Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
File: nQhzWjV9MfqK2jHinxlYam_9lZI.mft (raw, json)
Hash identifier: YPtzbck/+ow2TxGmZZ3J4IKtupwSmkOw0xSeSANswd0=
Subject key identifier: 34:9A:32:6D:08:F9:1A:1C:61:10:02:7E:49:72:6F:97:BB:E6:96:ED
Authority key identifier: 9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
Certificate issuer: /CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Certificate serial: 019D37F74AF2870DA5F14CFDB2EA7F58F17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
Manifest number: 07DE
Signing time: Sun 29 Mar 2026 05:00:46 +0000
Manifest this update: Sun 29 Mar 2026 05:00:46 +0000
Manifest next update: Mon 30 Mar 2026 05:00:46 +0000
Files and hashes: 1: mNCgVhtdcHk_wU97-Gy3cw-WdNw.roa (hash: mTADEdCwBT4z8h+n4TsVWFX5hSFlb40/mneHRKe61U0=)
2: nQhzWjV9MfqK2jHinxlYam_9lZI.crl (hash: xWTdcY7iwxC1gZcR5UTp0hbtgOyXy927PaX+YvbTV2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:4a:f2:87:0d:a5:f1:4c:fd:b2:ea:7f:58:f1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Validity
Not Before: Mar 29 05:00:46 2026 GMT
Not After : Mar 30 05:00:46 2026 GMT
Subject: CN=349a326d08f91a1c6110027e49726f97bbe696ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:ba:62:7b:9e:4b:8d:2b:09:9b:4b:1f:42:
e6:d8:b9:89:82:ab:42:ef:a7:f9:47:49:cf:6a:16:
b1:7f:dd:f0:a7:e0:17:03:fe:ce:54:22:2d:93:1e:
f6:de:85:5d:da:66:5d:f7:95:57:05:1e:b6:27:19:
37:c4:ac:b5:7c:d3:62:04:db:20:64:13:0c:3a:04:
6d:2b:be:a7:ba:eb:05:1e:56:28:3b:8c:29:2e:99:
54:03:78:e6:69:45:51:9f:62:37:3b:00:44:1d:53:
d5:27:52:c6:f9:8f:8f:94:db:f5:e3:d3:dc:6b:0c:
11:f0:77:ae:c7:61:72:a2:c5:80:d1:79:aa:ae:6e:
28:dc:c4:5b:6f:e2:69:44:40:c3:fe:f6:8a:32:09:
61:04:98:6e:4f:27:d6:00:bb:16:73:7d:b6:6f:b3:
29:1c:df:60:9b:2a:c1:f8:86:d0:42:4a:97:e4:a2:
cc:f7:7a:0a:09:83:5a:e8:fc:01:d3:c0:2e:00:48:
26:7b:10:1e:5c:ff:62:c6:f9:5b:72:e4:8e:f8:b8:
25:be:7e:42:2a:71:29:4b:6c:52:a2:26:8c:63:10:
7f:f9:5a:a6:eb:02:38:27:a9:84:bc:7c:8a:82:a1:
04:0e:00:80:44:26:c5:19:6b:e0:f3:e5:bb:5c:64:
45:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9A:32:6D:08:F9:1A:1C:61:10:02:7E:49:72:6F:97:BB:E6:96:ED
X509v3 Authority Key Identifier:
keyid:9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a7:a1:df:f9:7c:ce:36:7a:c1:6e:53:9d:71:ca:5f:9d:ef:
b9:c6:12:61:ef:9d:31:2a:ab:23:cf:d2:46:a7:a9:0d:51:6f:
03:46:1c:dd:8d:91:62:35:24:42:55:32:15:09:68:78:b8:16:
12:d9:e1:a1:92:ef:89:71:b9:f2:53:ae:59:e8:5a:44:56:84:
93:44:4f:ca:1c:f2:c5:3f:8f:f0:41:93:c3:dd:9b:f6:69:f8:
f1:a1:7a:99:43:34:dd:df:e5:72:ca:6e:7f:84:a1:c2:83:19:
aa:16:d2:ef:87:68:52:84:d2:96:58:fb:65:f6:ef:89:8f:99:
f5:79:a8:06:b4:e2:03:89:60:bc:9a:b4:24:1a:92:14:4c:a4:
fa:4a:ce:55:2a:9d:69:aa:a2:69:3d:cd:95:67:f1:9d:72:f0:
9e:ab:49:99:68:08:a4:41:55:87:3d:9b:9d:28:4e:69:e3:50:
fe:fd:cc:4d:86:fb:da:29:76:e3:ac:09:79:38:58:af:dc:4b:
db:b5:b7:58:9a:b1:72:43:e5:87:f1:8c:81:84:49:8f:cc:34:
ff:f2:70:0a:79:bd:d8:e7:6f:79:77:34:f5:bb:05:07:60:9e:
d7:3c:1a:ed:fb:c2:13:f4:ec:07:40:95:eb:fb:1d:0d:24:52:
ad:a6:38:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:47 2026 by rpki-client