Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
File: n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json)
Hash identifier: qqoQx2u0XiZQUn29iCzgms2oAih03dMbF29z0cnjNlM=
Subject key identifier: DC:F9:B1:1D:C6:95:A5:9E:93:17:F0:2A:26:E9:57:C5:9C:39:00:96
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial: 019D28F251FAA98D7D5DDC1322BD74A7E4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
Manifest number: 1343
Signing time: Thu 26 Mar 2026 07:01:02 +0000
Manifest this update: Thu 26 Mar 2026 07:01:02 +0000
Manifest next update: Fri 27 Mar 2026 07:01:02 +0000
Files and hashes: 1: BCsvI1mqtMkrqM1Desz65UxbMeU.roa (hash: oNMs5i3Xy1K3iMANMRawDJNBdjBrE5KXc5y/my453cw=)
2: LI0sVfoUzK1z9YOT5-FCjcJGQ0I.roa (hash: L0O8mT469MCzuE1WS6kEM7aYWqcvleiuYLagt0EiSfA=)
3: eFneRI8NVirY9FXkrSGjf8r8DIg.roa (hash: eg6+J92P4U7OROkq5yxujy7G7w0DLDuwMs/a/0cX+a0=)
4: hd7rQeulDecBxJXUMXx1KtWshog.roa (hash: E7bJmyCV3Xzny9dpUYDbi35SX9UwJAseA3WYq0vr1AA=)
5: jKCgpxt1ADjjHAE5Am2jfuifPn8.roa (hash: XeGQ/DX/ECCSWySWuH3BuJMwUzvEFlXF4fBqBfaoS58=)
6: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: QtT+YZMco+7c0DPHnrfEGbj2AnwBI5lmFep9RpgeJGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:51:fa:a9:8d:7d:5d:dc:13:22:bd:74:a7:e4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Validity
Not Before: Mar 26 07:01:02 2026 GMT
Not After : Mar 27 07:01:02 2026 GMT
Subject: CN=dcf9b11dc695a59e9317f02a26e957c59c390096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:ab:c1:2e:81:06:70:9a:01:89:11:63:54:
37:15:22:79:4b:e8:44:54:64:1e:10:7b:f6:d9:95:
e1:7e:bb:eb:ca:92:8e:a2:31:de:ed:ee:36:37:d1:
7a:6b:a7:13:c3:f8:91:d0:df:d2:88:16:0f:3f:3e:
a8:71:55:13:8a:3e:c9:3a:2b:42:87:ee:20:a3:3a:
b5:af:25:d7:ab:8a:7d:8f:8a:99:a9:63:44:89:7a:
fc:ab:a5:72:33:68:86:8d:44:b2:43:e4:61:52:4a:
5f:00:1f:37:62:a8:3c:e9:26:ca:5c:53:21:02:e5:
ef:15:40:df:3e:7f:5b:04:7d:44:4b:3c:db:01:fc:
ce:e9:d9:91:f7:ca:78:d9:44:00:c1:88:bc:4c:90:
a1:c9:9a:da:96:a6:d8:c8:b7:5b:dc:6a:3f:db:cc:
52:44:b2:33:6c:42:c2:11:36:c7:c0:d1:8c:5e:c7:
98:ee:53:29:f4:fe:66:1a:83:86:15:a9:ed:e1:95:
ea:c2:a2:f9:ea:e4:d0:f1:3f:01:f2:c0:28:97:76:
ee:48:56:9f:93:e7:19:47:ac:fc:ea:0f:db:a1:a4:
39:da:5a:cb:3c:f8:8d:be:d8:8b:84:bf:71:fd:37:
45:b1:36:38:36:bb:07:06:d9:0d:79:8b:d2:b5:f7:
e2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F9:B1:1D:C6:95:A5:9E:93:17:F0:2A:26:E9:57:C5:9C:39:00:96
X509v3 Authority Key Identifier:
keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:15:e8:53:d4:98:51:eb:88:9c:7c:17:a3:35:44:27:87:ce:
5e:e0:a0:1e:62:2f:aa:0d:32:20:2e:b3:69:ae:3c:99:9e:59:
cb:c2:3b:f0:ea:8c:9b:0f:e8:41:83:89:aa:f0:ed:87:b3:09:
7a:0c:ae:a3:76:bb:36:b9:de:74:4b:e0:0f:3f:86:db:32:d3:
28:1b:a8:96:bc:7b:f2:02:20:b9:f0:c4:9f:58:eb:03:74:a4:
0d:e7:e2:3f:47:7d:be:7d:80:97:7b:cd:ca:38:b0:c4:2f:6a:
1d:e3:95:80:16:f1:11:12:e5:c3:89:37:80:a3:25:1c:84:7c:
77:0f:a6:a1:18:a1:4a:dc:b8:25:d5:4a:01:45:9d:5f:c0:88:
68:bf:20:b0:e7:3e:3c:5c:7e:30:79:90:85:3f:6e:c0:44:71:
03:d9:b4:f4:e0:6d:87:e1:31:81:6e:fd:15:5d:db:a6:1b:37:
86:b2:2a:c2:28:a8:ef:a9:b1:5c:83:e1:14:a2:24:29:30:47:
ef:9c:fb:cb:b7:00:4f:9e:cc:eb:dd:ca:dc:e4:f2:b7:0f:b4:
13:29:87:23:07:7b:3d:48:24:6c:dd:ee:df:cc:f1:01:a3:0f:
45:ee:1f:ca:24:47:59:79:21:56:c3:09:5a:57:07:d7:80:91:
2e:04:46:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:37 2026 by rpki-client