Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
File: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft (raw, json)
Hash identifier: MFdz5bB2QS1FHan5l+oXgBnCrKAe9ztdVgqvjnHHRN0=
Subject key identifier: 8E:29:1B:8E:DC:FE:DD:29:EB:3E:BA:BE:F2:70:4B:5A:DE:20:8F:FF
Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Certificate serial: 01A1DF4BFF25AAE6ECA7FB134451F11A9E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 13:01:02 +0000
Manifest this update: Sun 15 Nov 2026 13:01:02 +0000
Manifest next update: Mon 16 Nov 2026 13:01:02 +0000
Files and hashes: 1: Cu4pJx-r5WHHtQlLqPIl7Qbn6a8.roa (hash: nvdmwUw2DJYlyGm2Jpi5RTC+E3z4Xl1tYxTpqZlijT8=)
2: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl (hash: dJxC1jjHCHrm4t/mQYJ5wk5lFiTfQPr2cVgFT18H0CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4b:ff:25:aa:e6:ec:a7:fb:13:44:51:f1:1a:9e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Validity
Not Before: Nov 15 13:01:02 2026 GMT
Not After : Nov 16 13:01:02 2026 GMT
Subject: CN=8e291b8edcfedd29eb3ebabef2704b5ade208fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:e1:66:d1:0c:bb:10:f4:9e:e6:6f:d1:ed:
f8:6b:7e:be:c5:3b:6d:46:11:25:c0:b8:61:a7:e0:
55:e0:e8:2e:53:20:c5:a0:67:b2:ac:21:89:a0:7e:
d2:df:36:6a:a0:81:8f:cf:40:e5:47:50:0a:60:2d:
4c:88:e2:fa:f6:30:f5:9b:39:83:c3:a2:f8:08:84:
cf:ff:ef:8c:b6:08:b3:75:5e:6d:92:b7:1b:b2:70:
d4:6e:0f:74:76:31:1a:b8:d3:ea:e3:af:a5:c2:90:
4f:a9:14:ba:44:82:c4:c7:21:9a:6f:6c:d6:85:e8:
e8:4c:5c:a1:f4:5e:92:65:8c:2b:b1:b1:aa:48:00:
a6:4d:f7:8c:59:1a:86:37:22:01:11:bc:d7:82:96:
e3:b8:23:4c:77:60:f1:63:02:c1:7f:ca:1b:2a:05:
71:a6:15:37:4d:11:ba:27:7c:75:35:7a:1d:4a:c0:
1a:44:84:91:8d:3b:82:81:7d:c3:6a:57:80:39:9a:
2e:1a:f1:99:7d:2c:4d:d5:31:1f:37:cc:9c:88:dc:
a9:cf:b6:f6:d6:b4:77:42:ad:cd:60:ac:ed:4b:1b:
71:47:7e:d8:08:3f:35:c7:be:29:58:39:8b:0a:68:
c0:34:10:a1:c0:0d:a9:51:2c:6c:c0:33:0e:a5:e5:
6e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:29:1B:8E:DC:FE:DD:29:EB:3E:BA:BE:F2:70:4B:5A:DE:20:8F:FF
X509v3 Authority Key Identifier:
keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c9:45:6e:61:a8:ce:24:47:68:b3:26:83:24:ef:ed:d9:08:
2e:fb:46:fc:2d:3c:cb:95:39:2b:2e:60:65:2e:07:8c:49:cc:
b6:aa:9f:64:ad:9d:d5:1a:54:42:1f:2f:2b:23:1e:43:bb:13:
b0:bc:05:08:b1:69:20:67:c3:b0:1b:22:33:35:2f:59:42:cd:
22:72:8e:d8:a8:91:0a:f5:73:f3:5d:44:31:e4:cb:32:66:55:
3c:01:da:b4:35:a1:e1:1c:40:d2:90:2e:e8:e7:d9:85:29:f7:
23:49:9d:5b:7a:b0:aa:6a:f1:05:c8:19:9b:ff:dc:a1:af:7b:
49:62:f9:f9:c6:bc:bd:52:0b:07:3e:74:9a:44:ac:8d:1f:4c:
a3:d2:0a:3f:bb:ce:da:9b:32:30:7f:d1:03:b4:64:da:81:da:
95:71:6a:02:7a:ec:91:2a:97:bf:9b:df:e7:34:03:43:92:2c:
4d:3c:39:1e:c9:6d:12:db:a8:81:7c:c9:ae:75:41:5b:45:c9:
5b:32:ef:79:bb:70:3c:2d:86:51:75:8d:af:59:8a:93:9c:4d:
e9:11:95:1f:2d:f3:ea:4a:4f:58:72:97:b1:89:69:33:4a:dd:
be:f9:de:69:a9:4d:9b:4c:fd:2b:e6:70:4d:87:7a:8a:8d:21:
59:28:5a:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfS/8lqubsp/sTRFHxGp4+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNzQxMzViYjA3YzY1NDBjZDMwN2JkYTA4Y2EwNjc0YmM4
NGM5MzkwHhcNMjYxMTE1MTMwMTAyWhcNMjYxMTE2MTMwMTAyWjAzMTEwLwYDVQQD
Eyg4ZTI5MWI4ZWRjZmVkZDI5ZWIzZWJhYmVmMjcwNGI1YWRlMjA4ZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneHhZtEMuxD0nuZv0e34a36+xTtt
RhElwLhhp+BV4OguUyDFoGeyrCGJoH7S3zZqoIGPz0DlR1AKYC1MiOL69jD1mzmD
w6L4CITP/++MtgizdV5tkrcbsnDUbg90djEauNPq46+lwpBPqRS6RILExyGab2zW
hejoTFyh9F6SZYwrsbGqSACmTfeMWRqGNyIBEbzXgpbjuCNMd2DxYwLBf8obKgVx
phU3TRG6J3x1NXodSsAaRISRjTuCgX3DaleAOZouGvGZfSxN1TEfN8yciNypz7b2
1rR3Qq3NYKztSxtxR37YCD81x74pWDmLCmjANBChwA2pUSxswDMOpeVu/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4pG47c/t0p6z66vvJwS1reII//MB8GA1UdIwQY
MBaAFJ50E1uwfGVAzTB72gjKBnS8hMk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQt
NWRjODBmYWVkMmRjLzEvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQtNWRjODBmYWVkMmRj
LzEvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8lFbmGo
ziRHaLMmgyTv7dkILvtG/C08y5U5Ky5gZS4HjEnMtqqfZK2d1RpUQh8vKyMeQ7sT
sLwFCLFpIGfDsBsiMzUvWULNInKO2KiRCvVz811EMeTLMmZVPAHatDWh4RxA0pAu
6OfZhSn3I0mdW3qwqmrxBcgZm//coa97SWL5+ca8vVILBz50mkSsjR9Mo9IKP7vO
2psyMH/RA7Rk2oHalXFqAnrskSqXv5vf5zQDQ5IsTTw5HsltEtuogXzJrnVBW0XJ
WzLvebtwPC2GUXWNr1mKk5xN6RGVHy3z6kpPWHKXsYlpM0rdvvneaalNm0z9K+Zw
TYd6io0hWSha8A==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:28:06 2026 by rpki-client