Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier: TX4eRnBBwzL0+67o2mo5fdC+HRdTOnAi75ns1D5NOpE=
Subject key identifier: 86:13:40:E1:81:74:0A:77:A0:54:29:2C:C4:E2:1E:86:41:2C:E3:B4
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 019E2091FA780DDEA682BF34E113469C3BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number: 127E
Signing time: Wed 13 May 2026 09:01:38 +0000
Manifest this update: Wed 13 May 2026 09:01:38 +0000
Manifest next update: Thu 14 May 2026 09:01:38 +0000
Files and hashes: 1: LP-962DLDMgpRMI7_mhHbAEeXHI.roa (hash: L11irqAmN9Yh9SwUVInvcZWfgHtuDzon2+axE8dju+M=)
2: OWOkZZmgGCYknyTPhxnobWYLpHI.roa (hash: bTzqDctbFjp9GWzcDrimAEL7omNgimbSYfc0EwnYgpc=)
3: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: CTb96HTFfXZU/5lDUfhs4lYUelhgTs1C17ArNJGtZns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:fa:78:0d:de:a6:82:bf:34:e1:13:46:9c:3b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: May 13 09:01:38 2026 GMT
Not After : May 14 09:01:38 2026 GMT
Subject: CN=861340e181740a77a054292cc4e21e86412ce3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:94:01:59:94:a6:cc:0c:0e:b4:cd:a6:eb:
71:ec:08:65:9a:c1:3f:7c:c8:8b:b4:36:6c:7e:ef:
35:6e:b8:d5:38:f6:d2:62:bb:cb:a6:7a:73:6d:54:
50:bc:b6:aa:cd:e7:77:da:a5:59:df:9b:bc:99:fa:
d9:f6:47:ba:83:7c:d8:12:55:54:77:80:3c:92:3a:
a4:f8:a0:ee:1e:e7:97:c0:b7:5f:98:32:f3:69:70:
99:ba:d6:01:02:49:0f:cb:20:9e:6f:b9:a4:98:ff:
46:07:dc:0e:a9:97:dc:12:13:6f:ce:3b:d8:e8:f1:
65:86:0a:74:e9:30:6c:e3:c7:9a:f8:71:45:2c:28:
01:72:68:a0:d5:55:0b:0e:90:3f:10:f1:9b:74:03:
7c:cf:61:a9:38:8d:03:ea:54:fc:0e:3e:2f:24:10:
96:27:b4:62:3f:8e:61:a6:67:1b:25:d3:f4:40:bb:
fd:f7:f6:04:83:cf:52:55:5e:88:3a:7f:32:c6:9b:
3b:14:fb:77:8d:18:90:58:80:bd:f5:16:d1:ca:d7:
91:d5:01:17:36:b6:4c:e6:e9:a4:b6:1e:d4:03:67:
72:cb:d1:27:69:30:07:25:29:aa:54:09:d5:c0:77:
eb:84:a9:93:da:46:47:56:25:cb:0a:45:68:0c:41:
05:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:13:40:E1:81:74:0A:77:A0:54:29:2C:C4:E2:1E:86:41:2C:E3:B4
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:57:74:23:b1:c4:d5:5b:e2:54:8d:27:4b:b5:09:0e:02:de:
b4:be:0c:a5:28:4d:67:73:b4:8f:cb:e8:5c:de:b3:e3:43:fd:
20:fb:43:4f:47:06:65:45:f4:95:6d:9a:77:8c:25:69:99:4f:
c0:c0:0f:6f:3f:cc:ab:19:53:5d:ea:f1:49:da:b0:da:27:f9:
06:16:7e:09:95:a3:ce:b3:e4:5c:e7:22:51:27:0e:7b:2f:d4:
a3:5c:a4:95:9a:c3:68:96:c2:18:8e:97:a0:38:02:ae:dd:ff:
0a:58:19:9b:59:ca:28:7f:78:16:20:5e:05:74:06:4a:64:73:
1f:33:9e:84:b8:8c:03:16:ea:44:5a:32:21:1c:01:ee:ea:32:
54:96:25:46:de:73:6f:3f:c3:59:95:b6:ac:e2:c1:46:48:ff:
09:df:74:07:e4:e2:5b:26:0d:01:e2:24:22:b7:ab:27:19:c0:
ad:2e:d5:93:8d:ce:63:3f:5e:23:6c:52:24:3d:ee:92:55:b2:
51:d8:99:12:eb:a8:85:aa:f8:d9:1c:06:a7:4b:13:3e:8a:06:
61:a8:d4:78:20:26:3c:97:36:2a:9b:a9:ca:16:86:10:c2:06:
db:de:db:c9:4b:56:75:40:e9:07:57:7d:ee:59:82:9c:db:af:
2b:38:6f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:57:05 2026 by rpki-client