Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: GD9kb8c66JZwhFd5+DbG849Bk2gyMwb1xiTpJmpPN6o=
Subject key identifier: AD:51:F6:6A:94:B7:39:62:C2:7F:5F:19:F5:48:33:70:3D:A9:C1:9B
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 019EB845B6E845AAFCEA2109A92F88072E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 1968
Signing time: Thu 11 Jun 2026 20:00:36 +0000
Manifest this update: Thu 11 Jun 2026 20:00:36 +0000
Manifest next update: Fri 12 Jun 2026 20:00:36 +0000
Files and hashes: 1: DdkhG9ScS5mKOj6FEPIiUrVTDGA.roa (hash: JddADCbKnFgd2w/G6EyTsDQqGgZM9PxBGHiXPX0tQCk=)
2: Kfpukp1mfPmVOexK4iRI3WWUkLE.roa (hash: dRxylayWUvJFav2jQoF/w0hiqJLQbgosTCaGTxEw3QY=)
3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: Fymt1KAtJucmdzS+u5xWn+KXLXhFwkzZXZLewuz39tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:b6:e8:45:aa:fc:ea:21:09:a9:2f:88:07:2e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Jun 11 20:00:36 2026 GMT
Not After : Jun 12 20:00:36 2026 GMT
Subject: CN=ad51f66a94b73962c27f5f19f54833703da9c19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9e:57:da:a0:1f:9e:f4:17:25:8c:ba:a6:b3:
5c:d0:0b:ab:8d:cb:7c:3a:ee:40:25:11:24:a6:a0:
81:53:27:d4:00:1d:e5:36:a3:d8:a5:c5:4c:3c:2c:
92:5b:a1:10:50:3a:c0:23:d9:c0:f5:44:16:bc:56:
1f:26:2a:97:fc:1c:01:32:dc:cf:1c:42:ed:e4:d5:
fc:3c:dd:3d:68:f3:bf:8d:ce:84:3a:62:5e:65:46:
e8:b4:cb:cc:a0:0a:13:8f:ee:c2:8b:58:05:35:d9:
cc:8a:b4:f5:a3:aa:9e:9f:63:c7:41:74:61:43:2a:
c7:d9:c2:50:3b:8f:81:29:56:99:f6:74:e9:fa:c8:
3b:da:fa:2e:12:29:f1:8f:70:55:e1:69:a7:e4:ad:
8d:f2:24:12:f8:6c:58:e2:bc:88:1b:93:56:8b:c2:
2a:6d:e6:91:b1:2c:2c:7d:81:81:f1:01:d5:10:ad:
44:34:0e:72:be:63:09:4c:00:9a:f6:c4:c9:a5:27:
e7:47:7e:7d:c3:13:b7:9d:2d:ed:07:13:b5:4f:ad:
46:5f:1b:54:89:e1:92:e0:89:f6:75:8d:c0:c7:ab:
d6:5a:ad:47:4a:2c:dc:72:3f:de:cc:4a:28:cf:83:
29:83:6a:77:55:89:cf:79:93:fb:21:ca:4c:4e:67:
87:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:51:F6:6A:94:B7:39:62:C2:7F:5F:19:F5:48:33:70:3D:A9:C1:9B
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e8:c6:60:2e:c1:7f:3c:47:25:65:37:f2:47:95:3e:5d:44:
00:e4:54:30:17:6d:ab:80:9e:f6:fe:7f:53:77:06:43:15:8f:
c6:43:20:d9:0e:2b:0d:69:66:09:71:d2:9b:20:8e:83:52:b9:
67:c2:21:f5:cc:23:9f:81:63:cd:58:4e:37:88:14:c7:8b:49:
1b:d1:14:58:60:8b:0a:8a:52:8b:aa:f6:07:e8:07:8a:27:5a:
9a:a8:7a:73:43:23:43:bf:ac:15:dd:83:6e:e9:3a:d2:63:ba:
5f:ef:81:06:50:de:f5:5b:e6:5a:35:c9:38:03:76:11:3e:ea:
d3:27:10:55:bf:79:a9:d4:61:c3:6c:12:b9:2f:71:14:23:7d:
64:7a:2a:42:6a:02:27:3c:ed:70:59:e6:60:46:a5:fe:25:10:
88:77:34:ea:71:e8:68:f2:bf:a2:ae:ca:8d:9b:7c:0c:52:62:
ce:36:6f:76:2b:b4:44:97:69:92:8a:90:7c:0a:66:1d:8c:ce:
d9:56:7e:db:96:8b:64:29:2a:21:fd:f7:ad:a9:93:18:22:01:
c4:a3:79:1c:a7:46:b1:f7:88:c6:36:6f:3b:17:c1:7a:1a:18:
79:4e:db:c7:aa:78:e6:2a:85:16:fd:ca:eb:95:31:2d:ef:d5:
ed:f4:5f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:55 2026 by rpki-client