Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: VcOS8NHVRXvhcywnN4KKyesyvg6sqhF+Bgsu2UcOfOw=
Subject key identifier: 6F:F2:5B:64:6B:C5:9A:3C:A9:A9:C8:29:39:20:CF:85:6E:25:22:D4
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 019CE4EC5635D2890C66EE84218C1F69B8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 1876
Signing time: Fri 13 Mar 2026 02:00:19 +0000
Manifest this update: Fri 13 Mar 2026 02:00:19 +0000
Manifest next update: Sat 14 Mar 2026 02:00:19 +0000
Files and hashes: 1: DdkhG9ScS5mKOj6FEPIiUrVTDGA.roa (hash: JddADCbKnFgd2w/G6EyTsDQqGgZM9PxBGHiXPX0tQCk=)
2: Kfpukp1mfPmVOexK4iRI3WWUkLE.roa (hash: dRxylayWUvJFav2jQoF/w0hiqJLQbgosTCaGTxEw3QY=)
3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: F0hhLBwkRb4e/faGXAavAWUN8BcDsjMSiFvsrnPfOp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:56:35:d2:89:0c:66:ee:84:21:8c:1f:69:b8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Mar 13 02:00:19 2026 GMT
Not After : Mar 14 02:00:19 2026 GMT
Subject: CN=6ff25b646bc59a3ca9a9c8293920cf856e2522d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:27:ec:b8:98:f9:00:93:a1:7b:89:26:ca:09:
48:4e:b8:98:48:eb:56:85:a0:61:ec:f5:86:25:13:
a6:5f:5e:ee:a0:66:ce:8c:a7:4e:00:d0:72:03:8a:
c3:54:3c:c1:44:eb:c1:a4:dd:11:7f:29:1e:b8:fe:
33:a0:92:3a:40:e1:aa:52:d5:d2:ba:d3:cf:87:48:
76:82:79:f8:5f:60:68:d2:fc:6e:98:fd:07:9d:ed:
dc:2b:8a:5f:3d:80:1e:a9:13:88:7e:71:6b:1c:ff:
75:f9:18:ee:b2:3b:92:1e:95:a3:2d:3a:c5:f2:2e:
e1:8b:0b:3e:38:c6:b3:45:d2:7c:2a:7c:f0:70:6d:
77:7e:01:35:0d:e0:58:ee:98:41:3b:94:26:2d:9e:
dd:81:61:66:eb:37:cf:06:79:27:40:c0:31:f1:e3:
b6:cb:fe:a3:8a:38:58:5a:43:c2:14:59:02:e0:a7:
66:68:65:60:f1:51:5b:25:1a:f6:cd:29:9b:4d:a1:
aa:00:af:76:4f:98:98:7f:4c:ed:3d:b9:17:de:2c:
52:a0:8e:c7:eb:45:e3:e9:61:ea:c0:ef:5e:a8:ce:
13:2c:58:06:fb:cf:50:b3:90:ff:6b:0c:42:6a:28:
57:38:bd:98:5f:15:fa:ef:ed:2d:b8:4b:e1:2e:d7:
dc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F2:5B:64:6B:C5:9A:3C:A9:A9:C8:29:39:20:CF:85:6E:25:22:D4
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c1:0a:f1:ad:2f:dc:30:ad:bf:72:7c:ad:e3:0e:0e:9c:cb:
20:1c:09:34:d4:b0:66:72:ab:aa:01:ec:00:00:dc:4b:51:33:
3a:75:0e:57:1c:30:87:ab:ee:2d:28:29:83:6c:18:25:d8:96:
89:89:69:0b:6f:8d:5f:a4:c5:96:d8:bf:ab:06:e2:e6:bb:3f:
7c:95:67:96:4f:81:f6:29:1c:9e:32:6e:61:3b:b6:6c:5c:4f:
fe:c1:f8:f5:b5:9b:ba:13:4a:0b:7a:5d:81:ff:3d:48:71:5b:
7c:52:da:4b:1c:d0:51:29:82:be:0e:b9:da:7b:00:2c:1c:a8:
e6:06:4e:9a:68:9a:ea:73:43:91:10:e1:eb:bd:04:3f:63:be:
b8:74:ee:0a:a5:bf:4e:3f:77:b6:50:fd:cd:c0:7b:3e:4b:7e:
a9:a0:16:ef:e1:52:2a:e3:04:f1:48:29:36:af:36:04:46:c9:
eb:a2:ea:e5:a0:d3:7f:d5:03:1d:d7:20:0b:2a:d6:40:0f:71:
e1:55:30:26:9c:ce:3e:07:f2:08:89:ee:84:53:95:78:17:59:
52:95:de:b3:02:ad:d5:7e:da:1f:80:1e:71:f6:4b:43:a5:2b:
22:87:60:d6:25:93:39:8d:7b:f5:d4:bd:4d:a7:40:ad:33:2b:
9e:b3:db:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:58:26 2026 by rpki-client