Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
File: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft (raw, json)
Hash identifier: VxV74ZH8YN0UfZHloEn9oqMJHoe267EBNNH5QWLPvn8=
Subject key identifier: E6:DE:1F:E0:1E:42:25:C3:C5:5F:89:0D:A1:C5:D7:87:C0:50:AE:D6
Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Certificate serial: 019D35D28AE4B8A786207F8F0EBEA8A88F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
Manifest number: 1891
Signing time: Sat 28 Mar 2026 19:01:23 +0000
Manifest this update: Sat 28 Mar 2026 19:01:23 +0000
Manifest next update: Sun 29 Mar 2026 19:01:23 +0000
Files and hashes: 1: Cu4pJx-r5WHHtQlLqPIl7Qbn6a8.roa (hash: nvdmwUw2DJYlyGm2Jpi5RTC+E3z4Xl1tYxTpqZlijT8=)
2: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl (hash: 7wEKsqWXbEDXd5/L13Ew8NgcH5NxJz/Lr2Nk5IgOVJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:d2:8a:e4:b8:a7:86:20:7f:8f:0e:be:a8:a8:8f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Validity
Not Before: Mar 28 19:01:23 2026 GMT
Not After : Mar 29 19:01:23 2026 GMT
Subject: CN=e6de1fe01e4225c3c55f890da1c5d787c050aed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:39:1d:8d:7e:4d:51:6d:4f:58:ce:05:00:db:
49:b4:93:f5:6b:55:d9:89:48:4a:ff:a0:2b:2a:99:
9c:75:2a:1e:58:29:13:f1:28:a2:25:71:15:19:c2:
6a:93:b6:7d:94:64:a5:21:42:c3:e7:33:65:8f:22:
bc:72:cd:8c:78:fb:b3:ac:fb:55:0a:5d:68:f8:a8:
9b:75:44:3b:7b:f3:ac:31:ad:36:a0:a5:45:85:93:
8f:ac:bd:27:1e:a5:ec:29:ec:2d:35:86:5b:33:77:
2d:c4:9d:da:0b:ab:79:19:40:9e:06:b4:3c:12:90:
d7:25:2b:35:a2:91:cb:c9:c5:83:6b:df:ab:8c:de:
c2:7b:c9:da:ed:b7:e5:8d:a7:59:64:0f:94:8e:10:
3b:3d:e3:66:64:e7:3e:2c:50:8a:fa:ea:c6:58:72:
22:71:73:07:1d:85:af:a3:f9:37:4b:e8:a4:2f:8c:
54:ad:2c:9e:3a:73:e6:1f:74:c5:f5:f3:42:bc:9e:
e5:7a:64:85:df:c0:7d:8a:50:83:55:ff:8c:6d:d5:
a1:54:b5:a0:ad:ab:0c:df:3a:30:ed:37:db:de:9e:
71:95:ab:34:f7:a7:28:99:01:c4:81:56:c6:73:6a:
6b:d0:7a:71:ae:07:25:6c:13:97:03:22:38:b2:48:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DE:1F:E0:1E:42:25:C3:C5:5F:89:0D:A1:C5:D7:87:C0:50:AE:D6
X509v3 Authority Key Identifier:
keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:38:f6:f4:c2:5b:78:c5:48:66:9c:b0:38:38:7a:32:3f:f1:
d5:e8:97:03:75:eb:93:cb:72:14:dc:9e:f8:49:26:b1:d6:5f:
4f:d8:3c:5b:c1:49:32:38:cd:82:71:99:6d:87:0e:44:c9:c2:
55:ec:c5:cf:c1:08:4b:8f:40:3a:96:28:e7:53:07:40:19:f1:
d4:b4:c4:e6:28:89:e7:4d:63:40:92:9b:2a:43:09:c2:5e:da:
19:b0:16:68:8f:c5:46:9c:a8:67:93:a0:1e:d3:31:2b:0c:c5:
39:b0:03:2a:14:0b:8c:3c:9b:75:9d:68:d1:18:d4:54:f6:c5:
9f:a9:45:b1:58:a0:a7:ed:ba:23:63:a7:69:e6:c8:02:0a:fc:
76:d8:17:2c:64:92:9f:26:8c:8e:32:58:ab:ba:66:f1:64:bd:
15:3f:ea:39:90:1c:6f:6c:78:67:65:aa:ab:dc:6d:b0:fc:c7:
70:32:80:24:9a:81:a4:ca:ff:d3:06:1a:73:5b:62:f9:f4:be:
06:96:05:10:88:b4:27:ba:45:d4:37:25:1f:00:1f:3a:de:b2:
ce:8d:61:72:a1:d5:87:23:a9:dc:81:de:b2:63:08:f3:75:97:
05:31:aa:0a:45:86:c5:72:31:37:7d:64:44:b7:91:81:fe:46:
fe:a6:2c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 03:02:04 2026 by rpki-client