
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier: dMUzj+/WiKpZl8SE5LHUKRc2Yh3OJ0wloq0PsXbR5rQ=
Subject key identifier: 29:76:F4:B4:F6:9E:A1:6D:60:39:7C:D3:A7:29:24:67:51:55:C7:51
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 019E1F7EE09ABA99CCEEC9C7EDDFF5C20A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number: 1899
Signing time: Wed 13 May 2026 04:01:09 +0000
Manifest this update: Wed 13 May 2026 04:01:09 +0000
Manifest next update: Thu 14 May 2026 04:01:09 +0000
Files and hashes: 1: 6q8Cn_ihD-9lGbIg6cUdTCqh-Mk.roa (hash: M11btvF49Fo+UxYGyhJ5kL+ajzcw91sm72buQLeP3aw=)
2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: Ox/zwiO4shO2B7+VdXaR4ZDp4g6q2DhHgpswrYu0FuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:e0:9a:ba:99:cc:ee:c9:c7:ed:df:f5:c2:0a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: May 13 04:01:09 2026 GMT
Not After : May 14 04:01:09 2026 GMT
Subject: CN=2976f4b4f69ea16d60397cd3a72924675155c751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:f1:76:f8:63:3a:a8:fe:0c:78:ce:bd:6b:
37:59:25:ce:3c:eb:27:1c:00:b6:0f:63:8b:22:46:
43:b5:e3:62:b9:ed:fa:f8:c5:69:ed:08:96:82:c0:
a9:96:f8:d9:ca:7a:58:6f:33:58:57:78:30:b4:65:
87:5d:96:b4:7a:1a:45:9a:79:45:a9:b0:7c:9f:8d:
6d:db:78:87:60:74:73:00:a9:fb:0a:57:ee:ff:ed:
a7:7f:94:1f:6f:bc:b5:b0:4f:6d:7e:eb:66:15:66:
70:11:b6:6e:5b:86:63:25:55:21:44:fd:72:47:16:
f1:73:66:8a:d5:f8:42:17:09:90:81:13:59:85:04:
b2:3d:da:04:f7:79:fc:6e:33:67:cc:07:0e:e0:b0:
3e:91:cd:d8:45:19:7f:56:68:6e:09:b6:2d:4f:62:
0d:7b:fa:fa:b7:6e:16:57:e0:88:35:a4:03:10:47:
8d:d4:af:b6:0f:17:e0:90:ac:b4:d1:71:5a:62:cf:
db:2c:49:8c:ff:e6:37:fb:bb:08:b0:49:69:9d:a4:
85:40:71:ba:63:ff:59:2f:91:81:e6:b3:3f:15:42:
7f:5a:d6:b0:14:be:66:3e:3e:55:9e:05:2e:4a:1b:
4a:6e:a5:fc:a4:34:b1:0a:7b:35:99:40:7f:9e:45:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:76:F4:B4:F6:9E:A1:6D:60:39:7C:D3:A7:29:24:67:51:55:C7:51
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:59:31:3e:0a:2f:18:19:ac:18:37:c7:c2:8f:8e:af:7c:cc:
ed:df:64:87:c5:bc:06:91:3c:ec:dd:52:90:12:0c:f3:97:e4:
71:7e:dd:21:61:19:bb:34:00:a7:3f:45:9e:71:6f:c4:04:3f:
03:aa:c3:e9:bc:09:78:28:3d:1f:05:09:3d:06:b3:4b:9a:10:
7d:af:b1:b1:4a:15:12:0e:62:9e:e3:df:77:1a:cd:6d:e1:45:
02:be:99:3e:e8:10:dc:ad:8f:29:6c:67:63:7e:f3:24:e4:0e:
0d:90:b8:24:d7:c3:0c:2e:dd:5f:a5:cb:e5:6f:d1:2e:4a:88:
ab:bc:43:9b:cc:21:4e:40:cb:86:e8:35:8f:3c:e6:04:1c:8a:
f6:93:27:eb:a7:c0:9d:c8:93:05:89:71:0d:8a:9f:52:3b:9c:
e1:9d:74:2e:25:7f:d9:a9:e6:b9:74:18:47:f2:d4:81:59:fe:
5f:bf:d9:df:eb:87:de:db:b9:86:be:f1:3f:12:65:1e:9d:e6:
ce:cf:c1:f3:59:74:15:04:03:29:dd:5d:cf:5a:cc:94:28:13:
a2:77:aa:b9:1b:5c:6c:13:b5:6e:af:cd:1f:ac:bd:32:d4:07:
12:f9:54:8b:ca:b0:50:13:b7:20:2b:cd:19:1e:e4:eb:1b:74:
c7:f1:7c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:02:58 2026 by rpki-client