Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
File: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft (raw, json)
Hash identifier: dAVDSi4+P4KkHSc0nuMOySCZBPECxlGUSLsDJMDzdLo=
Subject key identifier: E6:EA:17:02:09:60:BB:9F:B4:64:2F:4B:89:99:0D:12:6F:07:3A:ED
Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Certificate serial: 01A14C86A2C1971C2FDC0C6DBAB696416DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
Manifest number: 1AAF
Signing time: Sun 18 Oct 2026 01:00:54 +0000
Manifest this update: Sun 18 Oct 2026 01:00:54 +0000
Manifest next update: Mon 19 Oct 2026 01:00:54 +0000
Files and hashes: 1: Cu4pJx-r5WHHtQlLqPIl7Qbn6a8.roa (hash: nvdmwUw2DJYlyGm2Jpi5RTC+E3z4Xl1tYxTpqZlijT8=)
2: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl (hash: ZornhkZI1CZw3Ib8qkSkrUwXgyRy6+y0DJ+rKKvSO2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:86:a2:c1:97:1c:2f:dc:0c:6d:ba:b6:96:41:6d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Validity
Not Before: Oct 18 01:00:54 2026 GMT
Not After : Oct 19 01:00:54 2026 GMT
Subject: CN=e6ea17020960bb9fb4642f4b89990d126f073aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:ef:a3:cc:60:13:77:c4:0a:62:81:ea:95:
60:51:6d:fd:79:a2:45:9e:d2:bc:b9:54:80:69:34:
96:d0:8f:ca:db:ff:80:35:b3:1b:40:ae:d5:09:6f:
69:01:88:01:0e:ea:c7:3f:50:f2:d9:e0:b1:71:74:
e0:f8:4a:5d:ad:67:a1:2d:0e:e2:63:1a:14:90:02:
9f:ca:12:0d:ae:7b:2e:1a:d7:f5:c5:00:d2:e8:2d:
54:f8:74:df:07:4f:5e:ed:54:5a:28:93:ba:df:e5:
65:c4:db:51:13:df:b9:36:73:21:23:8e:0b:31:d8:
41:5b:f5:1e:c3:30:e9:ab:47:21:79:3c:f9:07:81:
9a:13:74:e7:18:bd:0e:b5:8c:c6:d8:5c:42:9e:25:
07:42:05:a8:eb:da:7b:96:13:3c:fe:51:88:41:43:
a9:72:6c:d0:24:65:08:40:a2:61:74:2a:0c:d1:b2:
9c:a2:a8:c0:f4:3f:93:96:12:10:43:37:cd:63:ce:
90:7c:33:59:57:2f:7f:1f:e0:a6:f0:9e:96:e0:0d:
c1:33:1b:79:9f:9b:63:52:14:39:a3:e6:a7:56:36:
66:86:22:40:73:55:16:ba:8a:07:87:14:7d:34:ac:
67:4d:af:e9:23:8c:62:f0:3c:0c:5f:ab:1a:7d:42:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EA:17:02:09:60:BB:9F:B4:64:2F:4B:89:99:0D:12:6F:07:3A:ED
X509v3 Authority Key Identifier:
keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:6c:a5:66:91:eb:17:d0:d2:47:c6:9a:46:c6:b0:49:3f:d3:
10:94:5b:9a:e2:9c:76:05:72:da:18:3d:2f:a5:0c:cb:2c:bf:
b6:d7:4d:b5:74:a3:a0:e9:d9:7e:35:87:67:b2:62:44:0a:e8:
55:d9:9c:7e:bd:ec:dc:74:07:4c:c3:e1:cf:82:5a:08:84:e2:
83:29:a1:b8:c1:4b:b3:e9:6f:98:a5:fb:e2:01:42:1a:e8:c6:
a4:a5:1a:06:7a:17:f8:54:b9:34:6d:f9:ae:3f:c5:84:89:af:
a6:be:7e:ed:5c:84:77:74:a7:4e:72:41:ae:8c:b8:99:c7:64:
28:ab:fa:ed:58:53:62:c2:5b:fb:99:08:d2:9f:3e:ac:9c:24:
8a:e2:ec:a0:6c:55:27:39:2d:45:b5:03:91:e5:67:3b:c3:d2:
42:aa:6a:5f:eb:77:f4:10:64:e1:e7:0f:7f:e4:5b:f5:0e:ec:
ee:12:1c:5d:54:be:5a:db:82:92:23:a9:1e:42:1b:f6:a0:2f:
2f:50:ed:3f:00:ee:b2:90:64:c1:67:ab:7b:88:6b:2d:d3:ad:
a3:76:35:eb:cb:21:fb:f7:0f:26:25:c5:ab:6c:67:79:4c:a2:
7c:a7:7e:34:9b:0c:35:73:2e:b0:a1:90:81:46:15:b4:49:da:
cb:34:40:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:54:59 2026 by rpki-client