Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
File: n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json)
Hash identifier: VwU4gwwocRrwkfGmVZiqCKKxd77l4p7koF2bmn8++bk=
Subject key identifier: D7:D6:2C:5D:65:80:5E:13:C0:72:22:03:8E:A9:D0:4D:00:2A:B7:D3
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial: 019DCD19160EED8E5A3D8EDFE51E22A7792D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
Manifest number: 1398
Signing time: Mon 27 Apr 2026 04:01:06 +0000
Manifest this update: Mon 27 Apr 2026 04:01:06 +0000
Manifest next update: Tue 28 Apr 2026 04:01:06 +0000
Files and hashes: 1: BCsvI1mqtMkrqM1Desz65UxbMeU.roa (hash: oNMs5i3Xy1K3iMANMRawDJNBdjBrE5KXc5y/my453cw=)
2: LI0sVfoUzK1z9YOT5-FCjcJGQ0I.roa (hash: L0O8mT469MCzuE1WS6kEM7aYWqcvleiuYLagt0EiSfA=)
3: eFneRI8NVirY9FXkrSGjf8r8DIg.roa (hash: eg6+J92P4U7OROkq5yxujy7G7w0DLDuwMs/a/0cX+a0=)
4: hd7rQeulDecBxJXUMXx1KtWshog.roa (hash: E7bJmyCV3Xzny9dpUYDbi35SX9UwJAseA3WYq0vr1AA=)
5: jKCgpxt1ADjjHAE5Am2jfuifPn8.roa (hash: XeGQ/DX/ECCSWySWuH3BuJMwUzvEFlXF4fBqBfaoS58=)
6: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: 2nNa1jdfOIKa5McOBsfvie4b7qrKspImNaEBilnQWHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:16:0e:ed:8e:5a:3d:8e:df:e5:1e:22:a7:79:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Validity
Not Before: Apr 27 04:01:06 2026 GMT
Not After : Apr 28 04:01:06 2026 GMT
Subject: CN=d7d62c5d65805e13c07222038ea9d04d002ab7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7d:4e:3b:e1:00:47:bb:69:04:d1:a0:ad:23:
dc:4c:c6:22:a5:f3:cb:00:c5:b5:9d:c6:48:08:ac:
9c:bb:c8:5f:c1:26:e8:e3:51:e9:e6:96:77:d7:c3:
2d:52:fc:5d:70:94:c7:59:e9:09:ca:40:07:1d:8b:
ff:9c:20:a6:ce:45:9b:8d:b6:26:b2:44:f8:4a:81:
c7:82:6b:db:2c:8a:95:18:10:13:ac:72:b5:02:8b:
0e:3c:84:4a:77:8d:d3:fc:ce:96:15:33:bc:78:91:
3b:1a:d3:aa:75:ca:86:97:b9:0e:c4:66:72:41:a1:
56:6f:af:35:02:29:18:9c:34:e4:58:30:f3:98:70:
da:dc:d5:0b:bc:ed:71:06:02:b1:01:da:f9:27:44:
cc:ea:73:cb:d1:75:29:67:0c:9f:0c:b0:6f:d2:e4:
49:8f:ff:d6:73:fd:78:a5:9f:39:e7:9b:af:da:09:
ff:d5:65:5e:1d:c2:dc:af:f1:52:ea:49:70:36:ce:
aa:fb:f8:d0:5d:8d:7e:32:22:22:cb:e3:18:ca:5b:
6e:63:9e:ba:15:dc:bf:b0:cf:28:97:a3:15:88:4d:
84:b0:05:b1:0d:b1:86:6c:eb:26:38:6d:cf:c6:64:
cf:f3:39:1e:45:f9:bc:c5:27:c0:5e:59:31:ff:85:
ff:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D6:2C:5D:65:80:5E:13:C0:72:22:03:8E:A9:D0:4D:00:2A:B7:D3
X509v3 Authority Key Identifier:
keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0a:2b:50:d6:98:df:e4:97:ff:a4:2e:b2:9c:81:8c:49:b1:
cb:cd:4a:a9:bd:29:15:35:43:70:84:92:3b:ec:09:0e:34:1a:
41:e1:4f:f8:9a:0a:2e:dd:d7:69:27:4b:db:54:96:46:04:3d:
19:f4:92:03:73:36:3c:61:91:ad:55:dc:48:0f:82:ca:d7:34:
37:34:c3:b9:45:27:78:d7:ed:ae:85:6c:c3:21:0d:1a:9d:b4:
34:09:84:8e:07:13:d9:86:22:f9:6b:ef:64:5c:4a:b3:7a:7c:
41:e3:41:34:b9:66:97:5d:b3:15:b1:c7:fa:6b:f8:d1:d9:7e:
c2:af:b5:f1:d1:30:19:ca:75:2e:1a:58:bd:39:5e:84:c2:86:
f6:c6:85:7c:3e:a0:80:3d:1e:89:e4:b5:1c:d7:69:fe:fa:aa:
70:79:61:e1:5b:83:46:4c:f5:38:c3:b6:d0:5f:84:bb:6a:be:
f7:8a:23:1c:9e:da:3d:b2:78:63:d7:2d:5d:d2:32:51:59:53:
8b:13:42:73:7d:a4:fb:31:b4:87:d2:b2:e3:00:b4:bb:ce:24:
e0:5d:74:5e:4f:e0:ae:19:26:5d:b0:44:a3:8b:ce:1d:e0:5f:
9f:d9:d6:f7:2e:00:ce:ca:45:67:2d:e7:6b:81:7d:a5:93:54:
5c:36:02:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:45:11 2026 by rpki-client