Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json)
Hash identifier: MZ1Uve1fxXhfh5PxRqZF/BRU9R+QSd7UfAQvHP+DwQo=
Subject key identifier: 54:B4:C9:02:83:64:4E:36:56:7E:2C:BF:E7:E6:41:7F:7C:E9:E3:5A
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 019D273B3E6A825FEC77DAF48548E13DB299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 23:01:27 +0000
Manifest this update: Wed 25 Mar 2026 23:01:27 +0000
Manifest next update: Thu 26 Mar 2026 23:01:27 +0000
Files and hashes: 1: WgXn9G5ryVcoOunG4ZvkrJdWw94.roa (hash: TVpzuhy4mtyrOaTWx+19/cTwhYu2EZdbTfL5e2TtoDg=)
2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: K9Q07+LyBEdxlhwUQSNjbDZZmawWdOD3Wx+3DhS1x30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:3e:6a:82:5f:ec:77:da:f4:85:48:e1:3d:b2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: Mar 25 23:01:27 2026 GMT
Not After : Mar 26 23:01:27 2026 GMT
Subject: CN=54b4c90283644e36567e2cbfe7e6417f7ce9e35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2e:b3:7b:28:0e:47:48:d1:e8:d6:34:3a:4b:
57:4d:e1:3e:4b:96:36:d6:10:20:76:5b:c3:5e:54:
dd:1e:2d:0d:61:64:fe:14:db:68:c8:76:39:0f:a9:
cf:3d:0f:5a:4b:e0:a1:11:26:24:15:8e:b3:bc:f6:
fe:20:74:15:b2:9f:82:c8:82:1a:d1:9a:b2:f6:02:
a1:ee:fe:60:c6:a4:57:16:cc:0f:10:49:9b:88:ee:
da:ff:d6:f3:5f:ac:cd:e9:79:dd:bf:cc:b4:21:06:
1d:b5:7d:0b:c0:29:f2:05:fb:07:d7:50:ac:4c:ba:
76:80:25:26:ba:b6:b8:64:22:6a:97:00:db:af:f6:
5e:68:0f:cf:10:60:72:ef:8a:d6:58:0d:61:e7:44:
6e:d0:f3:cc:ef:b4:18:c6:96:eb:0c:3d:b5:8f:66:
4b:8e:c2:55:94:5b:5f:42:56:be:e8:1a:41:1f:a1:
cc:a3:68:b4:aa:72:25:7f:1f:a3:12:ed:62:b7:84:
0d:38:44:84:1d:12:a1:c4:1e:f9:da:ac:36:6f:87:
bc:5c:dd:98:32:af:21:73:a1:33:26:ad:73:d2:6a:
85:be:cd:85:4a:c6:f4:ba:34:17:f4:ca:5f:75:02:
35:0a:68:92:97:87:b1:37:8d:cc:18:93:66:4e:37:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B4:C9:02:83:64:4E:36:56:7E:2C:BF:E7:E6:41:7F:7C:E9:E3:5A
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:00:a9:47:c8:8b:4e:05:7b:b4:b2:ea:63:e4:2f:99:01:cb:
4c:52:84:0e:34:97:f3:fa:a8:a2:12:db:d4:35:5f:6f:75:b9:
ff:7a:74:52:cf:2f:3b:56:6d:4c:53:43:7f:f9:ff:13:28:56:
bb:7f:09:24:28:42:06:e1:cd:87:c0:6f:77:94:49:3e:f7:5f:
6b:39:de:8a:85:51:15:48:39:3c:91:a1:94:28:4d:3b:43:9e:
d1:30:55:d0:2a:ef:f3:2a:d9:06:b9:da:08:dc:a4:6e:3b:51:
9b:60:22:0a:03:5a:3f:82:c7:71:a8:a0:5e:dd:88:98:98:ea:
26:b9:45:08:b2:46:81:62:d7:58:43:62:e8:dc:4f:94:db:84:
91:c5:04:9f:49:2d:97:8c:fc:f4:f2:de:80:f5:33:d2:ec:50:
fd:10:07:9f:1f:49:bd:b1:9c:37:bf:57:ac:d4:64:89:76:e3:
dc:bc:0f:d9:2d:6c:dc:46:f9:b0:63:ff:25:64:e0:9a:85:7b:
26:63:bc:52:6a:15:c5:9e:4b:fd:88:0b:71:9a:f9:d4:eb:b7:
5e:76:9e:80:43:9f:cd:ca:b2:15:d8:77:35:11:51:86:9a:84:
12:44:28:19:53:c9:ec:8d:b9:ca:c7:4d:f5:4d:df:0e:b1:a2:
f6:ac:68:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:00 2026 by rpki-client