Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
File: Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft (raw, json)
Hash identifier: ZoO/WiFgUZn8yPwGlKF0GPI7Ei6QcUVjUtfpehzFNAo=
Subject key identifier: E2:2E:F3:2E:DF:07:03:49:09:E0:85:8D:42:2A:0C:2D:77:AB:03:91
Authority key identifier: 36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
Certificate issuer: /CN=36ea22f04b94078aae015e00957b273ff038cf12
Certificate serial: 019DA3E66BB44BDB7A3565B24445EED685FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
Manifest number: 025E
Signing time: Sun 19 Apr 2026 04:01:20 +0000
Manifest this update: Sun 19 Apr 2026 04:01:20 +0000
Manifest next update: Mon 20 Apr 2026 04:01:20 +0000
Files and hashes: 1: Da4_S4SNOtv4x_AyFwLO2iZ2NTk.roa (hash: xJscPnkxP4a5FF40dHDyxZzM/Ukqt+kncsmZfw6FDtk=)
2: Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl (hash: 0QYkeOmA+EMIKqjgbtofTRueXNn7xxSKTbuzBx8pObw=)
3: ko6ImljslX8xwBeiLCk3I9LplCE.roa (hash: wxQ+AHB8I0TGwqdWlDutPolU/PoZbv8ro+r43WDFBLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:6b:b4:4b:db:7a:35:65:b2:44:45:ee:d6:85:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea22f04b94078aae015e00957b273ff038cf12
Validity
Not Before: Apr 19 04:01:20 2026 GMT
Not After : Apr 20 04:01:20 2026 GMT
Subject: CN=e22ef32edf07034909e0858d422a0c2d77ab0391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:bc:d1:63:82:cf:b6:0b:da:80:7b:0d:f0:
46:1d:1d:f7:ed:1e:9b:d2:fd:07:21:b7:9f:a2:fd:
93:05:7d:e8:b1:ff:05:14:ed:9e:43:45:c9:ff:20:
1c:98:2a:c7:b1:8d:24:fb:31:aa:a4:fb:e6:95:f3:
46:47:10:99:b8:74:66:22:98:26:da:a7:d4:fd:b4:
74:6e:9e:2f:50:85:ef:95:69:09:2c:b3:3a:49:87:
88:b3:58:b3:cb:0e:fd:6d:bf:9f:66:68:0d:c5:ac:
07:2a:15:a6:4f:90:60:a1:72:16:1e:d5:c5:03:18:
63:c9:52:6c:11:36:24:d7:13:66:66:a1:55:03:23:
d2:67:72:40:4c:eb:70:c1:bc:63:a2:13:b1:00:e8:
c5:d9:4d:36:49:62:6a:42:4a:b9:06:3f:23:dc:16:
9e:78:b3:a2:84:3a:7d:61:31:71:da:2b:cf:cc:d3:
1d:b9:f4:32:db:ed:6d:51:c5:dd:5f:45:ca:fe:df:
9c:94:eb:b1:ce:e6:0d:d6:7c:1e:66:67:80:53:44:
06:5d:85:09:69:51:1a:3b:37:67:ad:40:c8:02:f2:
52:74:97:be:77:4f:c5:66:b9:01:ac:07:ee:b4:04:
f7:da:68:e0:ff:06:eb:f4:ce:45:3d:8a:e0:d3:15:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2E:F3:2E:DF:07:03:49:09:E0:85:8D:42:2A:0C:2D:77:AB:03:91
X509v3 Authority Key Identifier:
keyid:36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1d:5d:9a:fb:41:cd:e0:ee:0c:d4:91:e0:ed:e1:a3:9d:3f:
94:8e:6a:0b:55:b8:09:3d:ef:3a:52:d2:46:08:96:e6:d2:59:
65:8c:d8:0e:c9:c3:86:b8:63:c5:79:63:ca:e5:ab:ff:4e:c0:
52:0a:b1:d9:ab:d1:1c:83:c9:ac:92:9f:7a:b8:2f:7c:16:b0:
e5:73:e3:26:9a:20:5c:4f:a8:86:35:cf:a0:84:7b:af:a3:6a:
e2:7c:23:af:31:c7:6a:9e:bc:cc:f6:f4:30:85:27:29:a1:7c:
bb:1f:b0:db:76:cd:ec:fe:c1:04:ab:8e:9b:73:9b:63:3a:70:
61:7e:fd:a4:76:92:37:f8:5e:53:ed:d1:6f:b0:d8:df:63:bb:
e7:39:7d:4a:6f:8c:61:37:44:66:54:d0:53:a9:ca:82:e8:8e:
bd:bf:0e:aa:3a:ef:da:40:77:cf:3c:56:14:3f:16:f9:6e:09:
50:fb:40:82:c2:97:91:dc:24:05:a6:68:20:47:2f:f5:48:23:
67:73:48:58:94:2b:62:80:94:87:c8:15:7a:63:1c:78:9f:37:
03:69:60:af:a4:1b:99:b7:8b:cf:c7:3e:d3:1e:af:f6:c9:b1:
66:a0:80:31:10:f5:90:0a:df:35:00:2b:0f:cf:28:12:5b:d6:
3a:95:cb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:19:11 2026 by rpki-client