Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.mft
File: nQeAa4mkzlk_5Hy7X5RgyN7nOB4.mft (raw, json)
Hash identifier: W23MWTQgH6MObdzRS6Le+9U/gRZE2+wqtUqFAvPq+5k=
Subject key identifier: 50:C2:80:11:2D:A5:BE:50:8A:CD:B9:D0:B8:DA:D2:58:00:38:CF:15
Authority key identifier: 9D:07:80:6B:89:A4:CE:59:3F:E4:7C:BB:5F:94:60:C8:DE:E7:38:1E
Certificate issuer: /CN=9d07806b89a4ce593fe47cbb5f9460c8dee7381e
Certificate serial: 01A147CE10DFBCC539470DEAE7CF2ECDE559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.mft
Manifest number: 0123
Signing time: Sat 17 Oct 2026 03:00:49 +0000
Manifest this update: Sat 17 Oct 2026 03:00:49 +0000
Manifest next update: Sun 18 Oct 2026 03:00:49 +0000
Files and hashes: 1: gHVOtIUlfqN9G-25nat8LNgWMC0.roa (hash: ZCyCPqJleAxlPygSUagqhGWeE2V/DZgzKMbA0GGYnGw=)
2: nQeAa4mkzlk_5Hy7X5RgyN7nOB4.crl (hash: QRUzzD9KjAg+viTiuBCuQ95URg37JEXZ0mkkv0Hf248=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:ce:10:df:bc:c5:39:47:0d:ea:e7:cf:2e:cd:e5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07806b89a4ce593fe47cbb5f9460c8dee7381e
Validity
Not Before: Oct 17 03:00:49 2026 GMT
Not After : Oct 18 03:00:49 2026 GMT
Subject: CN=50c280112da5be508acdb9d0b8dad2580038cf15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:12:72:c4:d7:23:ec:bb:76:ea:e9:a3:8d:
4f:51:ca:98:1d:0f:e1:8e:13:90:23:36:cb:ba:3a:
a7:b2:ac:a1:6c:2d:9c:62:a7:c3:2c:06:12:25:fc:
b8:6a:05:ea:21:9a:c5:1e:09:11:72:af:f3:e8:a2:
50:9a:e9:28:44:4a:9f:39:5f:b5:6e:96:c9:34:bb:
48:b9:3b:ca:a6:43:15:c7:07:fd:5f:9c:e4:20:25:
1c:a7:c6:22:a8:fe:b4:05:28:56:6b:5f:b4:6f:fe:
50:4b:a3:f2:b2:a4:1c:0a:26:6c:31:a8:9e:9f:bc:
d0:8a:45:ef:3c:db:f6:b9:80:95:be:ba:39:69:e2:
5f:3c:e2:03:e6:6e:6d:4c:43:b5:2a:40:b9:8e:5d:
08:72:bc:35:59:4b:be:c9:e6:a0:21:9a:1f:09:21:
39:be:db:96:9c:b9:b2:da:bb:63:41:52:6c:65:06:
e3:fd:5c:df:b6:50:fd:21:ec:44:03:e7:e3:8e:c4:
a1:c5:97:20:9d:05:13:11:e9:d1:28:f8:55:d8:a0:
0a:87:f3:e3:4b:af:6d:1c:dc:d2:a6:45:c5:a8:c0:
a2:a7:25:76:52:b2:ef:6b:d6:96:a0:b8:45:7e:b1:
48:36:c1:ee:8d:3f:8c:7e:6f:bd:6e:22:95:01:7d:
f3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C2:80:11:2D:A5:BE:50:8A:CD:B9:D0:B8:DA:D2:58:00:38:CF:15
X509v3 Authority Key Identifier:
keyid:9D:07:80:6B:89:A4:CE:59:3F:E4:7C:BB:5F:94:60:C8:DE:E7:38:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:13:b6:20:fb:22:ce:52:39:0a:a2:c0:9b:ab:b9:b6:5a:22:
fb:19:45:39:2c:a7:7e:15:af:b3:79:26:db:e7:2a:36:59:e9:
b8:53:58:a1:44:5c:cc:83:79:94:ce:f4:15:44:fa:e2:a9:ff:
9c:60:63:7c:b0:54:9a:30:10:4f:c1:2c:56:52:0a:04:d0:cd:
78:02:ec:9f:23:c8:0a:89:4c:6f:97:1c:90:6d:8d:70:fa:28:
9d:78:b8:02:95:6b:01:43:b7:c3:87:c6:ed:72:c7:b5:5a:80:
64:72:dd:7a:ed:2e:6f:0c:94:25:45:84:80:7d:8d:3c:6a:2f:
dd:f0:94:cd:1f:5b:21:6a:69:df:8c:89:d2:c9:65:ad:8b:4a:
ce:9a:e0:d8:80:a0:3b:7c:3b:7e:99:fd:a7:2a:9c:ea:07:5b:
9c:3d:db:8d:4a:e3:18:66:62:94:0b:b0:c8:a9:66:82:39:24:
bb:a0:6e:1c:c2:dd:3a:f0:7f:61:2a:4c:bc:83:fe:d7:ac:0c:
77:5a:5c:b9:c9:02:c4:60:da:b3:f4:7d:67:a8:4d:8a:88:df:
4e:d4:24:3f:73:3b:2f:69:ef:2c:b6:6c:4a:8e:16:29:8c:28:
18:d3:b3:e9:4a:82:4e:22:0f:f1:e1:4a:92:8e:f9:c1:46:ef:
44:57:b4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:54:21 2026 by rpki-client