Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: wyNqZHkdAbWEzhSfwsLApXvIyLuGCmwqDQbDGRVgYoY=
Subject key identifier: 12:0D:D0:BE:80:11:1F:36:0E:50:8F:F8:EF:96:A7:44:97:D6:0B:08
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 01A08D8D2375D5F2952FE57C1AD9B31796D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 1A5B
Signing time: Thu 10 Sep 2026 23:00:32 +0000
Manifest this update: Thu 10 Sep 2026 23:00:32 +0000
Manifest next update: Fri 11 Sep 2026 23:00:32 +0000
Files and hashes: 1: DdkhG9ScS5mKOj6FEPIiUrVTDGA.roa (hash: JddADCbKnFgd2w/G6EyTsDQqGgZM9PxBGHiXPX0tQCk=)
2: Kfpukp1mfPmVOexK4iRI3WWUkLE.roa (hash: dRxylayWUvJFav2jQoF/w0hiqJLQbgosTCaGTxEw3QY=)
3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: nKgdmEjKWdN9QWzYSIY59RW4S01uVYOKpRbD0w8VqLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:23:75:d5:f2:95:2f:e5:7c:1a:d9:b3:17:96:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Sep 10 23:00:32 2026 GMT
Not After : Sep 11 23:00:32 2026 GMT
Subject: CN=120dd0be80111f360e508ff8ef96a74497d60b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:47:8c:60:10:8b:4d:a7:fb:81:e0:81:39:cb:
0d:85:81:01:e3:30:75:ae:23:30:0c:fd:0e:09:13:
71:c5:64:b7:80:ad:88:99:ce:ec:70:85:35:22:6d:
23:42:b2:20:f3:f7:88:ad:92:ff:eb:e9:95:fe:c3:
ac:bc:88:84:0a:4d:6f:53:30:76:00:7e:06:a4:28:
57:81:4d:8a:47:27:85:e5:88:04:0d:8a:34:cb:92:
c3:7c:c1:77:eb:b8:af:67:fe:c3:ce:98:da:09:0d:
a2:5d:a6:89:4b:e3:3c:31:aa:8f:f4:8a:dd:e0:82:
5c:0f:db:87:83:15:89:ec:64:2d:68:77:05:81:6e:
a7:22:36:eb:a7:1f:3a:7d:52:0b:d4:1f:3e:6e:fa:
fb:ae:62:72:fa:c8:8e:bc:3e:b8:45:2d:6f:45:71:
df:13:f5:b1:1f:30:de:53:02:4f:27:b6:ad:4f:84:
e1:db:8f:b0:3a:53:81:f8:d9:c9:ac:39:d5:15:7d:
4d:36:20:2b:31:c0:81:a7:74:84:b7:e6:03:cc:e7:
b0:9d:09:32:7f:d3:ed:8e:c6:2b:0f:6d:30:bf:4e:
bf:98:66:af:c5:89:27:7a:04:1f:b7:0e:7f:88:ec:
f1:3c:dc:f1:7f:61:61:9c:34:0b:3f:c9:fc:54:24:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0D:D0:BE:80:11:1F:36:0E:50:8F:F8:EF:96:A7:44:97:D6:0B:08
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a5:89:38:0a:2a:bb:3a:de:dd:fd:76:0a:03:91:58:a6:d0:
e7:5e:7d:53:48:49:94:29:9e:1b:65:22:3c:98:45:eb:77:a7:
35:99:e1:20:13:0f:5f:1f:e7:68:10:47:78:bb:29:ac:35:51:
2d:d1:18:26:69:27:df:cf:7d:1e:80:ab:f3:64:1a:69:fa:39:
30:7f:75:e6:56:65:99:87:91:8f:15:0b:db:f0:41:94:b3:27:
3b:00:ae:ed:b0:82:94:cb:ee:e6:1b:b1:50:aa:e1:30:75:31:
2b:65:db:11:32:11:80:b3:93:14:49:f3:b5:2e:c5:9c:fd:ac:
0b:0c:aa:8b:d7:45:46:76:2d:44:2b:b8:95:12:42:7a:91:95:
39:bb:b3:16:02:1e:a6:49:e5:65:2a:36:92:26:17:9a:9a:de:
98:b3:25:c5:58:50:be:e9:f9:46:b0:29:d6:3b:83:c0:8b:db:
56:4b:da:db:a2:80:d1:28:65:29:1e:6d:45:49:bf:94:aa:47:
b4:5f:fd:5e:7a:c0:f8:30:e2:1f:18:2b:18:71:39:40:f7:17:
ac:9b:25:0f:8a:cb:75:b4:ef:f8:01:98:09:7b:29:62:00:48:
f9:26:0b:35:06:db:3b:98:9f:6a:52:55:ff:5c:ac:a6:5a:c9:
8e:14:f3:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNjSN11fKVL+V8GtmzF5bRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMDY2Y2I4NDg4ZGFlN2U0MjM0YWE3Yzg5MjQzMGRhZDEx
ZmU1YjEwHhcNMjYwOTEwMjMwMDMyWhcNMjYwOTExMjMwMDMyWjAzMTEwLwYDVQQD
EygxMjBkZDBiZTgwMTExZjM2MGU1MDhmZjhlZjk2YTc0NDk3ZDYwYjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUeMYBCLTaf7geCBOcsNhYEB4zB1
riMwDP0OCRNxxWS3gK2Imc7scIU1Im0jQrIg8/eIrZL/6+mV/sOsvIiECk1vUzB2
AH4GpChXgU2KRyeF5YgEDYo0y5LDfMF367ivZ/7DzpjaCQ2iXaaJS+M8MaqP9Ird
4IJcD9uHgxWJ7GQtaHcFgW6nIjbrpx86fVIL1B8+bvr7rmJy+siOvD64RS1vRXHf
E/WxHzDeUwJPJ7atT4Th24+wOlOB+NnJrDnVFX1NNiArMcCBp3SEt+YDzOewnQky
f9PtjsYrD20wv06/mGavxYknegQftw5/iOzxPNzxf2FhnDQLP8n8VCSgCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIN0L6AER82DlCP+O+Wp0SX1gsIMB8GA1UdIwQY
MBaAFJ0GbLhIja5+QjSqfIkkMNrRH+WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQt
M2VmMDJkNTE0MGI3LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQtM2VmMDJkNTE0MGI3
LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARaWJOAoq
uzre3f12CgORWKbQ5159U0hJlCmeG2UiPJhF63enNZnhIBMPXx/naBBHeLsprDVR
LdEYJmkn3899HoCr82Qaafo5MH915lZlmYeRjxUL2/BBlLMnOwCu7bCClMvu5hux
UKrhMHUxK2XbETIRgLOTFEnztS7FnP2sCwyqi9dFRnYtRCu4lRJCepGVObuzFgIe
pknlZSo2kiYXmpremLMlxVhQvun5RrAp1juDwIvbVkva26KA0ShlKR5tRUm/lKpH
tF/9XnrA+DDiHxgrGHE5QPcXrJslD4rLdbTv+AGYCXspYgBI+SYLNQbbO5ifalJV
/1ysplrJjhTzbA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:18:23 2026 by rpki-client