Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft (raw, json)
Hash identifier: IMZRQXdoH1Q5SKEJTvXpQp9hFMim66O2YB1LGzXJ+jI=
Subject key identifier: 42:6C:9A:AA:D5:2B:AC:8A:55:0A:05:8A:28:B5:D2:47:9D:B2:81:72
Authority key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
Certificate issuer: /CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Certificate serial: 01A0F41F73585D868CA9B2C5A608E28D6820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
Manifest number: 070A
Signing time: Wed 30 Sep 2026 21:01:36 +0000
Manifest this update: Wed 30 Sep 2026 21:01:36 +0000
Manifest next update: Thu 01 Oct 2026 21:01:36 +0000
Files and hashes: 1: VPUxhPPZmQ_t2CIuXRULtvCIntQ.roa (hash: JY2qHw8weIuLNMEIKFHTYHWziuYJ8rjpGWgwgLDsJ48=)
2: nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl (hash: CR1W73/kaVdqJhzuqvTwDItnCx7Xdj2d5dbodTib0zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:1f:73:58:5d:86:8c:a9:b2:c5:a6:08:e2:8d:68:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Validity
Not Before: Sep 30 21:01:36 2026 GMT
Not After : Oct 1 21:01:36 2026 GMT
Subject: CN=426c9aaad52bac8a550a058a28b5d2479db28172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:27:d5:00:71:45:bb:d5:e8:96:60:f7:a8:
0a:b0:44:2a:37:5d:cc:f2:d7:ff:09:a6:cc:9d:6a:
35:6b:29:6a:f6:e1:12:30:46:a8:8a:55:a8:26:3c:
91:ad:06:4e:1c:20:31:ca:f1:ba:f1:66:71:9e:f7:
f7:e2:3c:65:96:4d:21:5a:91:fc:c2:a1:67:f4:0a:
47:f8:6c:42:35:b3:bf:99:c3:5c:3b:5b:a3:f7:d9:
2c:44:91:f9:ce:8e:5e:8d:7b:90:36:9d:a1:99:ed:
43:41:05:3f:61:df:6a:2a:16:3c:1b:f9:b3:b1:13:
c9:96:34:6f:84:eb:00:ec:76:03:e5:9c:53:dd:00:
4b:aa:32:71:c0:46:60:ac:20:f2:b7:0e:9e:7d:84:
76:3f:dc:ad:ba:35:7b:ef:8e:71:83:34:14:7c:5d:
02:f8:0c:75:d7:a5:9c:16:32:4f:2c:a8:ba:ab:38:
26:2b:cc:22:ef:2c:f6:7a:6d:1b:16:83:d4:b0:e0:
dc:4b:59:07:aa:71:12:14:19:c8:f0:ca:55:26:e0:
32:6c:8c:df:75:1e:f4:56:53:80:4e:c4:0c:fb:74:
d2:84:cc:93:15:af:d9:5e:51:a5:6a:cb:65:50:f1:
b8:e1:0c:5e:44:fb:15:b2:8c:08:0d:33:e8:e2:53:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6C:9A:AA:D5:2B:AC:8A:55:0A:05:8A:28:B5:D2:47:9D:B2:81:72
X509v3 Authority Key Identifier:
keyid:9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:eb:87:24:16:3f:6e:67:df:c4:47:1c:1f:98:5c:77:f3:d8:
6c:8c:9a:e0:bd:be:c5:f0:3d:46:2e:74:e8:71:98:32:85:37:
4d:fe:bc:92:78:0d:47:04:a0:eb:b6:4c:0b:5c:1c:9a:f4:e5:
bc:e2:d5:13:a1:6b:13:d7:10:a2:8b:c4:ff:fa:5d:bd:15:b6:
3b:ea:4e:19:08:a8:95:46:6c:5b:6e:a1:b1:f1:d9:d4:7d:d6:
67:a0:6e:df:b5:70:ef:a7:0d:bb:05:9d:69:71:a4:3f:00:17:
ba:5f:5c:73:06:cc:7b:11:7a:21:02:0c:24:48:d1:94:64:07:
2f:8f:2f:80:f2:9d:21:10:ab:e9:62:b9:71:8c:ed:7e:b8:fe:
b7:c6:3c:9c:b0:7a:36:93:b2:a2:18:b9:49:d0:38:8f:d4:7f:
76:39:41:37:8c:03:ba:bf:bf:6c:2f:2d:71:e5:cf:40:e8:d9:
65:8b:f3:69:de:fe:fc:f4:5c:31:14:4a:06:c1:ca:d7:9b:28:
57:59:58:61:73:24:a8:bc:00:6f:a2:31:d7:b7:b5:4e:c7:50:
dc:1f:60:3b:6c:7b:c3:7f:31:c6:7e:29:56:40:77:61:21:61:
54:8c:4c:10:9f:48:ca:9b:c3:31:44:07:71:c1:89:ba:37:20:
59:19:22:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 10:06:29 2026 by rpki-client