Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
File: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft (raw, json)
Hash identifier: PeP4yb481ZlXEdQG7wvJUG2HBWg0uSShGZZcTtxMnH8=
Subject key identifier: 33:CF:1D:EA:38:AC:05:B0:4C:AB:6C:C7:05:8B:AA:AA:AA:7F:4A:C9
Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Certificate serial: 019E2927498EF1ADE7FE98FB23F8F5962FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
Manifest number: 190F
Signing time: Fri 15 May 2026 01:01:40 +0000
Manifest this update: Fri 15 May 2026 01:01:40 +0000
Manifest next update: Sat 16 May 2026 01:01:40 +0000
Files and hashes: 1: Cu4pJx-r5WHHtQlLqPIl7Qbn6a8.roa (hash: nvdmwUw2DJYlyGm2Jpi5RTC+E3z4Xl1tYxTpqZlijT8=)
2: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl (hash: ElY7IT0HHfwFmZuA4Gq4bcJCY0NEwoo1nbsqfTmint4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:27:49:8e:f1:ad:e7:fe:98:fb:23:f8:f5:96:2f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Validity
Not Before: May 15 01:01:40 2026 GMT
Not After : May 16 01:01:40 2026 GMT
Subject: CN=33cf1dea38ac05b04cab6cc7058baaaaaa7f4ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:84:a8:84:3d:c4:90:8a:60:a4:44:04:49:
b3:28:2f:52:91:86:1f:3d:17:72:45:f8:50:ed:a2:
f9:57:d1:d9:c2:56:a2:44:bd:e9:e3:a7:b2:d6:b8:
01:17:f2:6b:31:78:28:a5:a8:6d:68:10:75:9a:3b:
15:de:b1:d1:87:0c:ac:a2:e4:db:69:ce:21:b7:eb:
2c:d2:87:7f:47:77:5c:bb:f0:c6:c1:a9:e3:63:0d:
f3:9a:71:d2:ad:f4:5d:0c:00:4c:72:5d:ce:8b:d7:
c5:a0:4f:56:23:3b:0b:6e:66:8b:c9:67:6e:bb:c5:
0b:50:01:1a:d2:be:6c:9b:33:34:7e:43:89:e8:10:
4c:7a:b9:31:12:ef:99:2f:61:a7:5b:b9:f6:fd:9c:
39:ed:2e:bc:5b:c5:b0:d5:90:78:f0:4b:4f:53:6e:
a7:b8:33:84:60:2a:58:1b:9a:b2:41:16:ce:08:a6:
3d:75:77:a0:eb:ad:8d:1c:77:c9:ed:38:6a:31:44:
7b:fa:d1:cd:88:46:02:e0:bc:31:40:81:03:0a:03:
5d:42:b1:7a:57:4a:f9:82:79:1b:85:9b:4e:8e:83:
c5:e5:63:bb:e6:f7:7d:f3:93:e7:18:0f:e2:fd:02:
50:18:bc:c4:08:92:9e:8b:08:ed:d4:8a:b7:25:8f:
44:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CF:1D:EA:38:AC:05:B0:4C:AB:6C:C7:05:8B:AA:AA:AA:7F:4A:C9
X509v3 Authority Key Identifier:
keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1b:30:d5:c2:79:af:08:a2:c4:d1:3f:2d:78:11:79:10:5d:
5f:6e:fa:8c:97:a8:30:e8:e1:80:31:88:88:67:69:0c:1e:a4:
c2:24:e8:80:55:46:90:95:55:4c:0e:16:dc:5a:b7:00:56:b4:
7f:a3:b8:df:55:9f:78:5d:dc:ef:a7:08:85:43:49:a8:95:e9:
db:c0:d7:bc:39:80:14:62:81:e7:c6:5d:79:e7:62:47:20:b1:
a2:0b:5b:eb:ea:fc:4a:ba:51:ce:0b:86:03:f1:1c:e2:f0:c7:
73:b9:f4:ab:47:97:df:e4:9f:59:30:57:d6:e4:d5:cc:65:21:
8e:bf:b7:95:b7:17:7e:58:ef:82:a9:4f:f3:22:a0:41:c7:a2:
f3:2f:cf:57:8e:af:f8:07:fd:97:eb:00:eb:c9:65:7b:16:88:
43:2c:b1:ec:ae:6c:96:d4:7e:36:ff:5d:34:c6:60:f0:6a:48:
13:20:45:37:bf:59:fc:26:1c:a6:f2:2a:c3:3d:0e:cb:f9:3c:
80:ad:ba:8d:23:06:98:00:e8:39:87:5e:ce:65:18:6b:d0:f9:
d3:42:4c:94:4a:73:9b:0c:45:47:6a:cd:03:f8:30:d6:1a:42:
20:fd:70:54:a6:07:35:c2:3c:06:3b:25:68:3e:39:aa:b2:b9:
7b:46:0d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:01:22 2026 by rpki-client