmYTVjM2YyZjhlNGEwODNmODFmMGNiODdiYzdhZWE0
NDg5MWYwHhcNMjYwMzAyMDYwMDUwWhcNMjYwMzAzMDYwMDUwWjAzMTEwLwYDVQQD
EyhjYjUxZjNiYmM5ZGE3OTRiNDdlYjg4MzE0MGMwYzc1MmQ4N2M2YWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1CXY5akPPXtXph6nqC4CAZXGx6k
kWYKnFMNgb/0VtuZH1uLfGKKRB1tvWYQEjaCm2IgPonHXRCnyYrp2HsZOh7GjGe/
uqW3xwDxrPJR9jAqAJMlIpvsRYd2rAyidTzqgwgOr72yhgCL5ul5QFg2G4bAbAWF
qfbMfFnESknhFrPmDlpv+SxV+4F19LVA3Zn8hUvpJxxZF9ajhdHZ0sfOATcW5LgE
Yuh9xJ2FseolpXXmMgwZ5pRtRR5HGlPUnTw2MGSBpjqvdhtu4E8jvf2bWL2GLyGd
SLI/Ko/LysEXGVXFigo+gDkw6JvliSC0KYL/EIilDGV9sCi0qwjSbGXRqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtR87vJ2nlLR+uIMUDAx1LYfGrPMB8GA1UdIwQY
MBaAFDaq+lw/L45KCD+B8MuHvHrqRIkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85MjVkNGEtZjVmNC00Mjk5LWE4Mjkt
MTUyYTU5NDc5ZTY5LzEvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC85MjVkNGEtZjVmNC00Mjk5LWE4MjktMTUyYTU5NDc5ZTY5
LzEvTnFyNlhEOHZqa29JUDRId3k0ZThldXBFaVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAky9Bg/2I
I8/X22+xd4cyqcBSLWlGKWBB+1nKMhka9IX37bFAlM9P2jORf1/3ZBrvqAwOzmdf
jtu7jAV1rsrv5nwiGmJJZXNq6JFDbqk8+cC2NPhGm825oDeHYaiWdDeZt909DKAB
GXhD4s3Ihyy8Gt6GtmI3zoLwTcCXwJTtmutvGnBSp+ks6Eh8F3He+y3fLVWvPVFS
ljQPUvkFtZ/luhuPl+8bB4ldjHz96ojv9boIkgFpid7nM+tB0UfbdyFOlKN5fKpE
64RcJT6g1YwJThkRTh3eKFmKFrlA+SBJG+TDrlFY+14eDLm2z+p2bzUo4jZM1Rrc
jknn8XIzKQ417A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:11 2026 by rpki-client