Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json)
Hash identifier: NEYs8KiG1E+KNWOwbKIsnaIX+rV/imhN4/fWZlxLLZQ=
Subject key identifier: BA:F3:6E:91:CD:50:C5:EF:B3:46:3C:B5:29:F3:A2:93:B4:76:CD:FF
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 01A143BAC527BCB64BC74C4E2607B5B31F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
Manifest number: 1A3A
Signing time: Fri 16 Oct 2026 08:01:15 +0000
Manifest this update: Fri 16 Oct 2026 08:01:15 +0000
Manifest next update: Sat 17 Oct 2026 08:01:15 +0000
Files and hashes: 1: WgXn9G5ryVcoOunG4ZvkrJdWw94.roa (hash: TVpzuhy4mtyrOaTWx+19/cTwhYu2EZdbTfL5e2TtoDg=)
2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: 8FpdEwNb95dNIn1Y7BsAFcyryxXLZOw7LKUYBbv48fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:ba:c5:27:bc:b6:4b:c7:4c:4e:26:07:b5:b3:1f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: Oct 16 08:01:15 2026 GMT
Not After : Oct 17 08:01:15 2026 GMT
Subject: CN=baf36e91cd50c5efb3463cb529f3a293b476cdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:57:82:f4:c1:85:ad:da:d8:1d:3a:11:fe:
42:d3:63:42:16:2c:38:66:20:27:e8:52:40:e6:48:
e4:ea:e5:5e:83:5b:14:a9:0e:44:1b:ef:5b:cc:10:
a4:28:a5:e9:d0:1d:a9:ed:1e:74:45:3c:a7:f6:10:
73:47:8a:94:e5:1c:d0:96:84:8f:c2:e0:06:3d:fb:
d1:5d:31:8e:b3:be:e7:8b:e6:0a:30:19:18:04:83:
f7:da:5c:1d:c0:c3:99:72:e8:e4:7a:37:c6:84:ff:
d2:f9:b1:ae:3f:52:9a:29:da:b5:74:42:55:48:9d:
7e:00:21:13:e7:7d:6c:f2:e1:cb:4c:e6:eb:03:ec:
49:38:d8:35:5a:6f:e7:aa:e4:9d:21:f7:e1:09:82:
16:ed:98:7f:50:35:7c:52:d8:1b:83:a7:d8:49:41:
a6:fd:1e:e0:28:3d:58:63:1e:ef:79:e8:fb:99:94:
2b:06:e2:68:79:ce:05:4f:23:d4:44:14:bd:ef:8a:
a9:51:1b:a5:68:62:bf:81:31:58:35:f3:e5:3d:d5:
e5:bc:80:a1:3a:b7:e9:3a:20:c3:20:58:b2:da:51:
a1:f7:78:77:a5:36:08:2f:7c:2b:05:3e:54:7d:15:
e6:d8:6b:59:df:38:fc:a3:ee:15:55:25:a2:ac:5f:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F3:6E:91:CD:50:C5:EF:B3:46:3C:B5:29:F3:A2:93:B4:76:CD:FF
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:60:85:43:5d:54:26:b8:60:b5:c1:3e:5b:a5:71:80:7e:d0:
97:54:68:ec:4d:48:01:63:a5:0b:38:89:6b:4f:73:79:03:9f:
0d:a3:de:d5:fb:a4:d2:3a:2d:ad:c4:9b:32:b3:df:b5:51:0f:
60:4b:6b:42:66:f4:d5:ec:5c:e1:02:37:95:8a:7f:04:ee:b9:
6c:a1:a3:b3:82:ff:03:d3:b3:8b:f4:4a:4a:eb:a5:33:3a:39:
1e:60:58:4e:86:c8:9b:b7:5a:a8:e9:77:5f:e2:33:a9:8a:77:
89:7a:39:f6:19:c9:82:fd:9b:ce:42:d3:6d:0c:f5:b2:60:d3:
a9:ea:35:9f:55:40:73:71:f8:e1:57:14:9a:3f:69:a5:a8:fe:
92:e7:4b:fe:b1:8e:e8:17:30:27:1e:af:48:25:05:c5:fa:55:
8a:38:38:43:f0:16:6f:1a:d0:52:a3:18:09:06:af:ad:c2:3d:
5b:83:c9:d9:1a:97:ed:07:49:49:3c:71:aa:f4:93:2b:18:ce:
fe:9c:6b:44:25:52:fd:83:a5:4d:14:24:ec:25:e2:67:ee:30:
b5:33:ef:e9:0b:7f:ac:a3:d5:ba:a4:bf:2d:e9:3f:89:33:ce:
7a:d6:9c:03:95:48:c2:f9:09:85:0f:51:6f:ec:55:d4:5c:e7:
da:b4:e8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:38:57 2026 by rpki-client