Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json)
Hash identifier: 0AfNaZq9+LD2ToF4gCWiWGNpzD7tyNlk/4YC4fQk6zU=
Subject key identifier: AD:94:DE:02:30:08:C1:86:B3:90:46:20:4B:9D:74:16:6B:65:92:41
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 019E31BBF55DAB7AC4956B62E4C149A29556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
Manifest number: 18A3
Signing time: Sat 16 May 2026 17:01:01 +0000
Manifest this update: Sat 16 May 2026 17:01:01 +0000
Manifest next update: Sun 17 May 2026 17:01:01 +0000
Files and hashes: 1: WgXn9G5ryVcoOunG4ZvkrJdWw94.roa (hash: TVpzuhy4mtyrOaTWx+19/cTwhYu2EZdbTfL5e2TtoDg=)
2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: qqYxO9nwOuSZEgKGX1kRGIzfZcd6puEYpXy2iCNxljI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bb:f5:5d:ab:7a:c4:95:6b:62:e4:c1:49:a2:95:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: May 16 17:01:01 2026 GMT
Not After : May 17 17:01:01 2026 GMT
Subject: CN=ad94de023008c186b39046204b9d74166b659241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:66:8c:1a:33:9d:75:ff:8d:8b:53:7e:99:76:
09:da:8f:e8:00:64:8e:a3:46:17:62:ca:5e:7e:7c:
b2:9c:1f:a6:47:06:7b:b0:2d:dd:9b:57:20:43:fb:
7b:23:49:a1:a4:df:40:d1:8c:36:79:94:6e:40:67:
92:29:43:6f:96:73:b4:68:da:12:bb:c9:22:62:26:
bb:cd:5b:16:09:d7:a0:e1:ce:21:cb:04:78:da:3d:
eb:23:20:b4:eb:ab:bd:16:03:fe:f0:47:f9:27:9a:
46:32:7c:72:09:58:64:13:ee:f4:5d:c0:fc:04:9f:
6a:1f:9b:de:60:19:2d:97:bc:1b:0a:84:56:a6:34:
a1:05:73:01:81:76:91:f7:0c:05:a1:2c:f3:43:0d:
bc:cb:79:6f:9a:ca:1d:30:3d:db:b8:69:9d:3a:29:
56:68:fb:f1:02:38:9a:1b:37:9b:96:c6:aa:34:76:
ad:55:31:db:00:56:f6:0c:3d:05:22:f4:cf:fe:0f:
2d:58:11:01:99:fe:e4:35:e9:93:8f:0c:0c:0b:3d:
75:b2:6e:2b:11:2a:31:83:7e:b3:b4:22:db:f7:ac:
94:5f:1f:c7:f1:41:f6:03:48:54:61:51:1a:6e:23:
69:26:7f:2e:21:09:d5:d8:51:8c:ae:dc:77:e7:ee:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:94:DE:02:30:08:C1:86:B3:90:46:20:4B:9D:74:16:6B:65:92:41
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:55:1a:d5:08:fa:43:0e:70:1c:93:79:96:ab:4d:92:c7:15:
27:0e:36:45:87:12:0a:11:5c:8e:59:2b:59:35:a6:16:80:76:
c6:f9:0b:d4:18:da:b5:65:90:93:a1:04:bf:fa:24:a4:f8:ca:
f3:af:45:16:3f:25:e9:24:50:7f:ad:13:8f:72:ed:8e:09:72:
34:a0:6b:b4:31:4f:e3:b7:7a:89:97:33:36:eb:f4:ac:39:e0:
3f:fa:58:e5:f1:0a:54:97:a9:9b:ef:51:26:1b:72:25:95:7c:
5a:78:90:9a:05:85:9a:bd:e6:cb:27:b8:fc:41:73:92:f1:b2:
dd:69:0d:f5:09:a0:09:b2:13:ca:ad:5e:87:ea:29:bc:59:24:
f3:f4:f9:e3:55:61:36:69:b4:bc:f0:6d:71:f2:65:b9:b6:d0:
da:3c:4a:30:2d:9f:f9:a9:01:e0:fc:c1:fe:2e:fa:e2:f7:83:
63:53:14:50:7e:ca:03:c3:f9:a3:87:c2:c8:21:80:1a:f8:2c:
5e:17:f3:15:7f:c3:85:35:93:d9:82:12:fa:ab:5b:66:2e:3f:
ee:41:2b:2f:aa:ef:20:96:8b:7b:5c:63:10:d8:40:a8:2f:7b:
44:d2:5c:9f:b2:ad:35:1b:47:42:cb:6a:02:5b:cd:f8:26:3e:
3c:fa:be:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:37 2026 by rpki-client