Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
File: Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft (raw, json)
Hash identifier: yPhJs3m2vT8aiIejuA2F2ctlN7wTYmiKLZp2iCYKmnY=
Subject key identifier: 51:A3:FC:DA:96:41:B1:28:8E:17:1A:D2:D5:6D:70:C3:7C:BA:2E:3B
Authority key identifier: 36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
Certificate issuer: /CN=36ea22f04b94078aae015e00957b273ff038cf12
Certificate serial: 01A1BEE4C80B36A8D38F49B289A4C0D3DDE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
Manifest number: 0482
Signing time: Mon 09 Nov 2026 06:00:26 +0000
Manifest this update: Mon 09 Nov 2026 06:00:26 +0000
Manifest next update: Tue 10 Nov 2026 06:00:26 +0000
Files and hashes: 1: 1-nEjApMTEeRJIn7bUOz0OxxiBq0.roa (hash: lbYjjUbr12AR7hdRUjgCrN5cjs0fc01uAnttT1Qjcw4=)
2: Da4_S4SNOtv4x_AyFwLO2iZ2NTk.roa (hash: xJscPnkxP4a5FF40dHDyxZzM/Ukqt+kncsmZfw6FDtk=)
3: Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl (hash: TYtBtKlXMg5hCS/JKNzoocoqorSuGIk9ssDWZ9Ave3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:be:e4:c8:0b:36:a8:d3:8f:49:b2:89:a4:c0:d3:dd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea22f04b94078aae015e00957b273ff038cf12
Validity
Not Before: Nov 9 06:00:26 2026 GMT
Not After : Nov 10 06:00:26 2026 GMT
Subject: CN=51a3fcda9641b1288e171ad2d56d70c37cba2e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:fb:b7:2e:a5:9b:c1:9d:9f:8b:43:ed:2a:
03:27:6e:d4:c8:1b:68:e1:4f:3b:ce:8a:10:1e:9a:
23:d5:8a:19:b2:a4:14:a0:53:9b:5e:3e:c5:0f:3e:
70:fc:7e:1a:a5:d2:f7:fd:be:54:d3:5a:a2:01:fd:
25:ba:95:76:f2:26:8f:e2:26:21:62:6c:3e:84:65:
f1:18:24:f8:21:e1:eb:a8:44:1d:a7:f1:ba:ee:62:
30:2a:a1:6b:ae:4f:de:2c:12:e8:c6:97:41:b7:47:
45:e3:3a:b2:5f:5f:f6:62:f5:a4:a1:2f:1f:c0:32:
f7:65:7e:6e:96:b0:50:bc:5e:79:3c:28:42:fc:5a:
55:54:1c:ac:51:2c:b9:15:86:5b:ce:af:c9:5f:c7:
58:cb:2d:87:93:18:d9:d3:55:9c:be:db:0a:f2:1a:
0a:87:42:72:25:cc:9a:3c:c5:91:8b:0c:d7:5a:4b:
8b:0b:2d:4e:77:c4:13:d8:00:c2:57:65:1a:90:50:
28:a5:0f:8e:d2:4c:55:85:78:47:3e:fa:31:0b:64:
33:9c:2a:9e:4c:23:36:77:37:a8:62:bd:19:20:ea:
fe:2c:44:e9:4b:91:d9:f7:c9:cf:bb:8a:e5:a3:7b:
f2:19:7f:11:d4:a7:54:6e:1a:58:56:3b:4b:92:2c:
b8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A3:FC:DA:96:41:B1:28:8E:17:1A:D2:D5:6D:70:C3:7C:BA:2E:3B
X509v3 Authority Key Identifier:
keyid:36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d4:07:87:da:16:ed:54:7b:e7:f2:29:24:0f:1c:c4:16:42:
4c:31:eb:b5:3b:df:13:a6:da:58:aa:b9:72:c8:2c:3c:31:3a:
01:3e:c1:eb:2e:cb:5a:10:db:61:bb:fb:d2:64:52:7f:18:2d:
0c:39:5a:64:df:f1:95:cf:37:8b:bc:27:69:38:ad:1b:fd:90:
a6:0b:67:6c:cb:e2:5f:78:25:2f:89:80:01:60:22:86:6b:59:
1b:9c:2d:5c:38:a5:ac:28:c9:6d:1e:12:31:81:7c:a7:45:ec:
f6:89:90:e4:ad:a7:ef:56:1d:07:38:76:c1:ba:31:a3:e8:ee:
e2:b9:22:fa:99:f5:cf:0b:3c:c1:dd:a2:94:f8:92:25:81:5e:
3e:5f:b3:b4:32:ea:5d:08:62:e8:f0:55:0a:ac:95:d6:74:72:
b0:49:4d:76:69:b5:89:c9:cf:57:65:33:56:c0:22:5c:db:0e:
d8:4e:bc:42:58:4a:9b:4d:16:b2:94:a7:c2:08:f2:30:1d:19:
7f:44:3b:61:02:cd:17:ad:1b:5c:09:74:b3:5e:d2:81:42:03:
3c:d7:88:69:46:15:f4:b3:d3:6b:0b:82:48:a6:c7:60:db:4f:
ed:ac:e2:39:86:31:2d:2d:26:54:0f:53:2a:8a:bf:95:00:6a:
50:1b:f3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 12:15:41 2026 by rpki-client