Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: FHGGSoKokKTWsBHPZB0saBjx66NWsNWZ8vJeiN0hHyE=
Subject key identifier: E6:29:D7:4C:94:F8:2C:5A:93:AB:BC:30:D1:74:DB:C9:09:96:06:0C
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 019E1FB5DC3D1FCAAC1205974E1444A4FDD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 1919
Signing time: Wed 13 May 2026 05:01:12 +0000
Manifest this update: Wed 13 May 2026 05:01:12 +0000
Manifest next update: Thu 14 May 2026 05:01:12 +0000
Files and hashes: 1: DdkhG9ScS5mKOj6FEPIiUrVTDGA.roa (hash: JddADCbKnFgd2w/G6EyTsDQqGgZM9PxBGHiXPX0tQCk=)
2: Kfpukp1mfPmVOexK4iRI3WWUkLE.roa (hash: dRxylayWUvJFav2jQoF/w0hiqJLQbgosTCaGTxEw3QY=)
3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: 3jTz+0ZpSHJv8g9MI0TwNYT/otGouQXwkIxpp+E02iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:dc:3d:1f:ca:ac:12:05:97:4e:14:44:a4:fd:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: May 13 05:01:12 2026 GMT
Not After : May 14 05:01:12 2026 GMT
Subject: CN=e629d74c94f82c5a93abbc30d174dbc90996060c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cb:7d:fe:09:97:b5:85:99:71:be:90:6e:99:
96:44:16:c9:ff:a3:27:bd:23:46:d1:0b:00:7a:0e:
dc:50:a8:e8:ea:09:3d:17:47:9a:0c:6d:dd:dd:b6:
e5:00:50:c4:c4:64:06:fc:89:c1:f9:a5:dd:00:ed:
1b:fe:b8:46:c4:3e:b8:c4:26:a1:37:3d:95:60:cc:
22:01:25:87:49:22:d4:43:80:ff:02:3c:20:64:f1:
f9:d3:8e:b6:a6:4b:c0:68:56:3e:01:c7:45:8f:dc:
b5:08:78:ba:ca:2b:17:91:38:c2:d8:f5:ab:ce:1f:
05:ba:1d:f6:dc:c6:32:3c:1f:a9:4c:e8:a4:bd:82:
4b:0f:92:b8:e9:5a:61:64:ae:f6:ed:87:74:68:e5:
17:c3:c2:be:56:11:01:b7:5e:37:be:75:45:b0:71:
6b:17:f4:d1:3e:51:8d:db:94:35:55:88:bc:a6:eb:
c8:21:f6:5f:6f:6b:b2:28:43:be:00:81:ef:62:7c:
de:f4:2b:50:e2:b8:4b:17:d6:5c:59:34:a5:bf:7c:
26:9f:28:e3:8f:9d:2a:da:5e:2b:f0:ca:14:5c:2b:
93:f6:62:f1:c0:e8:52:20:5f:7f:1d:75:49:e8:9d:
c6:90:01:54:38:70:20:56:d6:9c:62:13:36:9a:4e:
7f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:29:D7:4C:94:F8:2C:5A:93:AB:BC:30:D1:74:DB:C9:09:96:06:0C
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:35:a0:71:5d:de:b1:bf:f6:47:e7:ba:47:c4:fb:db:99:30:
84:e3:11:8c:ad:34:e3:a0:54:ef:a4:eb:a9:e4:12:5e:87:2f:
cb:f2:ff:37:07:bf:75:30:9d:a4:f6:51:72:07:60:7a:fe:cd:
64:9a:71:49:f4:ad:ba:2c:f1:a4:2e:2a:6b:4e:ef:c1:59:5f:
1f:e5:ba:86:74:b8:13:bf:83:9e:a1:2c:c7:28:ea:5d:d9:34:
5c:11:15:5a:26:0c:18:03:c0:f4:6a:25:93:00:43:2d:c3:84:
9d:80:bd:fc:fb:ab:c4:68:60:99:fd:ed:6f:c5:65:a1:c1:c3:
99:a9:b0:b0:7d:36:53:a0:45:fd:de:b1:65:25:37:9c:10:c3:
91:ac:fe:5d:4a:63:8c:14:64:a2:3f:61:a0:15:3a:b6:ed:de:
21:6e:d5:df:3e:84:a6:cf:fb:86:02:2c:f6:09:2a:e9:3b:74:
0a:ad:d6:5f:81:c1:18:7e:37:7d:16:c2:7b:57:44:69:91:7d:
db:81:f9:62:40:b3:2c:ca:e2:3d:2b:6f:0f:bf:9a:2f:51:e8:
9d:33:a3:a4:e7:c2:e9:35:ec:84:6e:62:08:50:86:96:2a:e9:
6c:18:57:22:13:5d:a8:87:4b:40:cc:99:a9:6f:42:c2:f9:52:
2a:b1:fb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:21:38 2026 by rpki-client