Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: l6KDy18ib7jZexQ/NPM+9XEC+j5LtywTcmD+jbaoong=
Subject key identifier: 3E:C6:08:F6:E7:58:CA:5D:D3:E1:4F:19:8E:61:69:7E:1B:82:61:69
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 01A0DCBBCC89BAF4002686B0CBA9A71BFA31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 1A84
Signing time: Sat 26 Sep 2026 08:01:30 +0000
Manifest this update: Sat 26 Sep 2026 08:01:30 +0000
Manifest next update: Sun 27 Sep 2026 08:01:30 +0000
Files and hashes: 1: DdkhG9ScS5mKOj6FEPIiUrVTDGA.roa (hash: JddADCbKnFgd2w/G6EyTsDQqGgZM9PxBGHiXPX0tQCk=)
2: Kfpukp1mfPmVOexK4iRI3WWUkLE.roa (hash: dRxylayWUvJFav2jQoF/w0hiqJLQbgosTCaGTxEw3QY=)
3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: sjUu5ufNE4sIjHuLgtid9GC6i6Brr/WSis3ZBJcT2IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:cc:89:ba:f4:00:26:86:b0:cb:a9:a7:1b:fa:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Sep 26 08:01:30 2026 GMT
Not After : Sep 27 08:01:30 2026 GMT
Subject: CN=3ec608f6e758ca5dd3e14f198e61697e1b826169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2f:f8:36:71:a1:20:d0:3b:24:c9:d4:9d:a6:
a1:2a:3c:8c:eb:74:56:1e:a0:aa:c7:e6:bc:1e:cc:
f6:fe:82:44:2a:f9:36:4b:13:0f:cf:d6:58:e6:24:
2f:30:29:8c:ff:6b:bd:3f:8c:1d:9b:e2:02:6e:82:
f8:60:a7:f2:9c:2e:c6:ac:1e:31:6f:d4:c5:96:08:
ca:0a:00:72:87:a7:79:d8:90:0e:a5:3a:d9:ce:1a:
31:db:d6:08:92:cb:53:67:48:db:4d:7d:a2:34:78:
f4:f4:f9:f4:92:b0:b0:97:e4:aa:63:7e:b8:ae:ca:
cb:7e:85:dd:bb:0b:76:e4:d6:13:74:ce:49:db:fa:
e1:37:aa:64:ae:86:03:14:47:72:8c:fd:72:94:e6:
01:57:ee:d8:f4:8e:4d:8d:ae:ab:31:1d:4d:7b:fc:
6e:91:00:8a:53:80:79:14:9a:f8:bb:03:76:c1:5a:
5f:f4:6a:3e:2c:7e:49:b8:83:e5:f7:5d:f1:10:9a:
15:01:c5:d8:bc:39:f7:4a:a2:19:44:fe:88:4a:cd:
0d:42:ed:40:47:0b:9d:1e:98:7a:69:9c:5a:71:19:
ba:87:e3:10:13:9d:f5:c3:44:84:4d:e6:c1:ce:ae:
9e:60:31:14:10:51:fe:31:62:49:e8:04:08:7e:5b:
37:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C6:08:F6:E7:58:CA:5D:D3:E1:4F:19:8E:61:69:7E:1B:82:61:69
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ba:0c:22:fb:4c:e2:f2:33:4a:76:e6:93:cc:fe:31:3d:f3:
5b:d0:ae:55:8e:e8:4b:9a:36:88:4a:cd:6a:f6:b7:13:b5:e9:
1f:aa:22:4e:cb:42:4d:f9:c0:68:3e:98:fd:d2:02:20:13:64:
82:89:c5:56:fc:56:6b:94:24:cc:b8:d1:3f:be:08:e9:5a:63:
3d:5d:8c:78:ae:83:c0:60:3e:43:cd:c4:55:95:8c:27:63:73:
eb:4b:40:88:05:1f:63:26:c8:8a:32:80:52:ab:6c:d9:1d:6e:
b9:e6:f8:6e:b5:5d:b4:71:d4:b0:51:a8:ba:e5:30:18:7f:9c:
38:cf:19:17:77:17:c0:b7:00:85:24:a4:0c:c6:12:b1:08:93:
49:41:e9:89:5a:22:c1:f2:4f:48:e4:dc:0d:62:00:d1:1c:38:
30:64:f6:92:b6:41:3d:09:ec:3a:f7:a7:53:a9:b9:9d:cf:fd:
88:9d:32:f2:ab:4e:76:01:07:ee:76:7b:e5:ba:29:ed:33:54:
f0:2a:a3:fa:8d:99:0c:57:10:be:f1:fb:c8:d3:5b:87:a4:b4:
d8:c6:7a:5f:81:b6:15:51:6a:0c:04:b6:f3:1e:bd:6b:fe:77:
2c:ca:0c:19:38:f3:53:81:87:ae:ff:57:71:70:24:78:cb:b4:
b5:0e:07:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:54:04 2026 by rpki-client