Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
File: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft (raw, json)
Hash identifier: 2FQR0JqFq//Gt8JkiRtTnlw+Kl3FUYhMjkCTDxDufJ4=
Subject key identifier: 89:23:85:ED:44:EA:A7:68:AA:3A:A6:97:D3:22:12:6A:56:A9:A1:5E
Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Certificate serial: 019D266008974D4ECD8D57D370CF076BA9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:02:00 +0000
Manifest this update: Wed 25 Mar 2026 19:02:00 +0000
Manifest next update: Thu 26 Mar 2026 19:02:00 +0000
Files and hashes: 1: Cu4pJx-r5WHHtQlLqPIl7Qbn6a8.roa (hash: nvdmwUw2DJYlyGm2Jpi5RTC+E3z4Xl1tYxTpqZlijT8=)
2: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl (hash: J+ytgUqSHegaCYVttX0NiGgVUVmwERWLOspebS43MT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:60:08:97:4d:4e:cd:8d:57:d3:70:cf:07:6b:a9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Validity
Not Before: Mar 25 19:02:00 2026 GMT
Not After : Mar 26 19:02:00 2026 GMT
Subject: CN=892385ed44eaa768aa3aa697d322126a56a9a15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:68:cd:d1:7b:6e:2b:76:5b:34:1a:33:57:
1e:50:5c:4e:57:5b:62:92:19:ed:83:52:6f:d4:d0:
2b:e8:27:1b:6b:21:67:10:19:5a:c8:01:fc:ac:e9:
36:9c:17:e5:db:5e:f1:17:6d:03:af:2c:de:67:c6:
3c:82:2b:8f:2c:40:9b:29:7f:bb:9c:b4:34:f4:c6:
85:0d:ff:07:14:e7:f0:56:1e:1f:06:67:dc:5b:0e:
86:fd:2c:2e:4a:14:3b:27:0d:cd:0d:fc:f2:7a:ba:
35:eb:d3:ae:be:a6:fe:97:0e:f2:8d:87:7f:19:f9:
27:82:e7:1d:84:05:16:e0:f6:75:f7:31:ed:06:ad:
69:c9:f7:09:28:6b:3c:37:2b:8c:c9:79:44:b7:79:
2d:f5:fb:32:9a:b3:a0:1e:2d:41:7e:c8:1f:7b:b9:
8b:85:b9:ce:30:ba:17:d5:dd:45:33:90:d0:d5:6a:
d6:4c:56:36:c9:2b:17:7a:7f:93:0c:9e:35:db:e1:
4c:ca:d8:0d:9c:6a:9e:b9:13:51:e2:0b:88:7f:9f:
89:bb:3c:9a:d7:4d:ac:3e:49:5b:d7:7b:f9:6c:08:
86:11:78:13:b9:da:14:9e:fe:6a:94:31:f0:b3:68:
d5:88:4a:8d:a4:c0:b6:8f:20:6a:2c:3d:d4:1e:0d:
54:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:23:85:ED:44:EA:A7:68:AA:3A:A6:97:D3:22:12:6A:56:A9:A1:5E
X509v3 Authority Key Identifier:
keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:34:46:5f:1e:a3:9d:6d:b9:dd:5e:69:8c:55:bb:cd:2f:ce:
e0:02:55:cb:09:e9:fb:1e:12:e8:6a:47:db:5c:77:17:8e:5c:
6d:c7:c7:00:6d:76:e6:7a:ec:c2:84:7f:4c:53:ed:ec:f0:d0:
04:6c:e8:13:a1:34:79:e0:d8:25:0c:7a:d9:9e:38:a4:b5:de:
ee:8a:0c:94:93:3a:92:47:e8:40:c7:8c:1f:54:a5:a9:f3:10:
de:f4:b5:cd:79:4c:cd:fe:26:24:39:e9:93:0e:06:e4:8e:cf:
e2:23:11:66:21:13:7a:62:0a:a0:43:7d:ad:49:29:c3:89:c4:
da:bc:c8:d3:33:56:d4:ab:ea:9a:46:1b:e6:7c:62:49:13:f1:
fc:27:7b:94:9a:c2:c5:eb:70:ca:71:aa:c9:78:26:70:6c:42:
83:ab:a2:60:a4:dc:38:6b:34:ce:e7:9c:a1:13:60:53:36:72:
08:56:42:c7:de:b9:81:97:07:8b:3a:c2:ab:44:0e:4d:f5:19:
51:32:74:05:48:c4:a4:a1:1f:ff:34:5d:51:04:f1:7f:4c:72:
6f:f8:38:ac:ad:26:38:ce:6e:d7:f3:a0:70:fd:63:c8:11:66:
4f:64:a3:3c:3b:31:c3:67:a1:2e:4d:f2:fa:71:5d:64:b7:7d:
94:0c:22:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:07:47 2026 by rpki-client