Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json)
Hash identifier: r/vORZlLncgus0B8rRZTHnKqVuU7rRh2WgAAOvXvYNI=
Subject key identifier: 59:31:D6:CF:CB:BC:95:5F:D1:5B:27:56:BE:FB:91:B2:E1:0D:C4:9C
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 019D389C4F5299938053E00997251EEDB889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 08:01:01 +0000
Manifest this update: Sun 29 Mar 2026 08:01:01 +0000
Manifest next update: Mon 30 Mar 2026 08:01:01 +0000
Files and hashes: 1: WgXn9G5ryVcoOunG4ZvkrJdWw94.roa (hash: TVpzuhy4mtyrOaTWx+19/cTwhYu2EZdbTfL5e2TtoDg=)
2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: v/NswlR2xCfpsOHbsS9Wre8Lz/W1vDq3xZwkV9iYiwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:4f:52:99:93:80:53:e0:09:97:25:1e:ed:b8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: Mar 29 08:01:01 2026 GMT
Not After : Mar 30 08:01:01 2026 GMT
Subject: CN=5931d6cfcbbc955fd15b2756befb91b2e10dc49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:84:0b:7a:a6:35:1a:d5:c2:5e:1d:77:d6:
47:74:85:3c:94:58:46:50:f1:d5:59:3b:db:e6:9b:
8c:82:5b:11:94:8e:0e:21:a4:2c:f0:44:1a:28:6c:
48:26:c6:52:cd:d5:5b:4f:15:87:ca:fe:e3:89:ee:
88:95:f4:4f:88:98:3e:ed:f6:17:66:a4:1e:b4:cb:
4b:fa:69:23:34:f1:a6:28:a7:46:97:73:2b:66:6c:
11:72:c2:1d:c1:d3:47:96:c7:87:9f:a3:4d:0d:3e:
bc:ef:74:b8:66:f5:63:0d:7d:87:54:a2:44:24:9b:
80:44:9b:37:95:9f:18:c5:ed:61:76:3f:d8:d8:ef:
af:36:a1:08:ec:96:81:64:aa:9d:dd:9c:10:50:6b:
06:e9:e0:5e:45:57:43:b1:b8:fc:fb:c3:40:43:6f:
e3:69:e5:f1:22:bb:38:64:d9:e7:27:8e:13:ac:0a:
7c:94:13:b3:f9:08:7d:05:38:52:51:09:fe:ec:ed:
da:1f:ae:d7:6f:88:7e:1b:15:12:68:c2:ed:d3:37:
7e:b2:8c:f4:57:68:8f:a4:da:1d:4e:75:b5:e7:ce:
41:84:f7:17:16:e6:95:17:31:ec:26:5a:3e:7b:6a:
99:8b:73:5e:2a:36:f4:87:55:ec:2b:cd:37:e0:07:
25:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:31:D6:CF:CB:BC:95:5F:D1:5B:27:56:BE:FB:91:B2:E1:0D:C4:9C
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:49:65:5b:ad:b2:8e:d8:d3:ca:9d:db:8e:29:dc:1c:bd:9c:
eb:de:f6:20:b9:e8:74:6b:68:42:91:b4:a6:56:5e:5b:3c:17:
e8:95:df:04:29:85:ea:4d:8e:e3:5f:da:31:b6:12:be:a2:21:
4e:8b:b9:09:8a:8a:88:91:d6:f2:48:3c:66:71:3f:a0:7a:b0:
f3:4e:2d:22:a4:28:89:19:bd:6c:6d:ac:c2:73:66:b0:4c:04:
f3:c8:7d:76:ae:1b:f7:a2:cf:ea:06:c1:93:d8:e0:58:e1:0a:
9b:13:0b:69:d3:a1:5f:f8:e3:92:13:3c:91:70:35:aa:eb:3a:
77:b7:e3:5c:73:38:fc:77:39:30:d4:92:35:33:cc:86:4e:e9:
06:71:46:b1:42:58:b6:33:66:61:3a:1f:0c:e9:58:ab:dd:aa:
6c:79:3c:ba:12:99:ad:c9:86:44:87:ee:4d:fa:07:ff:19:4f:
7c:13:29:e4:78:bd:48:d8:2b:e8:50:e6:a8:52:14:cd:f1:b4:
2e:aa:48:b8:b7:8a:55:9b:bd:9d:6a:8c:a3:38:54:95:8a:a5:
43:d8:dc:43:1a:5a:de:e5:85:4f:6f:e5:27:03:11:a2:74:74:
cc:0c:b6:26:98:49:f7:37:1c:73:70:cd:c2:13:a0:fc:e2:81:
87:5f:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:06 2026 by rpki-client