Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: peoxOyDhHTi06CiePRPCVC0sFX3xp+IzUN8ZgDPViVs=
Subject key identifier: 8C:25:EA:58:22:BE:DE:6D:0D:3C:20:BA:F3:F9:B0:26:68:AC:08:E3
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 019DCE99A1587F3B0F4AB1F19D6024A055CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 18EF
Signing time: Mon 27 Apr 2026 11:01:07 +0000
Manifest this update: Mon 27 Apr 2026 11:01:07 +0000
Manifest next update: Tue 28 Apr 2026 11:01:07 +0000
Files and hashes: 1: DdkhG9ScS5mKOj6FEPIiUrVTDGA.roa (hash: JddADCbKnFgd2w/G6EyTsDQqGgZM9PxBGHiXPX0tQCk=)
2: Kfpukp1mfPmVOexK4iRI3WWUkLE.roa (hash: dRxylayWUvJFav2jQoF/w0hiqJLQbgosTCaGTxEw3QY=)
3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: HSDsu6DKVsDSlHL1/5wpJMUZTjyCJdn84LN8mqYfrpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:a1:58:7f:3b:0f:4a:b1:f1:9d:60:24:a0:55:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Apr 27 11:01:07 2026 GMT
Not After : Apr 28 11:01:07 2026 GMT
Subject: CN=8c25ea5822bede6d0d3c20baf3f9b02668ac08e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:fe:5f:ca:31:a9:c4:76:22:05:a4:70:04:
7c:48:63:c9:51:37:4a:90:80:19:a5:e7:47:2a:07:
17:c2:31:17:c7:9b:29:1b:92:ba:f3:40:cb:47:81:
d2:65:4c:b9:a8:e2:04:e4:b7:7d:fe:37:70:f5:3e:
12:fb:60:03:d2:cd:23:b5:fb:8b:f4:00:0a:9a:19:
f0:11:29:2c:43:04:0a:27:50:d7:44:3e:b6:cf:3d:
17:ad:74:0c:df:db:1d:63:83:2f:68:92:99:fd:87:
12:95:29:db:f1:17:ad:06:14:f0:cf:e6:93:62:cf:
2b:81:16:a6:3e:db:cf:e0:d7:dc:8d:76:22:1e:06:
8a:63:4f:af:1e:be:10:52:f5:7a:51:81:49:94:a7:
55:c5:e2:b0:b8:f2:c3:db:97:4d:f7:69:0d:95:d5:
f8:ed:60:8d:ff:92:66:fa:18:b6:d3:99:14:78:3d:
31:1b:c2:83:9e:32:a9:38:42:58:6a:66:44:47:26:
37:86:5c:65:85:e5:89:2a:20:84:b6:0c:67:6f:f5:
72:26:b1:96:0e:8f:98:48:90:53:84:ce:8a:aa:13:
67:dc:8d:e8:07:69:06:09:29:d5:cb:18:f4:16:2d:
67:05:a4:5b:80:49:a5:fd:20:e4:fa:df:c2:ea:63:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:25:EA:58:22:BE:DE:6D:0D:3C:20:BA:F3:F9:B0:26:68:AC:08:E3
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:75:b8:21:5c:ae:07:4a:b1:e1:83:3d:a3:01:97:c3:53:c5:
79:a1:b4:78:b3:77:11:e5:24:54:29:d4:f3:56:2e:f0:a1:0e:
fc:79:e8:53:28:c9:fb:29:58:85:b5:ed:61:ab:30:dc:8f:21:
f6:3a:ce:6b:c3:cc:fd:43:e1:f0:30:49:f2:bd:1b:74:16:69:
f7:ff:25:ba:41:fd:d2:ce:25:67:b3:b0:cb:a4:50:ba:b8:b7:
7b:cb:dc:64:6b:bc:30:80:5c:0c:42:65:ef:c2:53:e4:43:4e:
4f:6f:d2:b8:75:75:2f:44:54:ed:a0:93:c2:77:9c:72:8e:73:
95:2a:85:a7:4b:12:5e:c9:c4:88:0c:7c:03:7d:f8:83:06:d2:
58:1f:47:ad:56:81:be:a4:35:ce:bc:47:d1:80:c9:99:8d:11:
13:14:bb:ef:b9:cf:aa:da:03:a1:f0:f7:03:05:11:be:3c:a5:
3a:5b:09:d9:82:41:5b:58:c1:a9:0a:c4:59:59:6b:69:d3:bf:
90:e0:9d:e1:ed:ff:3f:27:29:7c:a8:f4:1b:c6:0a:62:e9:27:
1e:12:5c:0a:e1:2f:38:11:3c:86:2d:b7:59:1c:27:14:9d:a9:
48:4d:99:19:98:70:66:10:2e:d5:6f:e7:e9:5c:a1:66:3a:38:
b6:07:a3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:31:56 2026 by rpki-client