Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
File: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft (raw, json)
Hash identifier: ORo3I+S3tRTY/Wyh9+k/3khsdEqhS07n10NHJUi8Uao=
Subject key identifier: 4D:0C:F5:28:36:FF:2B:20:E5:EB:74:49:A2:04:CD:3B:18:64:67:9D
Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Certificate serial: 01A0CD11AE661DE243F6D3D29C0B4978E5CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 07:01:23 +0000
Manifest this update: Wed 23 Sep 2026 07:01:23 +0000
Manifest next update: Thu 24 Sep 2026 07:01:23 +0000
Files and hashes: 1: Cu4pJx-r5WHHtQlLqPIl7Qbn6a8.roa (hash: nvdmwUw2DJYlyGm2Jpi5RTC+E3z4Xl1tYxTpqZlijT8=)
2: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl (hash: n2PJ7/HpnNFaHGdR1PgIsX0xhycaQFMu0feXxd5SOKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:ae:66:1d:e2:43:f6:d3:d2:9c:0b:49:78:e5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Validity
Not Before: Sep 23 07:01:23 2026 GMT
Not After : Sep 24 07:01:23 2026 GMT
Subject: CN=4d0cf52836ff2b20e5eb7449a204cd3b1864679d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f8:87:67:23:c8:91:b3:4a:92:1b:94:86:57:
78:65:6a:e0:82:99:b9:1a:bc:a6:72:4b:47:73:c8:
b5:8c:67:05:09:99:e3:f2:8b:15:16:ed:eb:91:82:
2a:04:ca:0e:b6:13:cd:34:c0:d5:c9:a1:b2:83:64:
02:02:fc:23:80:2f:34:fa:d9:77:ae:ea:b7:80:ad:
31:83:8e:3e:21:1d:b2:82:9d:74:18:ff:ce:6d:11:
0c:32:b2:c4:27:9c:da:ed:89:01:1a:7f:2f:95:12:
5e:1e:50:b9:13:c4:17:1a:e0:88:2f:c7:62:bd:47:
1d:9f:13:14:5c:68:7b:a2:a3:bf:8e:de:8f:ed:a4:
41:7a:3b:ff:e2:45:84:41:b3:01:d3:70:6d:d9:60:
41:f9:87:ab:d1:d6:91:0c:e1:ab:5d:a1:2d:03:02:
cf:4a:9e:ee:fe:46:d9:3f:87:84:7f:d0:c1:5c:93:
df:1e:16:03:82:e1:46:3d:e3:7c:51:1b:97:ab:d3:
ce:30:86:f4:d4:3e:6f:60:18:41:ca:05:00:a6:58:
90:75:37:3a:14:fa:7b:b5:8e:44:1c:07:12:09:df:
9b:41:35:7d:1b:6d:bc:df:eb:37:53:b4:bc:18:e5:
b3:6c:73:e7:f4:30:87:e7:5e:91:7e:52:e0:1a:26:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0C:F5:28:36:FF:2B:20:E5:EB:74:49:A2:04:CD:3B:18:64:67:9D
X509v3 Authority Key Identifier:
keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6e:11:cc:a7:cf:e8:44:58:0f:9b:42:55:24:b8:fd:ec:ff:
a0:71:44:e0:e1:d0:42:f2:6f:47:e3:35:93:66:09:c1:d6:12:
81:d4:5c:13:80:26:86:80:7f:ca:e2:36:15:e4:62:69:c1:e7:
5f:0e:a1:bc:06:50:54:5f:af:63:97:ef:19:66:3c:7c:ac:e9:
ef:aa:b8:f2:b7:05:12:d4:f8:32:48:8f:e3:42:8a:29:e6:29:
b2:41:40:4d:84:a5:4b:5f:22:d0:2c:96:27:6e:81:99:96:08:
b2:55:1b:00:65:a5:99:c3:38:d1:12:d3:56:ce:f8:77:f6:6c:
1a:0e:e7:4b:5c:31:79:b0:b9:4b:c2:83:e9:23:b7:1f:cd:42:
7e:2b:bf:02:4f:4f:64:5c:88:39:1b:cc:6c:3a:a1:a6:ee:39:
14:99:91:ca:d1:91:4e:db:f5:5e:cb:d5:51:1a:96:35:53:aa:
18:8a:8d:d3:c5:db:06:a6:04:43:5e:ed:68:3a:a0:11:2e:7a:
dd:8a:5a:6a:f2:e6:eb:f6:8e:25:9e:43:b0:97:0c:01:46:50:
70:d5:ac:fb:3e:09:b3:9a:84:bd:51:e8:66:f9:cd:93:f2:fd:
9c:64:9e:b0:7c:f6:c2:15:c2:43:87:cd:82:a7:11:2f:87:6a:
be:80:77:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:47:04 2026 by rpki-client