Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: aImh9msm+HncGAMai96FfdxvqnKJJD65NlDwrtUovrY=
Subject key identifier: BA:25:F0:16:A0:E0:72:10:B0:AC:DE:42:63:29:32:4F:9A:85:7B:24
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 019D28849F940BDD746D1A7CDE144BD5B59C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 1899
Signing time: Thu 26 Mar 2026 05:01:13 +0000
Manifest this update: Thu 26 Mar 2026 05:01:13 +0000
Manifest next update: Fri 27 Mar 2026 05:01:13 +0000
Files and hashes: 1: DdkhG9ScS5mKOj6FEPIiUrVTDGA.roa (hash: JddADCbKnFgd2w/G6EyTsDQqGgZM9PxBGHiXPX0tQCk=)
2: Kfpukp1mfPmVOexK4iRI3WWUkLE.roa (hash: dRxylayWUvJFav2jQoF/w0hiqJLQbgosTCaGTxEw3QY=)
3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: pfpjUJcakqzYisy3zzKTyhkspbnOiXkHOtKV+ZmFV/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:9f:94:0b:dd:74:6d:1a:7c:de:14:4b:d5:b5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Mar 26 05:01:13 2026 GMT
Not After : Mar 27 05:01:13 2026 GMT
Subject: CN=ba25f016a0e07210b0acde426329324f9a857b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:a6:45:e9:46:ba:1b:d7:47:61:df:b6:fa:
32:cf:2b:a7:a2:9e:bd:36:88:92:27:f5:9b:8a:5d:
d8:36:cb:0f:b1:30:66:b8:21:50:60:14:a7:4d:3e:
32:c2:70:8f:17:2d:22:98:13:6b:74:76:79:a0:f7:
2c:4c:cf:82:4f:a0:a9:31:0f:ba:3b:80:8c:cc:32:
d8:71:52:2d:d0:eb:f7:ca:6c:cf:fd:e2:4d:a5:a2:
47:74:e5:19:0f:14:ad:be:de:73:49:7a:6e:7d:da:
56:90:a2:63:a1:6e:a4:f2:ac:19:3d:07:15:68:46:
2f:fe:6e:d9:0c:66:79:23:2b:9d:af:78:35:d4:63:
c3:f2:54:af:d0:de:e3:51:8f:34:a4:c6:57:da:0f:
99:eb:41:c4:21:05:89:49:a3:06:4a:4a:f1:9e:34:
4f:77:b7:89:c0:4f:9f:b9:23:1e:70:b2:ca:99:bc:
63:e8:0e:6b:db:5a:94:7b:6c:7c:d4:ca:33:61:c7:
8e:37:30:ba:9d:d0:fa:61:36:3f:e5:f4:95:ed:05:
56:4f:ea:6c:53:ec:db:0e:78:2e:60:46:c4:05:19:
bd:5a:6d:c0:cc:b9:0f:3c:b7:eb:9f:8e:17:8f:63:
30:2f:4e:98:db:d6:29:07:6f:3a:9c:0f:f4:11:b4:
b4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:25:F0:16:A0:E0:72:10:B0:AC:DE:42:63:29:32:4F:9A:85:7B:24
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b1:8f:37:c1:73:75:d2:fa:de:e7:ff:fb:cb:c8:4e:5c:48:
84:64:92:e5:20:ed:13:d4:8c:72:bc:62:ca:68:87:9a:6e:52:
2a:de:67:5d:15:75:3e:00:a7:04:ca:0e:16:57:74:d9:ed:49:
af:fd:44:49:56:84:23:93:03:5d:70:c0:60:82:92:38:cf:5d:
57:be:e3:42:d8:31:b7:c9:02:4d:aa:4f:b1:82:84:fc:c4:5d:
89:11:dc:6c:84:91:9c:0d:d5:29:f3:c8:ec:9d:25:fc:55:0d:
ef:17:ef:f3:7a:0c:0c:5c:b5:51:14:dd:c9:b4:f7:5e:3f:49:
75:04:3b:01:73:21:76:5a:03:d2:7f:68:a8:62:fc:d4:f9:8e:
85:8f:b0:f9:b1:a4:07:af:9a:c4:7b:ea:0d:8d:5f:3d:c3:9e:
d1:cd:49:8c:5c:73:2e:ad:d1:d9:44:c3:ba:a9:c9:d4:ff:18:
1e:9f:24:24:50:31:83:6b:dc:94:36:0c:0a:d1:9e:c8:bd:5f:
ce:30:53:5c:a9:fd:e6:d8:87:c4:3b:ed:e2:49:da:b5:18:72:
03:81:c8:13:29:d9:f6:6c:4c:85:c3:01:ee:dc:9e:80:cf:e0:
fe:fb:ca:2b:a3:d9:db:cc:49:0a:9c:f8:f0:5d:5a:a6:a4:53:
bd:05:50:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:34 2026 by rpki-client