Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
File: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft (raw, json)
Hash identifier: eDJ3GKQpjPb8ldVxmONSKqnPc49poPW8T+P2kaEJ8/0=
Subject key identifier: F9:E7:7B:5D:5A:94:CF:24:54:D9:DA:58:41:89:00:4E:D0:15:F8:0E
Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
Certificate issuer: /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Certificate serial: 019D284D482BB6EF0337561D532464E8ED17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
Manifest number: 1496
Signing time: Thu 26 Mar 2026 04:00:46 +0000
Manifest this update: Thu 26 Mar 2026 04:00:46 +0000
Manifest next update: Fri 27 Mar 2026 04:00:46 +0000
Files and hashes: 1: 3UgaGbZGGFfjB7sq8z7R6V-NiDY.roa (hash: e/q2ZKMuya72WNv5B5kUE91L0olkeZByYdU0k2qDJHo=)
2: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl (hash: S2Cl6wwYqnRBnUnx3M6soHM8Jpy+QCp6O4WFwhOSUN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:48:2b:b6:ef:03:37:56:1d:53:24:64:e8:ed:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Validity
Not Before: Mar 26 04:00:46 2026 GMT
Not After : Mar 27 04:00:46 2026 GMT
Subject: CN=f9e77b5d5a94cf2454d9da584189004ed015f80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:4a:79:34:6c:41:00:e5:19:d3:d9:35:0c:
ee:43:d8:ac:0e:de:c7:ec:44:9c:7b:4d:31:4b:fc:
52:b3:d8:ca:45:07:ed:82:f8:b2:2b:2c:de:45:20:
c3:71:dd:ea:91:e8:46:5f:19:5a:f3:53:75:a2:de:
c5:fb:ae:6a:a5:6a:f2:d8:cc:6a:6d:f1:7b:58:a3:
57:28:3a:10:ff:b3:ce:7e:90:30:de:97:87:8e:81:
73:06:86:90:04:13:1d:0b:97:ea:e0:9d:11:7d:f2:
63:c2:d2:57:bc:16:a3:a6:74:82:ae:50:2d:67:43:
99:6a:ba:62:c6:d0:d3:c0:5a:fd:cf:5f:75:1a:c5:
90:b0:b5:ac:54:f8:bf:98:5a:f5:65:3f:4b:6c:06:
35:3a:4d:1d:dc:7a:7f:e9:d5:f7:04:10:3d:fb:e2:
9a:91:ce:08:e7:58:c5:de:81:1e:5e:b3:0d:35:6e:
cd:7a:51:24:60:df:56:5e:9e:fb:77:3f:22:25:aa:
6d:23:35:74:f3:6c:32:f8:5f:17:ed:e8:e6:ec:63:
03:ac:f3:ed:c0:dd:1c:87:93:84:f7:4c:86:2c:f8:
8c:99:2e:ae:13:d1:4e:d7:4f:4d:d9:40:10:79:72:
95:32:79:af:c0:b7:05:5c:e4:38:df:b7:b7:04:5a:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E7:7B:5D:5A:94:CF:24:54:D9:DA:58:41:89:00:4E:D0:15:F8:0E
X509v3 Authority Key Identifier:
keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:36:6d:95:ce:c7:b8:77:10:9a:e0:90:01:32:5b:67:6a:7d:
f4:b0:cd:9c:66:fa:fc:95:5e:b8:c4:9c:3e:43:8c:d8:a9:75:
3c:aa:f8:3b:ab:bb:95:ac:34:86:cd:8d:0b:bf:5a:79:bf:33:
b2:02:7c:21:ef:0a:d8:89:43:19:9a:c2:e6:62:8c:99:eb:d5:
2e:4a:bb:54:8a:c1:ab:60:89:ed:fb:91:27:e4:2d:4b:76:b4:
58:bd:a7:06:9c:08:a3:f6:7c:48:d2:6c:37:bc:9a:10:9c:3f:
8e:84:2a:1b:c3:e9:08:88:16:0e:10:78:ed:62:23:37:7e:e3:
02:41:13:16:7f:e4:3b:d8:90:3a:83:46:b8:2d:10:cb:33:eb:
7a:58:72:a5:c4:e7:4d:4d:1f:35:26:1b:53:4e:fc:3d:8b:81:
38:9e:66:2f:6a:48:51:ee:7a:25:cc:aa:67:da:35:1b:82:d9:
c4:b7:bd:6e:47:6e:b5:86:7e:eb:38:7c:27:19:04:6d:46:fc:
58:a8:20:07:fe:fc:cf:70:c6:3b:07:91:7e:3e:cf:3a:d9:1a:
3a:41:86:54:e0:9f:90:e4:89:fe:15:47:75:dd:56:e1:fb:a2:
92:6a:c8:aa:f7:e5:42:66:79:8d:e8:a4:5b:1f:8e:60:f2:df:
46:96:44:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:24:07 2026 by rpki-client