Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
File: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json)
Hash identifier: xILDzk4nGo7t9foLS+di0EAYersfSbBMkWz/GLjR90E=
Subject key identifier: 7A:FB:F3:E4:B7:59:53:6B:08:CC:1F:E4:A4:E0:63:93:6F:D1:6D:94
Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
Certificate issuer: /CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Certificate serial: 019CAA5821AE21CC3CDC6E2B10F8E6DD1CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
Manifest number: 0A01
Signing time: Sun 01 Mar 2026 17:00:28 +0000
Manifest this update: Sun 01 Mar 2026 17:00:28 +0000
Manifest next update: Mon 02 Mar 2026 17:00:28 +0000
Files and hashes: 1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: O9496hw/QIuWEsfO8tuczzaPPmfzg/yK4WCRtAJxT2w=)
2: QeaLiE9j4ankS_phkxa_qrN9g1Q.roa (hash: aTNhEv7p3O+ErWEZXlpo2u9L43e8YHpY2vq29krIAK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:21:ae:21:cc:3c:dc:6e:2b:10:f8:e6:dd:1c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Validity
Not Before: Mar 1 17:00:28 2026 GMT
Not After : Mar 2 17:00:28 2026 GMT
Subject: CN=7afbf3e4b759536b08cc1fe4a4e063936fd16d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:e5:97:62:ef:0a:25:03:a4:d4:de:90:c0:
18:44:a0:51:37:5a:7f:99:dc:87:fb:cc:97:8e:16:
10:86:e1:2a:3e:6e:db:33:45:eb:e0:bb:9f:70:fa:
dd:73:a3:a6:5e:dd:00:15:cc:2a:5d:d8:05:e2:92:
47:89:a3:79:d2:fe:65:a1:98:a0:00:a6:e9:b6:3d:
c6:9e:58:6b:18:fa:38:81:5a:04:23:ca:1d:53:9e:
f8:96:f6:3b:3f:b0:ff:86:dd:fd:ac:64:5a:3b:a8:
28:26:a5:66:a3:a0:21:69:27:a9:3d:6a:41:df:9c:
31:be:9c:14:7b:f9:44:6a:20:d1:0b:f3:cf:c2:58:
ed:a9:7e:bd:41:04:92:76:8c:b0:bf:c0:b0:f0:4b:
fd:8e:9d:d9:05:a0:3e:9d:35:7e:61:99:4b:2d:c5:
d5:aa:16:2b:07:49:33:f4:e3:46:fe:80:e5:5f:ca:
a1:37:d8:eb:f1:2f:b9:8d:12:0b:73:f5:af:6d:55:
9c:e4:e4:9d:bf:94:cc:db:a5:f6:9a:da:59:76:7a:
ba:8d:22:e3:c2:25:95:fa:a1:32:c0:09:d6:3c:3a:
a6:5f:78:4d:2f:b8:fa:4c:3b:fd:f9:ca:fa:31:7f:
0c:03:64:fa:69:64:40:70:ae:8d:60:7b:f4:e1:e1:
b4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FB:F3:E4:B7:59:53:6B:08:CC:1F:E4:A4:E0:63:93:6F:D1:6D:94
X509v3 Authority Key Identifier:
keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ae:11:78:72:bb:6e:e4:aa:c6:32:1b:da:23:9d:23:6b:5e:
9a:9f:17:e1:80:11:b2:7a:b7:e2:9f:21:c6:21:41:a9:f7:43:
e7:1d:00:7d:b3:33:e9:17:4e:f9:b5:4c:8a:b5:df:f4:39:f6:
e8:bc:ab:a2:4d:4f:57:a4:8b:4b:87:fa:76:c9:82:2e:ea:9f:
27:31:53:a5:35:53:f7:cf:d0:20:2d:04:49:e1:a3:dd:4a:d5:
b0:e7:38:86:b4:64:62:3d:1f:0e:00:dd:79:96:64:ea:75:96:
ea:d1:b6:5f:2f:00:09:de:97:18:54:b7:70:e5:ec:a5:50:bf:
7e:93:0a:44:a1:09:42:37:47:0f:0f:aa:4e:82:62:45:89:40:
4a:43:8d:94:17:7d:2c:f7:63:59:5d:74:75:31:f4:9d:dc:93:
71:bc:07:29:94:6c:c1:81:85:6a:b6:57:6a:5d:5a:34:7f:ba:
f9:fd:ff:68:7f:08:19:34:6f:e6:f9:0f:01:f4:ef:af:e2:86:
a0:af:e5:27:68:4c:ff:3b:af:3d:6f:b7:80:d8:0f:ba:be:c1:
42:47:5c:a0:ad:4b:69:24:c4:11:e1:f3:88:85:bb:13:dd:b7:
d3:a1:31:c0:18:61:60:cf:87:6e:6d:fd:25:41:9a:e4:6e:83:
33:12:85:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWCGuIcw83G4rEPjm3Ry5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDZmZjQ1Y2U1MDU1N2VkYzRjMDMwNmUxZjg2OTQ4MmFk
NDIzZTAwHhcNMjYwMzAxMTcwMDI4WhcNMjYwMzAyMTcwMDI4WjAzMTEwLwYDVQQD
Eyg3YWZiZjNlNGI3NTk1MzZiMDhjYzFmZTRhNGUwNjM5MzZmZDE2ZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0nll2LvCiUDpNTekMAYRKBRN1p/
mdyH+8yXjhYQhuEqPm7bM0Xr4LufcPrdc6OmXt0AFcwqXdgF4pJHiaN50v5loZig
AKbptj3GnlhrGPo4gVoEI8odU574lvY7P7D/ht39rGRaO6goJqVmo6AhaSepPWpB
35wxvpwUe/lEaiDRC/PPwljtqX69QQSSdoywv8Cw8Ev9jp3ZBaA+nTV+YZlLLcXV
qhYrB0kz9ONG/oDlX8qhN9jr8S+5jRILc/WvbVWc5OSdv5TM26X2mtpZdnq6jSLj
wiWV+qEywAnWPDqmX3hNL7j6TDv9+cr6MX8MA2T6aWRAcK6NYHv04eG0qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHr78+S3WVNrCMwf5KTgY5Nv0W2UMB8GA1UdIwQY
MBaAFDVG/0XOUFV+3EwDBuH4aUgq1CPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUt
NjQwYzc0YTk0Y2M2LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUtNjQwYzc0YTk0Y2M2
LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfq4ReHK7
buSqxjIb2iOdI2temp8X4YARsnq34p8hxiFBqfdD5x0AfbMz6RdO+bVMirXf9Dn2
6Lyrok1PV6SLS4f6dsmCLuqfJzFTpTVT98/QIC0ESeGj3UrVsOc4hrRkYj0fDgDd
eZZk6nWW6tG2Xy8ACd6XGFS3cOXspVC/fpMKRKEJQjdHDw+qToJiRYlASkONlBd9
LPdjWV10dTH0ndyTcbwHKZRswYGFarZXal1aNH+6+f3/aH8IGTRv5vkPAfTvr+KG
oK/lJ2hM/zuvPW+3gNgPur7BQkdcoK1LaSTEEeHziIW7E92306ExwBhhYM+Hbm39
JUGa5G6DMxKFsA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:27:09 2026 by rpki-client