Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
File: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft (raw, json)
Hash identifier: hAot77WZDtzu3ipqi0Z4lhAgmcBqx986yhfiwFfZ4i8=
Subject key identifier: 3B:6D:ED:B5:FD:91:FF:80:7E:F2:05:33:B5:86:CA:DA:B1:D3:31:B0
Authority key identifier: 0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
Certificate issuer: /CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Certificate serial: 01A1355A6F4909039B323996722A025101C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
Manifest number: 16AF
Signing time: Tue 13 Oct 2026 13:01:21 +0000
Manifest this update: Tue 13 Oct 2026 13:01:21 +0000
Manifest next update: Wed 14 Oct 2026 13:01:21 +0000
Files and hashes: 1: 3UgaGbZGGFfjB7sq8z7R6V-NiDY.roa (hash: e/q2ZKMuya72WNv5B5kUE91L0olkeZByYdU0k2qDJHo=)
2: DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl (hash: ncqGjJtnSyw6U3LVuaj8pliWNn7pBhyOR4/ED/vSONI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:5a:6f:49:09:03:9b:32:39:96:72:2a:02:51:01:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0dbf9eb836085c19d93f5254221c33948e85e3
Validity
Not Before: Oct 13 13:01:21 2026 GMT
Not After : Oct 14 13:01:21 2026 GMT
Subject: CN=3b6dedb5fd91ff807ef20533b586cadab1d331b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:b6:e0:d4:37:52:62:81:12:8c:45:e8:10:
9b:26:e5:a1:84:5e:3c:8b:e5:c7:46:75:ac:0f:4a:
50:79:b6:01:b7:0a:c9:d9:fb:fb:11:d6:3f:33:f2:
94:14:98:a0:3c:78:f5:be:ec:c8:31:13:bb:35:af:
82:c3:93:5e:2d:4e:22:ef:a2:f2:ea:c2:19:74:5f:
38:41:68:3b:94:01:39:b5:60:73:a8:89:f4:2d:ee:
e5:f1:6a:e1:6e:7d:94:f9:16:a5:3d:a5:d4:e5:5c:
07:af:64:9a:f8:76:7a:b4:09:31:68:e0:83:10:93:
14:73:1c:11:0d:86:41:5f:2f:dd:12:91:f9:e9:bc:
ea:bc:ed:f5:3c:a3:ce:13:2a:cd:f5:45:64:03:a1:
fa:e9:98:05:f2:7e:b0:63:5c:10:a9:22:24:75:21:
c7:c8:df:46:83:4f:96:5f:21:8d:eb:71:f8:8d:5f:
18:e5:13:3c:97:d1:f2:c1:9e:22:39:88:57:2d:c5:
d9:20:1f:b7:89:d4:56:52:1d:ed:38:24:eb:e2:bf:
bb:94:9b:77:33:3e:4f:79:a4:ee:72:be:59:be:de:
e3:cf:09:0e:36:f7:77:6b:ac:f8:ac:81:8b:ab:cb:
28:3d:ef:6e:55:cf:56:33:73:f9:fb:ee:46:36:78:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6D:ED:B5:FD:91:FF:80:7E:F2:05:33:B5:86:CA:DA:B1:D3:31:B0
X509v3 Authority Key Identifier:
keyid:0D:0D:BF:9E:B8:36:08:5C:19:D9:3F:52:54:22:1C:33:94:8E:85:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/848fd6-eb80-4e1e-8378-3e46ce35d4e7/1/DQ2_nrg2CFwZ2T9SVCIcM5SOheM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f1:f6:45:71:26:2e:64:a3:e6:a9:5f:88:88:82:5e:9e:8e:
44:69:2f:47:71:b9:d5:4b:7b:91:18:61:78:e9:5b:0c:9c:83:
51:83:08:70:17:c5:58:9a:bf:20:66:34:91:41:08:a6:17:04:
41:ce:98:0a:4a:b7:17:0f:14:a9:e9:da:68:32:ee:7d:52:0b:
01:3f:5f:97:e5:7c:46:40:f7:b5:b7:fa:b5:78:b0:56:5e:e8:
29:9a:ad:4c:d4:0b:9d:5a:1d:32:de:b8:e4:80:55:04:ec:5a:
08:33:05:a6:43:86:d4:af:d2:5c:48:22:48:24:81:53:d9:95:
81:ce:4e:64:b4:c8:c9:87:e4:12:26:ba:d3:2c:19:d5:a3:37:
e7:3b:7d:19:c9:53:2d:8f:80:d0:2b:11:04:42:3a:40:f1:10:
3a:57:4b:95:34:f3:0a:b9:d4:3f:22:e9:38:43:55:a3:b2:6d:
05:e2:c8:3b:0f:da:bd:8f:61:02:71:b6:ac:db:c3:2d:8d:b6:
57:46:6c:02:22:88:51:d6:98:8f:09:89:37:ed:13:c0:fc:73:
7c:0c:5f:93:5e:d1:c2:06:e1:61:c6:df:1d:e9:88:5d:58:93:
9d:ef:e8:cd:ce:70:cd:df:1e:e4:d6:05:c9:07:0f:8f:2d:f2:
34:86:9c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:25:50 2026 by rpki-client