Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: Vl9HPEDjUGwJK9Y8xoYMcxJksoFMQhh/ubfi8S//qCU=
Subject key identifier: 5B:DF:DF:B7:94:C1:E2:7B:6C:02:E9:E3:04:DE:47:4D:DC:EF:D5:AB
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 019FA1F2390346B541A4A630138F6457A977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 19E1
Signing time: Mon 27 Jul 2026 05:00:33 +0000
Manifest this update: Mon 27 Jul 2026 05:00:33 +0000
Manifest next update: Tue 28 Jul 2026 05:00:33 +0000
Files and hashes: 1: DdkhG9ScS5mKOj6FEPIiUrVTDGA.roa (hash: JddADCbKnFgd2w/G6EyTsDQqGgZM9PxBGHiXPX0tQCk=)
2: Kfpukp1mfPmVOexK4iRI3WWUkLE.roa (hash: dRxylayWUvJFav2jQoF/w0hiqJLQbgosTCaGTxEw3QY=)
3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: aflyLF4cJlsb9uzhNBLl96+1wLdZYsmKk1k/XNcheHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:39:03:46:b5:41:a4:a6:30:13:8f:64:57:a9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Jul 27 05:00:33 2026 GMT
Not After : Jul 28 05:00:33 2026 GMT
Subject: CN=5bdfdfb794c1e27b6c02e9e304de474ddcefd5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:de:10:f5:74:92:64:0c:fd:0a:1a:91:19:
70:6c:86:18:05:83:42:20:77:c4:23:f5:02:bb:d2:
6d:07:b1:23:45:a7:ad:6b:1e:7b:65:65:32:1f:a3:
8b:b7:fd:05:ae:53:bb:88:b4:37:ad:44:f2:29:ae:
4c:db:41:d2:c9:7e:80:d7:71:e5:20:f0:ad:56:ea:
d4:34:e1:ad:b9:d9:ec:8d:62:4b:da:7f:b7:73:a3:
e6:2e:dc:3e:19:56:e3:f2:bd:a2:8e:be:82:0d:16:
c8:d3:bb:bc:95:bd:5f:60:c2:4d:23:f5:48:be:d8:
a9:32:5b:fa:a6:59:1f:21:bc:a7:cd:f2:ce:18:06:
9a:92:bf:8b:c6:b5:c3:7d:23:86:16:d3:20:1f:0b:
d2:0b:af:ce:8f:7a:03:59:06:74:6b:94:ff:60:fc:
7c:b9:e4:fd:e4:81:92:15:03:15:a0:ef:f1:f4:68:
bc:07:32:8f:4a:fe:94:5f:f8:47:43:ee:ce:ad:a5:
e8:3b:31:5c:fb:8d:69:90:bc:8a:36:50:dd:33:95:
6a:a7:81:f4:7e:f1:3e:b5:cd:0c:78:92:12:65:b8:
b8:15:18:17:a4:92:dc:44:0d:00:b2:0e:59:a1:f1:
ec:3e:34:96:ff:ca:72:dd:e4:62:44:a9:e0:8a:49:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DF:DF:B7:94:C1:E2:7B:6C:02:E9:E3:04:DE:47:4D:DC:EF:D5:AB
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:db:49:f8:d2:db:06:d7:96:29:a5:12:34:e6:0a:03:2c:ea:
45:7b:2c:d8:53:9c:a2:da:b1:8f:81:cd:88:aa:a4:65:19:1b:
52:bb:52:75:3f:07:a1:f9:b9:bc:22:23:c1:e3:78:c9:9f:ab:
ca:2a:03:51:cd:9c:48:f5:2a:7a:66:fc:96:9a:03:71:31:d3:
aa:24:10:45:9e:69:9a:03:62:ad:c7:3b:01:07:c7:a8:11:30:
0b:57:59:63:f8:37:ad:a0:54:1e:65:bd:0e:78:25:8f:35:a4:
3e:73:9c:16:df:12:d8:ba:07:e6:57:19:3d:7a:42:3e:43:c6:
38:50:ff:f5:69:08:2f:8e:46:14:f8:28:cf:7c:49:fa:13:f8:
12:4b:e9:35:cc:76:86:3b:1d:9f:66:4f:bc:1b:79:07:3c:19:
86:bf:3b:49:d7:2c:82:a2:a4:33:25:ba:a8:a2:45:ac:dd:a7:
20:87:03:b5:76:6a:36:66:df:0c:55:ec:e0:14:af:84:75:f4:
b9:5f:69:33:a5:17:a3:70:6a:fd:b6:83:ba:5a:a8:09:a8:79:
89:f3:e7:a2:28:40:80:74:4c:fe:61:61:99:7a:74:45:4e:9e:
92:4a:e1:c2:63:7d:db:39:36:7d:52:e1:30:5a:94:37:64:06:
8e:1e:12:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:42:31 2026 by rpki-client