Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: uPgtY2TqzKy9nq3Pc8s1xjo7UyPhRKmC0fW3sSmG3Ug=
Subject key identifier: 64:06:C4:6D:09:34:AA:FA:CF:5E:0A:84:80:7A:51:65:42:97:0A:49
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 01A08B9EB20C1BAAF202EB8889649225617A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 1A5A
Signing time: Thu 10 Sep 2026 14:00:28 +0000
Manifest this update: Thu 10 Sep 2026 14:00:28 +0000
Manifest next update: Fri 11 Sep 2026 14:00:28 +0000
Files and hashes: 1: DdkhG9ScS5mKOj6FEPIiUrVTDGA.roa (hash: JddADCbKnFgd2w/G6EyTsDQqGgZM9PxBGHiXPX0tQCk=)
2: Kfpukp1mfPmVOexK4iRI3WWUkLE.roa (hash: dRxylayWUvJFav2jQoF/w0hiqJLQbgosTCaGTxEw3QY=)
3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: VAO/psGnugc9GfUNRQNCpTQ7qCI9LR3pYohP3Qh4q3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9e:b2:0c:1b:aa:f2:02:eb:88:89:64:92:25:61:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Sep 10 14:00:28 2026 GMT
Not After : Sep 11 14:00:28 2026 GMT
Subject: CN=6406c46d0934aafacf5e0a84807a516542970a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:c2:13:e5:bc:f6:98:aa:b9:48:fa:1b:ac:
d9:8a:14:4f:39:04:15:f6:4e:19:97:37:af:6a:56:
cb:4f:b1:d1:81:e3:5b:76:eb:ee:d2:9b:69:e9:c3:
09:33:c8:ec:dc:61:bd:76:47:db:b3:29:84:d2:54:
f6:0a:93:2e:1f:9f:ab:b1:b7:0b:f5:cb:42:92:d3:
1c:ad:4e:46:3c:c4:33:f8:f6:60:b4:4f:7c:93:d3:
10:17:bd:9e:ef:b7:54:ba:83:e1:5f:17:42:c5:44:
7f:70:a2:13:7e:74:95:69:e4:be:5d:5c:60:ed:ff:
b2:e1:31:b8:11:97:ac:8e:a8:89:cc:de:38:62:ea:
d6:ea:53:29:3b:81:1d:88:4d:d0:fc:e8:03:22:e4:
cd:d9:9f:c5:68:f9:91:eb:54:cd:50:5a:6f:a8:f7:
1c:bb:a6:c2:67:43:b9:7e:f9:bb:66:7d:29:4a:1e:
34:24:9e:50:94:1f:fe:59:f0:59:bc:1b:8f:21:f2:
29:50:1c:15:44:d7:69:77:a9:b7:4d:de:90:94:91:
a2:a9:fc:2b:17:7b:99:d5:1c:e0:7b:52:51:99:10:
96:25:07:55:ef:2e:34:d3:b8:37:63:80:ec:19:4f:
12:66:54:79:d1:56:93:06:e5:6e:95:72:94:a4:26:
aa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:06:C4:6D:09:34:AA:FA:CF:5E:0A:84:80:7A:51:65:42:97:0A:49
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:11:a4:21:cc:e3:e2:61:06:55:4a:8c:f3:08:0d:e2:55:23:
32:da:dc:b3:cb:a4:d5:ff:95:38:f2:67:f9:3e:6a:b9:9c:f3:
0d:86:93:17:44:cd:db:be:e1:84:ce:a0:6e:cf:e4:9d:64:ce:
41:32:96:95:6a:dd:5b:b4:5d:19:9e:30:93:fb:1e:c1:1d:f0:
cd:d5:23:8b:32:e4:93:8f:1c:f8:97:1b:48:f3:65:1b:33:6e:
58:6e:cd:fb:d6:dc:48:92:d0:0c:17:53:6e:1d:fa:2f:34:89:
6e:64:99:05:92:38:ce:07:e6:25:33:a4:59:fc:78:48:7d:4f:
1f:e3:d6:63:17:6c:44:45:58:88:2f:4a:d4:5f:ab:03:1c:be:
72:da:78:2a:1b:af:1e:41:28:7e:87:07:b4:ef:1d:00:d1:79:
be:4d:17:33:fc:33:a8:d1:6e:d6:3d:e5:d4:5c:54:bc:58:33:
61:62:92:44:3e:7b:22:73:0a:8b:32:9e:dd:56:00:df:60:14:
9d:d4:07:b5:fb:4e:84:e2:c5:69:f5:bc:51:a5:37:8c:49:bc:
5b:a3:61:b4:36:2a:03:18:32:cc:06:8b:54:19:fb:f7:77:ca:
1d:69:16:0b:b9:0e:36:7c:21:24:ce:67:37:ef:80:b8:44:b2:
dc:3e:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:39 2026 by rpki-client