Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
File: nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft (raw, json)
Hash identifier: bzxFTyQE4WDcFT8Z5YY/HaONCCfFsk3SD1WY3z9kRlc=
Subject key identifier: 75:E9:23:ED:F7:2F:9C:4D:CA:FD:D4:0E:52:56:14:FF:10:F1:BD:BE
Authority key identifier: 9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
Certificate issuer: /CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Certificate serial: 019D28BB64CAC2B821B412666DFA7724B623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
Manifest number: 13A6
Signing time: Thu 26 Mar 2026 06:01:02 +0000
Manifest this update: Thu 26 Mar 2026 06:01:02 +0000
Manifest next update: Fri 27 Mar 2026 06:01:02 +0000
Files and hashes: 1: QTigOcVAdf_ybq4yALkL6wD-Vpo.roa (hash: GLaLa+CpFjjdWnIOnhYXw5MIYp/169ESCt0275EXVGo=)
2: nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl (hash: tSXq0cJ2rJ+dx1Z18H5NwSeueW2mgM175jm/eP9yTs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:64:ca:c2:b8:21:b4:12:66:6d:fa:77:24:b6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Validity
Not Before: Mar 26 06:01:02 2026 GMT
Not After : Mar 27 06:01:02 2026 GMT
Subject: CN=75e923edf72f9c4dcafdd40e525614ff10f1bdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:71:a6:7b:dd:5e:48:cf:ba:78:6a:c7:f6:
74:fc:2a:14:b0:00:70:b3:97:65:34:b5:d7:35:1e:
ad:13:e0:b1:b1:0d:27:b4:c0:9d:f4:d7:26:5f:55:
31:87:6e:c6:30:a7:51:8b:a5:09:8c:be:93:35:42:
8e:cd:da:cb:53:2c:a3:db:f1:35:d3:76:e3:9e:cf:
da:05:6b:33:99:f0:31:00:22:92:9a:bc:3e:db:75:
40:d8:a2:5c:5c:5c:f8:36:f3:e2:45:8d:99:c3:c1:
16:98:df:73:0f:16:ee:61:e8:f0:11:34:ca:14:0c:
38:ba:4e:c6:cf:18:1d:2b:76:6a:2d:9b:cb:92:f1:
b5:05:53:5a:e9:c3:ee:09:b1:d2:08:dc:93:b5:6f:
a8:8e:44:5c:d1:ed:da:56:37:28:53:1a:2e:6a:3e:
48:ac:8d:ca:4c:62:f7:1f:3c:1c:b3:4a:42:84:7a:
18:b4:d4:26:3e:b6:f6:65:98:00:94:13:e6:ec:c6:
86:49:9e:a4:68:07:3b:86:eb:09:6f:56:05:24:e7:
76:2b:20:d0:4a:0f:9b:29:af:a2:f5:25:d0:a7:cf:
1b:64:0f:43:44:ba:23:33:71:6e:56:1a:d8:62:d3:
fc:0b:7e:a2:3b:d6:6d:6f:93:fe:52:b8:d9:6b:ab:
4d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E9:23:ED:F7:2F:9C:4D:CA:FD:D4:0E:52:56:14:FF:10:F1:BD:BE
X509v3 Authority Key Identifier:
keyid:9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a8:54:fe:41:e1:de:85:3c:5a:38:e3:ed:07:79:9d:fc:3f:
5b:be:38:5e:82:72:46:f1:e0:78:b9:1d:22:f5:62:12:d7:5d:
b1:29:00:39:a4:ec:dc:e7:e2:f5:d8:8c:7c:cc:b6:c4:99:78:
0e:2c:b4:a5:e1:68:63:28:1c:7d:e3:48:7b:c0:ad:e1:81:2a:
af:97:84:ed:31:2a:8f:71:2c:ca:16:64:ed:b2:bf:11:91:46:
a7:83:b0:67:0f:11:52:12:11:6e:2c:b6:57:cc:77:e4:76:58:
20:d3:6c:d8:05:f2:66:b5:94:42:d5:bc:8d:d8:af:c6:27:47:
47:22:4d:6b:fb:43:cf:c9:e2:f6:69:86:8d:79:8e:d7:fc:7d:
90:e5:0f:a7:76:18:f5:25:9e:b5:34:45:c3:fd:df:d5:5c:87:
e5:ed:37:f3:d2:36:bb:23:63:6b:79:62:37:81:31:ca:73:5d:
45:d1:57:60:dd:92:9f:ca:f4:d5:bd:93:00:0f:e8:99:94:cb:
72:e7:66:fd:3d:2f:94:32:1c:6f:24:1d:30:6e:c1:22:d2:ca:
70:bf:36:4a:b7:6d:12:5d:92:59:11:b7:32:4d:cf:fa:da:18:
fc:a0:e5:e6:59:7a:18:5c:71:62:1a:ea:fd:30:56:ae:ed:09:
0f:4d:b1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:17 2026 by rpki-client