Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File: n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier: f3McLCCxHvAy0a+thhyX2AelK9WVSyMlUNnbLYbyUzU=
Subject key identifier: FA:12:27:F3:43:4A:CC:AE:25:BC:11:8A:D4:F2:B2:5F:95:19:8F:10
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer: /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial: 01A1DE02AFB2808BF3D017C2A17230589E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number: 0620
Signing time: Sun 15 Nov 2026 07:01:20 +0000
Manifest this update: Sun 15 Nov 2026 07:01:20 +0000
Manifest next update: Mon 16 Nov 2026 07:01:20 +0000
Files and hashes: 1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: Nl8Z0rU8fZ6D7YYxePSy/LjFqSPUJGBWNy9c9/IMqrM=)
2: qDTCMJHmL38g7Q3yN-YIXsmnvn4.roa (hash: S3eC/w96DFQPDgFJUFEhb7780RHsrN7s0rIndTg2a1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:af:b2:80:8b:f3:d0:17:c2:a1:72:30:58:9e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
Validity
Not Before: Nov 15 07:01:20 2026 GMT
Not After : Nov 16 07:01:20 2026 GMT
Subject: CN=fa1227f3434accae25bc118ad4f2b25f95198f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:2b:4b:ea:83:4e:a1:b7:23:80:27:09:92:
9d:85:2f:e6:66:c5:54:36:2f:cf:44:bd:ef:54:08:
4c:50:73:a2:94:34:a3:c4:a0:f0:43:29:ed:db:c3:
4e:c7:2a:72:74:38:62:1b:ee:f4:45:fa:d2:48:56:
0a:41:bc:19:e8:03:1f:65:37:7a:3f:11:c7:fb:26:
3c:ea:f8:01:4d:10:2b:35:61:53:4d:67:d6:4f:58:
77:e0:e7:e8:04:28:9c:8f:71:1d:7b:64:ab:4d:b9:
0e:95:51:a1:42:69:56:b8:28:26:ef:36:65:ca:43:
f1:39:f0:2d:f3:55:83:fa:ab:0f:23:44:80:46:40:
0f:63:46:f3:32:9d:1f:27:ff:22:c7:19:a6:dd:29:
28:76:03:1c:11:13:47:08:6d:90:42:34:cb:49:88:
ae:c7:04:f2:8d:16:f1:36:20:19:56:f7:f4:e8:73:
b0:5e:bf:bf:6e:04:80:f0:a9:61:74:d4:b1:ff:18:
e5:eb:16:5c:ef:89:0f:c2:44:f2:a6:11:6e:2a:2b:
13:8e:eb:94:77:00:9d:31:69:9b:0b:f7:c4:97:c7:
da:07:ab:72:15:be:a0:a7:3c:b8:ec:0d:81:9e:3a:
5c:8a:2f:7d:89:78:cd:72:fe:cb:46:2f:ad:8c:8d:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:12:27:F3:43:4A:CC:AE:25:BC:11:8A:D4:F2:B2:5F:95:19:8F:10
X509v3 Authority Key Identifier:
keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0f:4f:f6:1e:18:6d:1c:6d:26:0c:cf:da:40:3e:67:bb:d9:
0d:6b:67:43:a3:b0:85:5a:d9:ac:bd:f5:48:8e:99:43:d8:e6:
b4:76:cf:96:04:04:25:03:e2:db:a4:21:25:79:4b:bc:37:17:
3b:6b:e1:7b:b0:60:7c:c4:05:e5:62:c9:32:42:27:87:36:2d:
ff:d3:2f:b0:1e:f8:14:15:3f:50:af:88:33:b5:3b:f1:ed:70:
4f:4b:7d:bc:a2:ce:e4:e6:4d:3a:20:8a:1b:17:a4:2f:a6:a7:
86:43:dd:b2:eb:dd:c7:6d:9e:7c:b2:65:2c:5a:01:7e:d1:b8:
9d:66:db:7f:5c:6b:3c:fb:bc:ce:a1:bb:db:c8:ef:91:8c:43:
cc:fb:8d:4c:e8:d0:56:ee:52:b1:be:05:fc:55:81:6c:38:fd:
bf:17:ab:f0:f6:48:d0:3c:11:88:33:3a:6f:5e:15:4c:f9:83:
9e:89:ee:26:81:ea:11:99:2c:39:f6:ed:65:bb:ee:28:26:ff:
ec:9d:1c:c3:17:97:03:10:d6:45:ed:f1:a9:68:9d:e1:b3:35:
4f:3e:76:e3:63:13:04:2f:ba:6e:67:cc:f4:aa:a7:3e:ff:a0:
ce:1a:ac:82:51:51:8c:43:1f:98:6d:a1:ad:d4:c1:ab:5b:02:
67:9e:04:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:25:43 2026 by rpki-client