Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json)
Hash identifier: M4Fc44SgzzI67xuDTD06Vl60qBH6ahZZxLPXRl6B8qI=
Subject key identifier: AC:EC:C2:24:BD:29:90:84:6D:06:72:C6:6B:2A:DC:68:8E:5D:30:9E
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 01A1570B0AD089EEB3B677CB909B2D6B4D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
Manifest number: 1A44
Signing time: Tue 20 Oct 2026 02:01:43 +0000
Manifest this update: Tue 20 Oct 2026 02:01:43 +0000
Manifest next update: Wed 21 Oct 2026 02:01:43 +0000
Files and hashes: 1: WgXn9G5ryVcoOunG4ZvkrJdWw94.roa (hash: TVpzuhy4mtyrOaTWx+19/cTwhYu2EZdbTfL5e2TtoDg=)
2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: +A20oGodCHLCItt6XLCvW8IZ5cnJChjbxY4XRkrQ2OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 02:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:0b:0a:d0:89:ee:b3:b6:77:cb:90:9b:2d:6b:4d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: Oct 20 02:01:43 2026 GMT
Not After : Oct 21 02:01:43 2026 GMT
Subject: CN=acecc224bd2990846d0672c66b2adc688e5d309e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:3d:53:74:14:0b:2e:4a:d1:e0:eb:11:9c:
65:74:0c:d7:41:f5:fe:5f:a0:35:0f:03:6c:5a:d6:
3b:7a:1d:64:56:e3:e5:ac:94:b9:71:30:6c:50:fe:
1b:44:71:c9:b3:4e:11:a3:72:3b:07:d8:95:c6:ad:
83:b1:1e:0e:9f:e8:80:47:d1:39:45:6d:88:cd:73:
a7:68:8d:d1:bd:b5:f5:4f:a4:f6:2e:57:d1:d1:d4:
e6:0e:ef:27:a9:bd:fb:01:26:0f:23:40:2e:5e:af:
c7:61:f0:c3:53:23:48:63:ee:da:fb:ba:1c:ad:2e:
d8:f6:ae:84:f9:5c:7b:93:33:b5:a8:bd:ec:9a:9e:
c3:03:f8:ce:09:a7:ad:d6:4c:7e:df:00:7f:6f:38:
92:e5:81:71:dd:20:7f:f2:27:ab:14:ec:c3:84:6e:
79:10:19:c8:e9:3a:6d:0a:10:42:62:db:bb:44:4f:
a5:5c:ab:a9:83:4b:73:26:ad:d3:ee:c9:3e:4e:e9:
f1:9c:58:9c:78:93:e7:ac:9d:89:80:fb:a9:fb:27:
94:82:16:f0:2c:53:c4:dc:85:9c:c3:a9:db:26:5d:
b4:cd:a6:0d:4d:5f:1d:30:1f:24:3e:c6:6f:88:ab:
27:42:3e:87:cb:96:ca:0a:09:bb:df:37:9a:25:00:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EC:C2:24:BD:29:90:84:6D:06:72:C6:6B:2A:DC:68:8E:5D:30:9E
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8b:b1:2f:3e:54:bc:a5:1b:56:7f:7e:2e:35:46:02:29:de:
8a:e5:9f:64:34:1b:dc:5d:d7:83:84:92:11:b9:a5:7c:91:22:
da:f2:cb:0b:98:0c:9b:60:47:52:c6:8e:37:57:b0:12:32:17:
14:17:e5:28:4f:e3:55:cc:6f:2c:a3:1b:16:4c:66:59:e8:a4:
5c:8a:d0:94:a3:dd:b8:c8:20:b4:2e:b6:d3:90:88:d7:a7:09:
1e:a7:b1:c6:41:95:d2:e2:66:17:3e:4e:5a:ec:73:22:d7:37:
ca:08:a5:fa:79:0b:32:c3:66:ca:ed:8c:92:d0:bb:6f:3b:a8:
ef:77:86:d7:f5:16:ee:cb:43:44:c3:2b:bc:1f:c3:e5:ab:bb:
cd:ae:64:62:8e:08:38:e3:9b:b6:05:25:11:24:16:5c:b6:d8:
d6:90:05:96:fe:40:40:d2:fb:37:a7:d4:32:a2:de:88:17:70:
3e:16:cd:8c:98:1c:80:3e:33:fc:c2:8e:c0:3f:94:b8:34:26:
35:1f:67:b6:f1:d8:6b:86:ea:38:5a:ac:bc:09:5b:3f:55:7e:
48:1a:d4:ba:7c:66:bf:15:a9:3a:5b:f6:8a:a2:f4:4c:ae:f8:
20:a5:ca:90:14:7e:6a:d4:59:bc:08:e3:b2:d2:87:4b:98:09:
6a:71:fb:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFXCwrQie6ztnfLkJsta01BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlN2E4ZDdkYjMyYTQwZDRlMWQwMDI4YTdjZmQwODE0YjY1
MGY0MjIwHhcNMjYxMDIwMDIwMTQzWhcNMjYxMDIxMDIwMTQzWjAzMTEwLwYDVQQD
EyhhY2VjYzIyNGJkMjk5MDg0NmQwNjcyYzY2YjJhZGM2ODhlNWQzMDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCg9U3QUCy5K0eDrEZxldAzXQfX+
X6A1DwNsWtY7eh1kVuPlrJS5cTBsUP4bRHHJs04Ro3I7B9iVxq2DsR4On+iAR9E5
RW2IzXOnaI3RvbX1T6T2LlfR0dTmDu8nqb37ASYPI0AuXq/HYfDDUyNIY+7a+7oc
rS7Y9q6E+Vx7kzO1qL3smp7DA/jOCaet1kx+3wB/bziS5YFx3SB/8ierFOzDhG55
EBnI6TptChBCYtu7RE+lXKupg0tzJq3T7sk+TunxnFiceJPnrJ2JgPup+yeUghbw
LFPE3IWcw6nbJl20zaYNTV8dMB8kPsZviKsnQj6Hy5bKCgm73zeaJQDxjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzswiS9KZCEbQZyxmsq3GiOXTCeMB8GA1UdIwQY
MBaAFP56jX2zKkDU4dACinz9CBS2UPQiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi83MWU5NDgtNjkxZS00ZGVhLWIwMmIt
YjEyYTY5MzNmODI5LzEvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi83MWU5NDgtNjkxZS00ZGVhLWIwMmItYjEyYTY5MzNmODI5
LzEvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIuxLz5U
vKUbVn9+LjVGAineiuWfZDQb3F3Xg4SSEbmlfJEi2vLLC5gMm2BHUsaON1ewEjIX
FBflKE/jVcxvLKMbFkxmWeikXIrQlKPduMggtC6205CI16cJHqexxkGV0uJmFz5O
WuxzItc3ygil+nkLMsNmyu2MktC7bzuo73eG1/UW7stDRMMrvB/D5au7za5kYo4I
OOObtgUlESQWXLbY1pAFlv5AQNL7N6fUMqLeiBdwPhbNjJgcgD4z/MKOwD+UuDQm
NR9ntvHYa4bqOFqsvAlbP1V+SBrUunxmvxWpOlv2iqL0TK74IKXKkBR+atRZvAjj
stKHS5gJanH7Fg==
-----END CERTIFICATE-----
Generated at Tue Oct 20 12:27:05 2026 by rpki-client