Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
File: nqeCd0gM8trWyesKUr5I33q2Z1o.mft (raw, json)
Hash identifier: wyamfmkmvTv+Y61XjmoZdC4syRcjyLMqe9o1xKbzXfE=
Subject key identifier: 2C:0C:9D:44:EE:C5:2D:DD:0D:8D:78:97:3A:C4:E8:29:E4:6B:E7:AC
Authority key identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
Certificate issuer: /CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Certificate serial: 019D2772D491D1DBD4E7FDD1469704750705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
Manifest number: 118B
Signing time: Thu 26 Mar 2026 00:02:09 +0000
Manifest this update: Thu 26 Mar 2026 00:02:09 +0000
Manifest next update: Fri 27 Mar 2026 00:02:09 +0000
Files and hashes: 1: 9g6pOYHufxn_OQfDKkRqzS5XeEk.roa (hash: wDN1atJFquIXsTNAwjLE+5ZKVEXzShSPCEpqiDwXD30=)
2: nqeCd0gM8trWyesKUr5I33q2Z1o.crl (hash: OKHbGiWMXNQ+PujMNhwPSYX4rkgRpvdRWED8PSnUpf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d4:91:d1:db:d4:e7:fd:d1:46:97:04:75:07:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Validity
Not Before: Mar 26 00:02:09 2026 GMT
Not After : Mar 27 00:02:09 2026 GMT
Subject: CN=2c0c9d44eec52ddd0d8d78973ac4e829e46be7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:00:18:68:86:0c:e6:63:60:62:e8:04:20:fc:
3f:f1:f6:f5:a5:b4:42:11:5d:57:d7:e3:fd:7b:2e:
f4:b3:51:5f:2e:63:21:67:bf:91:9a:34:5d:98:18:
0f:0c:98:0a:75:33:c6:92:c1:63:b3:48:77:9d:d3:
43:d1:dd:d5:4c:74:c3:44:4f:88:ed:34:2d:ce:53:
64:0c:5c:78:d4:59:4e:28:15:1e:ca:b6:1b:93:87:
a5:f2:b3:9f:5f:c2:df:02:b2:84:56:8f:65:73:18:
b6:86:f8:70:ef:43:96:55:7e:1a:ea:56:5a:44:cf:
55:7c:99:6f:7c:d7:f7:c8:34:2c:81:23:77:91:14:
f6:20:17:64:e8:0a:8f:9b:2f:05:ff:77:a6:db:01:
98:a8:6a:32:32:7a:4b:41:d3:4a:a7:c9:69:3c:12:
08:a1:a2:9b:7b:19:78:d3:2a:b6:26:ad:c1:e2:5d:
4a:2d:cf:48:92:f8:81:34:19:1d:e2:97:74:38:fe:
1b:55:61:30:26:f0:fc:31:d5:49:b5:cc:03:d4:d4:
3f:a0:0f:52:a1:7b:4c:80:34:f7:92:5e:84:2c:45:
ae:8a:60:bf:dc:24:bc:92:9d:49:28:c9:74:5e:a1:
d2:a8:e6:64:8f:34:eb:ca:3f:2f:85:63:30:89:31:
01:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0C:9D:44:EE:C5:2D:DD:0D:8D:78:97:3A:C4:E8:29:E4:6B:E7:AC
X509v3 Authority Key Identifier:
keyid:9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6f:d3:06:d4:7c:a7:02:91:56:6b:fa:fd:ba:bc:2a:a5:24:
3f:7c:62:67:c3:23:b7:ba:03:b2:e7:ab:5d:2e:d7:44:11:79:
55:fb:3c:57:95:08:18:73:1e:83:5e:1d:c5:e8:24:0f:38:6b:
3a:ef:1d:81:a4:99:73:82:73:2d:2b:d7:1d:f3:44:f3:82:c6:
0b:4a:53:fb:e0:05:38:ad:a4:96:23:89:e4:88:8e:97:7b:58:
29:c5:7d:a8:72:db:dd:33:66:0d:49:78:11:d3:0c:ac:54:50:
9a:90:68:d5:40:43:f2:58:85:1b:6b:7c:96:2d:33:c4:2f:74:
fa:c7:b1:4e:38:56:34:02:60:4c:88:f9:b8:5b:4e:f6:fa:86:
53:3c:00:b2:d7:d1:20:09:36:73:b9:41:56:e9:fd:ab:9b:a0:
5d:c1:3d:9c:5b:05:72:45:ef:bc:dd:ca:be:63:ee:8a:9d:7d:
c3:04:d8:1b:f8:3a:b3:df:c1:a8:51:8b:0a:60:30:a6:7f:56:
a0:b1:08:5e:f3:1f:a8:52:04:3a:00:54:e0:78:00:86:43:03:
6f:b5:a8:74:ba:43:7a:34:2f:5e:6b:04:d7:21:6c:c0:92:0c:
10:c3:b3:e4:a5:a2:4d:fd:85:9d:ae:52:66:1e:6b:61:00:31:
f1:2f:5d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:50 2026 by rpki-client