Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
File: Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft (raw, json)
Hash identifier: k22HbzrKtp6q5j7axu4PGBU1rkr08058/67wOyXQf2g=
Subject key identifier: BC:5C:36:21:A4:C6:32:57:A4:8E:A7:6B:21:63:F4:68:60:72:30:B6
Authority key identifier: 36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
Certificate issuer: /CN=36ea22f04b94078aae015e00957b273ff038cf12
Certificate serial: 01A0C1E82492519B10F3FA92641596A9CA32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
Manifest number: 03FF
Signing time: Mon 21 Sep 2026 03:00:11 +0000
Manifest this update: Mon 21 Sep 2026 03:00:11 +0000
Manifest next update: Tue 22 Sep 2026 03:00:11 +0000
Files and hashes: 1: 1-nEjApMTEeRJIn7bUOz0OxxiBq0.roa (hash: lbYjjUbr12AR7hdRUjgCrN5cjs0fc01uAnttT1Qjcw4=)
2: Da4_S4SNOtv4x_AyFwLO2iZ2NTk.roa (hash: xJscPnkxP4a5FF40dHDyxZzM/Ukqt+kncsmZfw6FDtk=)
3: Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl (hash: YE2fBVWfk6H6WL1+vCbHehPYbZG3GBxWl52WiHbuEnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:24:92:51:9b:10:f3:fa:92:64:15:96:a9:ca:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ea22f04b94078aae015e00957b273ff038cf12
Validity
Not Before: Sep 21 03:00:11 2026 GMT
Not After : Sep 22 03:00:11 2026 GMT
Subject: CN=bc5c3621a4c63257a48ea76b2163f468607230b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b3:93:8e:1f:dc:0a:81:b1:7e:72:49:3d:71:
d8:b3:5a:5b:a1:54:76:51:3a:a6:b8:7f:bc:7f:02:
80:61:53:b8:cc:fc:5d:46:53:c6:35:06:3a:76:50:
9d:3e:44:26:0d:58:7f:05:ee:79:2d:64:c1:38:b1:
c1:c8:cc:81:20:10:46:d3:92:8d:d9:48:87:af:a0:
9e:60:fd:84:49:98:52:12:00:2d:ac:f3:81:df:07:
ad:49:1a:79:a6:0b:a8:c2:fa:82:05:3f:20:87:1a:
37:a2:47:62:c9:68:b0:69:6c:f9:ba:a4:7c:05:3a:
2c:35:e3:22:04:42:9b:23:d7:27:7b:63:ce:55:72:
77:91:bb:89:13:6c:bb:59:2f:ac:b9:3c:9b:26:77:
f7:5d:e7:99:a8:51:59:4f:af:37:2b:09:83:f2:38:
9f:d5:26:88:7e:c3:ed:f8:4c:b2:06:71:85:b7:bd:
88:39:d2:16:3c:2e:ed:ae:e8:af:d3:c1:25:20:3e:
19:3b:ab:ad:e9:a9:91:8b:cb:fa:9f:09:76:05:12:
ca:74:9a:f9:40:52:f3:ac:8d:19:86:be:9b:d5:e3:
5d:c5:d1:db:6e:d8:2d:1e:f1:63:09:02:77:06:de:
86:e8:de:af:00:6b:fb:e5:96:ba:6f:2d:e1:49:62:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5C:36:21:A4:C6:32:57:A4:8E:A7:6B:21:63:F4:68:60:72:30:B6
X509v3 Authority Key Identifier:
keyid:36:EA:22:F0:4B:94:07:8A:AE:01:5E:00:95:7B:27:3F:F0:38:CF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nuoi8EuUB4quAV4AlXsnP_A4zxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f3bfcf-b0cd-45f1-ae9e-5c3f76d11607/1/Nuoi8EuUB4quAV4AlXsnP_A4zxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d3:dc:f8:a7:e7:c0:68:1f:a8:a1:7c:34:6c:b5:c2:4d:14:
f6:1d:23:4d:bb:e6:12:49:c0:32:ab:6a:2d:90:fc:bc:7f:80:
e2:36:18:86:d3:ba:9c:06:c7:ad:af:f2:82:d3:0e:8e:87:bb:
f0:bb:83:07:5b:52:a6:41:9c:df:9c:99:7c:d5:62:71:3b:22:
e0:fb:9b:4a:90:bf:7d:e5:b2:be:3b:2c:af:a1:6d:1a:67:67:
fb:ea:fe:49:b9:55:1c:37:16:af:77:86:95:3e:55:ff:4b:9b:
04:a7:48:1f:af:a6:52:58:b3:1c:47:4d:1f:23:49:3a:b4:dc:
4f:44:0c:c8:1a:36:4c:51:5e:28:98:7c:ef:37:94:44:f4:24:
c8:61:f6:10:a8:71:63:6d:25:f0:03:67:01:fb:d3:15:f8:80:
32:3f:ed:d9:c7:5d:a3:aa:5f:81:be:26:6a:14:4b:1a:ab:d8:
3c:c4:b5:e8:c8:25:0a:b3:71:40:10:42:60:1c:d6:43:5d:5c:
d2:7d:ff:e4:21:b4:52:5d:4c:d2:b7:1a:1b:82:4e:21:10:7e:
41:47:92:ba:72:37:d4:05:92:3d:f3:50:2d:0f:21:c8:e3:fe:
66:00:3e:09:a3:da:b2:b4:f1:71:c3:63:7b:78:dc:97:b4:cb:
5f:bc:d7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:14:32 2026 by rpki-client