Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: iNe2T3JUC+NWxpTn2kCXGtcLV1/AZ01bPKekXTrfF40=
Subject key identifier: C3:17:63:6E:FA:12:46:18:57:39:F8:6D:24:81:89:39:67:B4:CD:84
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 01A182D0D2CCC268F36BD1CF76130F075439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 1ADA
Signing time: Wed 28 Oct 2026 14:01:25 +0000
Manifest this update: Wed 28 Oct 2026 14:01:25 +0000
Manifest next update: Thu 29 Oct 2026 14:01:25 +0000
Files and hashes: 1: DdkhG9ScS5mKOj6FEPIiUrVTDGA.roa (hash: JddADCbKnFgd2w/G6EyTsDQqGgZM9PxBGHiXPX0tQCk=)
2: Kfpukp1mfPmVOexK4iRI3WWUkLE.roa (hash: dRxylayWUvJFav2jQoF/w0hiqJLQbgosTCaGTxEw3QY=)
3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: nRy10TNzAJsdjllJJwop0io8+OFelyH0q+8kN0kWUvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d0:d2:cc:c2:68:f3:6b:d1:cf:76:13:0f:07:54:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Oct 28 14:01:25 2026 GMT
Not After : Oct 29 14:01:25 2026 GMT
Subject: CN=c317636efa1246185739f86d2481893967b4cd84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1a:29:e5:6a:62:f7:09:82:4f:24:ce:a9:fb:
74:70:ac:27:e2:fe:3f:d2:5a:b5:40:bc:57:08:00:
fd:a5:b4:f1:ea:81:25:b5:4e:77:60:03:1f:74:69:
d2:db:f5:84:ad:0b:a6:c1:f7:4b:80:8a:ee:a2:17:
da:6a:41:bc:31:1c:ea:45:6d:1b:64:aa:8e:b2:08:
98:a3:46:2d:7b:17:05:40:6e:a5:9e:a4:4d:1a:03:
ff:b4:d0:27:84:dd:2e:54:a6:fd:33:08:a1:ea:83:
85:41:23:ac:37:95:40:d4:6b:65:85:61:bc:18:48:
21:54:00:f6:c0:81:00:2b:11:a4:b7:5b:8a:ca:65:
29:10:92:a2:72:d3:15:26:c8:44:1c:24:9c:63:b4:
4b:5b:58:a9:78:7e:56:97:10:18:5e:a5:4f:ca:9f:
0d:b4:83:42:29:5c:d8:ee:ef:d5:b0:c4:b8:e1:60:
3f:3e:07:85:b4:75:4a:47:33:30:c1:b8:5e:5e:60:
09:86:a5:08:8c:d5:63:4f:6a:e1:32:08:8d:99:d1:
df:90:62:30:58:94:73:ec:d5:6b:97:5f:1e:4a:67:
96:e4:41:8c:db:2b:59:d7:f7:75:4a:91:60:22:9d:
15:11:43:10:cd:ae:21:ed:af:46:50:7c:af:ef:44:
ad:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:17:63:6E:FA:12:46:18:57:39:F8:6D:24:81:89:39:67:B4:CD:84
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e8:c8:33:64:c7:ee:37:a3:0f:d4:6f:5b:ec:df:cb:9e:6b:
1f:8d:6d:50:b9:e8:b9:a3:f0:b4:20:3f:b9:a9:a6:b6:71:24:
fc:a0:50:57:ff:6c:7b:d1:e3:3e:0e:ad:ac:7b:5d:70:43:ec:
f2:8d:50:c4:2d:a4:3f:11:97:a3:27:89:e6:ee:2b:ac:ef:ae:
2f:1c:23:7e:6a:46:12:24:6f:b1:a8:c7:fe:34:15:54:90:8c:
82:2e:bf:dc:f2:3e:58:d2:20:e6:12:fb:d5:db:40:fb:a2:c6:
a7:b9:2b:11:b9:27:af:26:11:3e:aa:99:e2:43:83:08:67:67:
57:62:1e:d5:ba:53:28:2c:18:42:d2:10:68:79:1d:ee:43:ae:
97:c5:85:ee:2f:2f:97:7f:bc:a3:5e:0d:af:d9:a2:eb:a8:d7:
10:c1:8f:a1:5b:14:26:36:a9:96:8c:8a:80:e4:bb:cf:b8:ae:
fe:2e:43:03:88:87:b2:5c:48:53:87:1f:77:94:92:77:f2:ab:
6e:20:fd:bc:e0:21:df:0b:f6:33:c9:71:cb:dd:8f:8b:b1:4f:
0e:7f:bd:15:79:72:83:d8:58:86:c9:33:e4:04:f4:e2:ea:5f:
53:97:9c:24:ef:59:d3:39:1f:63:9a:3f:2a:97:01:8a:03:45:
01:92:ed:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:27:23 2026 by rpki-client