Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
File: nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json)
Hash identifier: w+ACQUoK9neuTnj/fCVxfsJ7moWfTokxnx/7PhHr75w=
Subject key identifier: F5:22:E2:AD:A2:32:D1:8B:95:C6:EB:00:DE:DD:2B:8C:E3:09:42:61
Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Certificate serial: 019D28F301A92FE342D2782CBF46CC05B3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 07:01:47 +0000
Manifest this update: Thu 26 Mar 2026 07:01:47 +0000
Manifest next update: Fri 27 Mar 2026 07:01:47 +0000
Files and hashes: 1: hmbiAgILODH-19HoC5IuydkCSIc.roa (hash: QWw9cp6g2MsHGOQThqrJzqfLHaqPLS5ug0EanzJlcKA=)
2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: ph/rvtvNj/zqeD/5aJbzzdHnYUGfhE4Iu5MbXo5aoc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:01:a9:2f:e3:42:d2:78:2c:bf:46:cc:05:b3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Validity
Not Before: Mar 26 07:01:47 2026 GMT
Not After : Mar 27 07:01:47 2026 GMT
Subject: CN=f522e2ada232d18b95c6eb00dedd2b8ce3094261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:37:e6:22:a4:a8:a1:38:09:3d:41:f3:78:b6:
f1:9f:5b:c3:5c:64:3b:4d:4c:da:be:c1:f1:45:df:
4b:62:5a:1b:ef:51:aa:67:95:5e:db:20:77:a5:dd:
bc:1c:a9:6c:47:c9:61:64:32:45:3d:d6:d6:8d:43:
c0:15:8b:ab:1c:37:a1:7e:36:b1:43:cd:14:36:6f:
5d:50:13:ca:77:47:3f:79:f9:97:d9:f4:de:d8:88:
54:07:53:b6:02:3e:64:ab:33:02:6a:d5:04:ea:e0:
06:9e:ee:51:a0:4e:40:1e:bd:9c:b2:c6:9d:a0:1f:
e2:6d:fa:d8:d7:0c:d6:59:44:9c:d9:74:61:5e:bc:
3e:9a:3e:46:fc:64:04:52:c7:94:55:9a:45:b0:68:
44:27:97:a9:6f:85:36:bc:ec:c9:a0:99:be:0a:30:
f4:2a:6a:05:4a:bc:d9:c3:fe:dd:fd:a1:88:36:b9:
1e:6f:d6:95:75:98:d1:1d:00:83:31:d4:70:83:52:
98:fd:8d:3d:10:32:3f:ea:78:c9:87:a3:5e:6c:49:
f2:dd:ce:b4:95:8b:8b:50:5a:ed:ac:8e:9a:84:f5:
a7:3e:90:ba:f0:1f:02:ef:57:c3:a5:fe:75:52:58:
63:2d:e3:cf:e8:66:44:cd:65:5a:14:b0:27:00:24:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:22:E2:AD:A2:32:D1:8B:95:C6:EB:00:DE:DD:2B:8C:E3:09:42:61
X509v3 Authority Key Identifier:
keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9b:f8:2e:73:5e:21:a6:60:d7:41:d7:90:7e:f7:6e:10:3a:
1b:75:86:4b:a9:a7:ef:aa:d8:38:bc:31:3d:3f:b4:eb:0f:c2:
cf:c7:1e:b5:7a:d7:29:7a:a7:ab:e5:2e:25:d7:c6:37:eb:68:
2b:25:12:fe:83:8c:36:7f:3a:cc:3b:42:b6:9f:c4:26:1e:40:
16:7a:8b:41:38:10:eb:a1:24:4c:5f:be:0b:4e:d0:44:58:f3:
03:07:c6:6b:c8:7f:c4:4f:c4:58:0c:d3:09:29:6f:b6:42:05:
c0:62:9a:90:20:7e:41:c1:f6:03:76:7c:90:18:f3:9e:73:1d:
bd:d5:a3:f3:d1:32:c6:dc:e0:4c:31:da:d0:32:17:8a:39:42:
b4:06:e4:3c:33:60:a3:a3:fa:36:d0:9e:8b:c1:58:ba:e4:eb:
4f:4d:16:c3:74:af:fc:7a:93:cf:22:28:ca:7e:0c:a2:b8:ce:
cd:5c:36:bb:7b:91:c1:01:bf:2d:7a:0b:9c:81:8a:88:b8:50:
cf:bb:81:4c:b4:b6:b0:f0:ad:cd:f4:f3:fb:5b:d1:2d:39:ae:
2b:77:b8:b7:d8:72:dc:53:de:64:c2:3d:f1:9f:d7:c8:7c:1a:
80:84:81:a2:46:de:a8:91:0b:5f:b6:bb:67:4e:2f:6d:df:19:
a8:82:04:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:12 2026 by rpki-client