Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json)
Hash identifier: V7+JU8rpKOiGbwG4GqQdVPyYaQuOb/vGOIrTST0UNM8=
Subject key identifier: FA:B7:4F:EF:6C:2B:45:77:B5:76:32:F6:CC:C5:98:66:F2:CF:FD:F3
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 01A0DF4F2BE71BE657057DA31E4866E772F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
Manifest number: 1A06
Signing time: Sat 26 Sep 2026 20:01:42 +0000
Manifest this update: Sat 26 Sep 2026 20:01:42 +0000
Manifest next update: Sun 27 Sep 2026 20:01:42 +0000
Files and hashes: 1: WgXn9G5ryVcoOunG4ZvkrJdWw94.roa (hash: TVpzuhy4mtyrOaTWx+19/cTwhYu2EZdbTfL5e2TtoDg=)
2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: 3/FmdLG7Bpczzuhj2oI6Wny+hU0J7dZmACUWqbRvNbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4f:2b:e7:1b:e6:57:05:7d:a3:1e:48:66:e7:72:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: Sep 26 20:01:42 2026 GMT
Not After : Sep 27 20:01:42 2026 GMT
Subject: CN=fab74fef6c2b4577b57632f6ccc59866f2cffdf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:07:87:f8:13:5d:27:8d:28:ed:3d:78:19:
29:8e:b6:5c:3e:07:53:7f:ed:0a:d8:5a:61:75:66:
5f:a9:22:de:fd:f8:38:1d:16:28:66:91:73:25:e3:
2b:2c:f6:fe:b1:cf:10:89:89:25:a3:bf:be:d1:1e:
78:5c:4b:70:1c:a1:e2:4b:d4:5e:f7:e3:fa:d2:37:
14:d5:c3:50:91:22:3a:47:be:e1:1e:30:50:a7:7a:
27:14:7f:26:c0:02:88:c4:65:28:d2:ca:61:b1:5e:
be:9a:21:33:4d:f2:c9:a2:d2:a7:c9:e4:c9:d5:68:
19:af:95:5e:ba:33:0f:b8:0d:8a:b3:60:f9:4c:0f:
f5:c9:d6:93:72:02:10:cc:d0:b3:42:02:b5:0d:72:
54:ed:67:50:5c:80:2d:86:20:11:8b:48:76:77:0f:
9d:af:eb:c9:e9:5e:3b:74:8f:05:22:98:2b:be:55:
30:05:eb:7f:73:7d:56:6d:4f:a0:1d:4d:a4:3d:55:
a7:a1:0e:21:f7:ad:ac:1f:02:ed:0c:75:56:1e:da:
fa:8a:41:85:86:eb:78:ee:b4:94:be:e6:0d:90:e0:
a6:29:bb:60:78:b4:36:8e:7a:cf:03:af:ea:2b:77:
43:2b:9a:9b:8b:09:fb:74:c9:c6:bf:d8:aa:55:7d:
63:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B7:4F:EF:6C:2B:45:77:B5:76:32:F6:CC:C5:98:66:F2:CF:FD:F3
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:53:07:89:22:57:d6:23:95:a3:e3:17:9f:aa:81:7e:46:d4:
57:b9:65:08:54:ec:67:61:c9:44:0c:53:9c:cc:52:e1:b9:89:
31:d2:ab:7f:13:69:4c:87:4d:bd:99:13:b1:42:91:a7:ce:5c:
54:fe:93:2e:84:81:7b:9f:e9:15:ba:22:4d:4b:a4:a1:91:29:
b8:df:11:36:f4:91:b2:a6:83:b7:5a:67:80:8f:95:15:4a:8a:
51:29:a3:78:74:e1:e7:9f:ff:c2:8f:18:35:18:47:57:d8:21:
c0:7a:af:dc:21:35:de:dd:3c:4f:e3:d1:5a:67:3c:0c:c8:db:
73:1a:37:86:00:83:74:70:38:53:52:0a:db:7e:51:93:96:ba:
83:0a:58:27:ff:c6:d3:be:c1:09:1d:2d:d2:38:c9:a9:dd:b7:
b8:5c:1d:a3:42:3a:fd:05:26:1c:47:80:00:7d:cd:70:2f:47:
b3:f8:15:71:21:aa:6b:80:c3:a2:dd:21:59:8e:1c:df:27:fe:
4f:ea:4f:0b:1f:9d:69:b4:f3:de:00:76:e5:79:79:6b:e6:86:
a5:f6:4d:b9:5b:9f:38:8f:6f:03:18:d4:5e:be:e9:f4:ae:33:
41:96:45:50:ef:f8:20:8c:b4:25:75:70:65:b7:8f:35:65:11:
80:47:67:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:51:19 2026 by rpki-client