Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier: T+vtx4Dj8xgLu5whGMM7YDcTmI+2DHE2O/k6K0Pb8KQ=
Subject key identifier: 73:83:8A:BF:39:FC:32:61:3B:9F:C1:D9:70:CE:68:BF:2A:C6:71:90
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 01A0DC84CD867C24FC723B7B2DBFB2CCF5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number: 1A04
Signing time: Sat 26 Sep 2026 07:01:25 +0000
Manifest this update: Sat 26 Sep 2026 07:01:25 +0000
Manifest next update: Sun 27 Sep 2026 07:01:25 +0000
Files and hashes: 1: 6q8Cn_ihD-9lGbIg6cUdTCqh-Mk.roa (hash: M11btvF49Fo+UxYGyhJ5kL+ajzcw91sm72buQLeP3aw=)
2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: 0+5qjbcdx1Mms1VnX8MiRuFjR2x80MqQUERs8soNG6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:cd:86:7c:24:fc:72:3b:7b:2d:bf:b2:cc:f5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: Sep 26 07:01:25 2026 GMT
Not After : Sep 27 07:01:25 2026 GMT
Subject: CN=73838abf39fc32613b9fc1d970ce68bf2ac67190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:05:eb:80:bb:f3:40:69:29:22:84:fa:ba:
1b:1e:f4:e9:18:2d:34:c9:1b:8d:8c:0e:ee:25:08:
d5:81:f9:df:4c:4c:98:23:81:07:96:c6:df:91:1c:
c9:b4:9f:d7:4d:36:2f:62:56:38:01:5b:5d:3a:58:
2f:21:b3:20:13:46:ab:50:ab:f6:72:8c:c6:2f:a0:
4a:9c:dc:e0:89:eb:d1:2b:2a:b6:f1:72:35:d5:56:
f9:88:78:44:ca:45:97:c2:c7:91:87:3f:9c:92:3a:
8b:f0:d7:1e:18:64:2f:c0:52:2b:1a:f3:47:b1:20:
6f:59:d3:d2:13:c9:a0:76:98:7c:70:f9:36:91:a5:
6a:ed:51:a2:da:e0:be:29:95:c4:d0:9a:f0:5c:4c:
3c:6e:16:56:fc:c5:db:0e:32:ce:3e:f9:2f:be:7b:
e0:f4:7f:dc:cc:f4:42:45:da:af:6f:90:e8:f7:c4:
13:53:b6:65:d5:14:12:79:02:86:b2:e5:07:b3:fc:
db:0b:b4:18:f4:71:8b:6c:60:1d:99:48:b0:d7:81:
56:cc:be:ad:7f:e6:94:9e:70:12:77:5e:c9:91:77:
87:39:fe:68:1d:d7:57:bc:a4:b7:3a:7e:e0:a4:e1:
11:f6:c1:94:5a:b1:5d:72:f1:0e:fe:d0:9f:e0:90:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:83:8A:BF:39:FC:32:61:3B:9F:C1:D9:70:CE:68:BF:2A:C6:71:90
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7c:40:25:55:f0:b3:46:7c:27:7b:cf:4d:20:3d:38:ba:77:
6b:36:23:7c:40:2a:7e:bc:3e:db:2f:7c:c0:55:62:70:d8:e3:
df:0c:4a:68:b7:8b:e1:36:e1:fa:b4:80:42:bd:a9:dd:74:f9:
ab:1b:7f:b4:93:98:d7:e2:18:fe:79:bf:51:24:bf:e6:c9:18:
3a:2a:76:f7:da:7d:fd:8e:1b:81:5b:cd:d0:ae:6a:74:41:a2:
c2:dc:17:df:4b:d6:1a:79:c7:87:e2:c8:ea:63:e7:fa:b6:cf:
4d:01:a0:0d:e0:91:6a:d5:46:42:5e:65:fd:d8:55:cb:68:3c:
6b:37:ad:05:58:a3:c6:7e:84:fb:a4:11:b9:5b:1c:62:a7:62:
14:97:b1:6e:e2:c3:f0:1b:39:02:2a:be:f0:a4:e6:68:7b:c6:
a0:14:83:7e:35:ff:d2:93:c7:b7:ad:9f:15:07:3e:db:c6:ca:
6c:3f:40:3d:5a:24:f0:6c:18:ba:5d:9e:d2:30:57:1b:b2:9a:
16:23:ee:84:91:3d:39:6e:15:8b:b7:ff:bb:f9:c2:4d:d7:4f:
48:d8:95:f3:8d:a0:0e:f3:a2:9b:42:10:f4:12:4e:22:80:2c:
0a:09:01:6d:f5:bc:3f:73:75:90:76:4e:46:df:39:eb:4d:53:
57:c1:5c:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDchM2GfCT8cjt7Lb+yzPXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNzQwY2QzYjY2YjYwZTE4YjNkOTZmZmIzZjQyMThkNzli
NWI3NzAwHhcNMjYwOTI2MDcwMTI1WhcNMjYwOTI3MDcwMTI1WjAzMTEwLwYDVQQD
Eyg3MzgzOGFiZjM5ZmMzMjYxM2I5ZmMxZDk3MGNlNjhiZjJhYzY3MTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT8F64C780BpKSKE+robHvTpGC00
yRuNjA7uJQjVgfnfTEyYI4EHlsbfkRzJtJ/XTTYvYlY4AVtdOlgvIbMgE0arUKv2
cozGL6BKnNzgievRKyq28XI11Vb5iHhEykWXwseRhz+ckjqL8NceGGQvwFIrGvNH
sSBvWdPSE8mgdph8cPk2kaVq7VGi2uC+KZXE0JrwXEw8bhZW/MXbDjLOPvkvvnvg
9H/czPRCRdqvb5Do98QTU7Zl1RQSeQKGsuUHs/zbC7QY9HGLbGAdmUiw14FWzL6t
f+aUnnASd17JkXeHOf5oHddXvKS3On7gpOER9sGUWrFdcvEO/tCf4JCD0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHODir85/DJhO5/B2XDOaL8qxnGQMB8GA1UdIwQY
MBaAFJ50DNO2a2Dhiz2W/7P0IY15tbdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDct
NTBlNGIwNTA0ZjQ4LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDctNTBlNGIwNTA0ZjQ4
LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXxAJVXw
s0Z8J3vPTSA9OLp3azYjfEAqfrw+2y98wFVicNjj3wxKaLeL4Tbh+rSAQr2p3XT5
qxt/tJOY1+IY/nm/USS/5skYOip299p9/Y4bgVvN0K5qdEGiwtwX30vWGnnHh+LI
6mPn+rbPTQGgDeCRatVGQl5l/dhVy2g8azetBVijxn6E+6QRuVscYqdiFJexbuLD
8Bs5Aiq+8KTmaHvGoBSDfjX/0pPHt62fFQc+28bKbD9APVok8GwYul2e0jBXG7Ka
FiPuhJE9OW4Vi7f/u/nCTddPSNiV842gDvOim0IQ9BJOIoAsCgkBbfW8P3N1kHZO
Rt85601TV8FcCw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:29:09 2026 by rpki-client