Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
File: Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft (raw, json)
Hash identifier: +NjnuBCyyKuKOW3tQyCfAlOdrl66DogSLcXSi9YTELo=
Subject key identifier: 54:8A:AA:04:48:2E:BC:E6:FC:C7:34:C5:DF:4C:E1:15:20:22:02:E4
Authority key identifier: 36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
Certificate issuer: /CN=36ea22f04b94078aae015e00957b273ff038cf12
Certificate serial: 019D9A3E80D589ECD514E2418E669A25290E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
Manifest number: 0259
Signing time: Fri 17 Apr 2026 07:01:20 +0000
Manifest this update: Fri 17 Apr 2026 07:01:20 +0000
Manifest next update: Sat 18 Apr 2026 07:01:20 +0000
Files and hashes: 1: Da4_S4SNOtv4x_AyFwLO2iZ2NTk.roa (hash: xJscPnkxP4a5FF40dHDyxZzM/Ukqt+kncsmZfw6FDtk=)
2: Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl (hash: pyNm1DYng7HFJxk8UlMYPODY/KsgAPZVhf1d2sikrhs=)
3: ko6ImljslX8xwBeiLCk3I9LplCE.roa (hash: wxQ+AHB8I0TGwqdWlDutPolU/PoZbv8ro+r43WDFBLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:80:d5:89:ec:d5:14:e2:41:8e:66:9a:25:29:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea22f04b94078aae015e00957b273ff038cf12
Validity
Not Before: Apr 17 07:01:20 2026 GMT
Not After : Apr 18 07:01:20 2026 GMT
Subject: CN=548aaa04482ebce6fcc734c5df4ce115202202e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:21:82:77:1d:84:9a:80:d1:76:3c:d5:fe:
16:98:30:f5:e5:f2:96:4e:ef:3f:f0:e4:30:1b:7e:
be:c3:6a:a3:44:ca:2e:fd:fd:b5:53:af:98:a8:e1:
9e:e6:0f:61:d2:a3:9b:44:7e:db:12:a1:03:b4:26:
72:16:9f:99:45:66:42:0e:00:b9:a4:05:a1:f3:fa:
bb:78:0e:e1:ed:60:29:42:0a:41:d5:cf:15:9b:92:
70:a8:4a:45:fb:64:e4:f6:d7:32:cd:4b:d1:75:28:
f9:ae:da:0a:06:6f:1f:9f:0f:77:6b:ab:65:77:79:
81:35:76:ed:4d:14:bd:14:14:ca:7a:83:16:c4:df:
55:b5:ac:44:e2:d5:6a:e9:85:0c:e2:0a:aa:ef:c7:
05:39:bd:28:9e:30:a2:f4:65:4c:c4:f0:97:b5:b8:
4c:c2:1f:ce:ff:97:a9:dc:84:21:d7:85:a7:e8:5b:
ba:93:3b:ea:92:6a:b0:17:60:c2:51:02:25:f7:2e:
45:37:a8:84:23:3d:97:9f:8b:21:a4:cb:48:1c:5e:
2d:58:80:b8:b7:68:00:85:77:25:44:c0:cd:24:27:
cd:6f:6a:7c:dd:6a:2f:33:21:04:75:97:da:d9:57:
ae:cf:e2:78:80:99:86:73:d4:b8:79:c5:53:5d:c3:
94:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8A:AA:04:48:2E:BC:E6:FC:C7:34:C5:DF:4C:E1:15:20:22:02:E4
X509v3 Authority Key Identifier:
keyid:36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ab:d6:80:9a:7f:ec:a7:92:fd:02:8e:fe:da:2b:56:bc:19:
e8:f6:e0:f5:1f:77:d1:8d:fb:da:00:dc:c7:e5:6d:fa:ef:f2:
7f:88:ce:50:9a:e9:f2:7c:66:23:35:91:6c:b6:5a:94:55:e3:
71:3b:3d:fd:2f:13:a9:df:a1:ab:f3:81:32:93:a2:b9:62:4f:
cd:35:31:3e:b3:10:44:1c:85:04:d7:8d:3c:0d:56:44:95:31:
5b:c3:bb:b8:22:c2:b2:eb:38:61:26:6d:4b:be:3c:93:34:50:
c5:10:2f:7a:03:5a:a1:97:d3:d7:ea:87:c1:f3:d2:76:bc:03:
4b:5b:53:71:eb:da:76:4c:de:b6:b3:8e:6f:b3:bd:07:d1:63:
17:ef:05:6e:cd:81:c7:de:2f:53:52:ad:a2:77:ff:4d:5d:1f:
e3:d3:c2:8d:ef:43:dd:8a:83:82:b6:0c:9a:34:32:1e:9e:e0:
af:a1:1e:f7:51:e0:1b:41:72:36:07:52:83:19:d8:72:dd:89:
ee:f6:f8:77:eb:bc:05:f1:8c:b6:d2:83:87:ec:3d:a2:4b:b7:
90:46:58:6a:91:6b:8f:f1:a4:f9:56:3b:3c:08:f7:93:4f:c3:
e3:fc:a6:04:01:26:42:f0:41:05:95:6d:13:54:33:2d:5e:82:
8d:dd:29:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:57:03 2026 by rpki-client