
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File: n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier: 4/byeeQ4mM2m8wpZmhEPLxFMOkAqMd+EvBFNc7/JUxE=
Subject key identifier: D0:3D:15:DB:5C:31:36:79:8D:3A:6E:8B:F2:D7:F4:14:C1:B3:41:F1
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer: /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial: 01A0CFA47D4342D02DF3ED63BA4955D67128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number: 0594
Signing time: Wed 23 Sep 2026 19:00:58 +0000
Manifest this update: Wed 23 Sep 2026 19:00:58 +0000
Manifest next update: Thu 24 Sep 2026 19:00:58 +0000
Files and hashes: 1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: 0Wogb2RFMQi6AFgegs1hLTNzwK2o0PY86UHIWekDEgg=)
2: qDTCMJHmL38g7Q3yN-YIXsmnvn4.roa (hash: S3eC/w96DFQPDgFJUFEhb7780RHsrN7s0rIndTg2a1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:7d:43:42:d0:2d:f3:ed:63:ba:49:55:d6:71:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
Validity
Not Before: Sep 23 19:00:58 2026 GMT
Not After : Sep 24 19:00:58 2026 GMT
Subject: CN=d03d15db5c3136798d3a6e8bf2d7f414c1b341f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:2c:ec:97:db:92:ee:6e:c4:59:fb:f6:4c:
ec:66:69:55:15:b4:10:a9:9d:9f:bc:11:cd:7e:44:
e1:8e:59:e1:a5:d2:3d:ba:d5:9f:1d:d0:87:07:6b:
ef:fc:b0:15:1a:7b:d2:f9:c9:4f:fd:46:d2:40:90:
be:a5:f7:63:e1:b0:97:d1:92:58:6d:63:0a:2f:9f:
a6:47:79:f8:41:20:7b:20:21:da:68:3b:50:93:02:
b1:74:ef:f3:40:27:95:01:78:e0:ef:50:44:32:51:
22:3a:33:a0:1b:06:88:1b:b2:c4:55:f5:5d:54:69:
85:6c:cd:de:6b:f3:3d:b9:cc:17:61:2c:4d:ad:c7:
38:ac:c8:d5:05:6a:94:48:5f:31:cc:39:76:be:d0:
27:b4:94:f9:a5:cc:87:ba:8b:cd:26:4c:2b:c5:d7:
0b:df:28:bf:1b:9b:5f:ca:87:38:cb:f1:c1:89:d1:
f8:7c:72:ae:ab:43:23:a6:9b:ee:e3:72:31:66:bd:
6b:1c:3d:84:db:62:60:ad:92:35:01:b7:34:34:e6:
ce:0a:9c:39:b2:00:77:02:15:9d:e1:c6:68:47:4c:
f4:80:a5:1b:61:e7:dd:45:94:9f:da:a2:1c:5c:a3:
d2:5f:15:b5:7b:1c:f0:6e:85:97:b2:6f:80:e6:68:
64:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3D:15:DB:5C:31:36:79:8D:3A:6E:8B:F2:D7:F4:14:C1:B3:41:F1
X509v3 Authority Key Identifier:
keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:af:bc:d9:e5:d4:9b:c8:5d:23:a1:1f:77:94:98:b9:bf:b4:
68:5e:11:43:5d:f4:a1:10:72:1c:82:15:46:39:70:3d:b7:8d:
32:bc:58:7e:02:fa:f6:30:bd:1b:b5:09:68:04:dc:8e:2b:95:
a5:dd:ed:e4:11:b3:8a:89:88:c3:4e:80:f1:d0:58:1d:85:b3:
c0:c5:ce:60:59:5f:02:f6:ed:29:f5:32:b5:fb:6b:98:50:54:
8d:79:67:99:cb:35:f5:3d:4c:77:57:51:bd:f5:a2:d3:07:13:
46:9c:6c:6b:af:bc:f0:82:21:97:25:28:5e:c9:98:2d:fb:88:
37:c8:49:c6:ec:eb:77:d6:78:5c:f8:3d:42:05:ab:8a:3e:4e:
b5:c3:51:e3:be:89:22:8c:d7:a7:f9:77:45:57:ab:e4:80:e3:
12:94:d0:d1:49:d0:19:cd:a1:42:ad:50:b1:1c:aa:9c:76:aa:
34:3e:53:9f:5f:4c:e6:61:ce:88:61:26:70:30:db:c0:36:c8:
bf:f1:d3:24:32:fb:99:54:8a:c7:96:ee:12:4f:d6:8e:bf:79:
4c:2a:32:db:0e:e8:26:da:56:6a:ef:83:f4:d6:38:4d:c0:f3:
47:54:45:d6:0c:3f:51:f0:f2:cf:ed:37:21:22:ef:77:15:1e:
1f:4c:de:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:57:18 2026 by rpki-client