Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier: S6fgWS9jQZ0MpOD3sNXPWxmpoGm+j7bDduepCwQIDH8=
Subject key identifier: 9A:7B:F6:98:CD:54:38:12:F2:00:46:53:DA:1F:8B:AE:FC:E0:42:99
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 019D29613FC690322F349C813BEC095B3295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number: 11FE
Signing time: Thu 26 Mar 2026 09:02:12 +0000
Manifest this update: Thu 26 Mar 2026 09:02:12 +0000
Manifest next update: Fri 27 Mar 2026 09:02:12 +0000
Files and hashes: 1: LP-962DLDMgpRMI7_mhHbAEeXHI.roa (hash: L11irqAmN9Yh9SwUVInvcZWfgHtuDzon2+axE8dju+M=)
2: OWOkZZmgGCYknyTPhxnobWYLpHI.roa (hash: bTzqDctbFjp9GWzcDrimAEL7omNgimbSYfc0EwnYgpc=)
3: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: iCQTglOmOXallrQh4K0N2NONlS471PBvZVu5cY/ajDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:3f:c6:90:32:2f:34:9c:81:3b:ec:09:5b:32:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Mar 26 09:02:12 2026 GMT
Not After : Mar 27 09:02:12 2026 GMT
Subject: CN=9a7bf698cd543812f2004653da1f8baefce04299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:62:d9:aa:8b:74:f2:71:02:a9:55:c5:1d:da:
11:5f:f0:12:70:f9:42:20:b7:a2:ea:92:df:01:29:
83:54:eb:3a:22:a8:d4:1d:13:3b:1d:31:69:d2:3c:
91:f1:45:57:49:59:6d:e7:1f:f9:75:b4:e9:1c:13:
f7:f4:13:40:eb:16:41:1f:d4:2e:38:47:e1:39:03:
d3:f3:0d:97:1c:c1:8b:1d:6c:5a:59:cc:43:67:dc:
33:3a:31:0f:eb:5a:3d:bf:c7:6d:71:31:3d:41:62:
2f:a4:fb:51:1f:86:e5:94:64:25:a7:9c:8b:61:a9:
33:45:60:6f:98:de:f7:42:87:f5:f7:7a:33:3d:00:
99:e2:29:c7:c8:c3:f1:06:df:f0:0c:43:99:d1:c7:
38:2e:fe:a1:71:e7:d4:32:e2:00:a6:a4:ea:81:ab:
89:44:df:c3:1b:06:63:a2:73:16:79:77:31:b2:fa:
22:64:6d:f6:a9:a0:b4:98:c8:47:9f:49:1a:fe:2b:
8b:bf:89:44:e3:54:6e:b3:3f:d6:45:57:c2:a3:b0:
99:03:dc:35:12:6b:56:e3:1e:5d:16:f6:4d:3c:c7:
d2:4c:58:bf:79:b4:36:05:d1:56:fe:fa:95:53:77:
46:15:9f:22:e3:aa:ab:76:a8:96:62:87:bf:c7:bd:
ed:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7B:F6:98:CD:54:38:12:F2:00:46:53:DA:1F:8B:AE:FC:E0:42:99
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:22:e8:b2:5c:ac:92:8a:ef:e7:8f:f4:2c:1e:d8:6c:77:91:
b0:fa:77:da:6d:41:c0:32:4a:21:03:e2:d4:00:6f:2b:24:ec:
4e:83:64:6c:c5:bb:f6:53:e5:a0:1b:50:c4:51:59:e9:7a:2e:
60:d1:5f:9e:4a:ac:e6:f2:09:6c:c1:d1:82:89:bb:5a:58:db:
58:8d:ec:19:e7:55:10:fb:30:6d:7d:fe:d2:89:36:ab:ac:68:
a4:f2:a5:16:b7:a5:4c:ca:c3:bc:fb:2f:c0:61:63:52:da:d5:
0e:1a:84:7b:4c:50:78:55:3c:f3:d7:99:50:a0:1f:f7:95:0d:
8e:0f:0f:ee:d2:ff:7b:1e:40:4d:db:86:c2:cb:a4:4f:b8:c9:
03:30:b5:0f:00:32:da:fb:fc:a2:67:99:8c:1b:73:30:28:72:
e3:43:3c:03:0b:fc:ea:0b:eb:33:57:75:b1:20:0f:31:08:a5:
10:43:1c:b0:e0:85:88:9e:d3:07:e2:20:99:c1:d2:92:e7:ad:
ea:ad:54:53:06:6f:00:72:f5:fb:f6:5c:ec:8d:df:28:fe:74:
8a:27:56:cb:5d:03:a8:94:f0:a5:5b:44:67:52:6d:5a:e1:7f:
5d:d7:72:ab:f5:2e:f7:a7:76:ef:e3:03:09:3c:c0:16:df:63:
1a:bb:51:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:01:15 2026 by rpki-client