Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/b8bf28-b410-4f33-a2e8-c29497291171/1/nsQ-CkGrttFUutw3FiO00U2RhnU.mft
File: nsQ-CkGrttFUutw3FiO00U2RhnU.mft (raw, json)
Hash identifier: 5YwrXut8Xn2wgz89M9I29OJrQLv4aji3FiCrvWZASCo=
Subject key identifier: FC:B9:C0:4C:80:DF:72:92:9D:F7:87:09:D3:54:DF:78:5C:AD:A4:2D
Authority key identifier: 9E:C4:3E:0A:41:AB:B6:D1:54:BA:DC:37:16:23:B4:D1:4D:91:86:75
Certificate issuer: /CN=9ec43e0a41abb6d154badc371623b4d14d918675
Certificate serial: 019D389BC3428E771F9F959461E7772543E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nsQ-CkGrttFUutw3FiO00U2RhnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/b8bf28-b410-4f33-a2e8-c29497291171/1/nsQ-CkGrttFUutw3FiO00U2RhnU.mft
Manifest number: 34
Signing time: Sun 29 Mar 2026 08:00:25 +0000
Manifest this update: Sun 29 Mar 2026 08:00:25 +0000
Manifest next update: Mon 30 Mar 2026 08:00:25 +0000
Files and hashes: 1: W41jkoCNrZpVvdG8bkCBNW5R_4k.roa (hash: qtGUsRmtlWOqnoQ+8yxZfu8EirwF0nT2QjPAHj2PBw0=)
2: nsQ-CkGrttFUutw3FiO00U2RhnU.crl (hash: pgThPs/3XgtU0qn1UYQk1VEQej4rEyAR06zersGpKPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/b8bf28-b410-4f33-a2e8-c29497291171/1/nsQ-CkGrttFUutw3FiO00U2RhnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/b8bf28-b410-4f33-a2e8-c29497291171/1/nsQ-CkGrttFUutw3FiO00U2RhnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nsQ-CkGrttFUutw3FiO00U2RhnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c3:42:8e:77:1f:9f:95:94:61:e7:77:25:43:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec43e0a41abb6d154badc371623b4d14d918675
Validity
Not Before: Mar 29 08:00:25 2026 GMT
Not After : Mar 30 08:00:25 2026 GMT
Subject: CN=fcb9c04c80df72929df78709d354df785cada42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:d3:77:24:29:d7:7c:5f:a6:fd:2d:52:d3:
fe:34:1c:1a:27:01:1a:5c:d3:6e:6b:16:cf:f8:81:
54:44:c9:a1:9e:4e:dc:92:18:1a:47:2b:90:60:69:
10:31:1e:88:b4:8b:90:ad:f8:6d:75:42:58:76:0a:
28:22:61:6c:a2:15:2c:41:1c:a4:3a:3a:72:72:96:
6c:90:d3:43:56:fd:14:06:a0:79:2f:4f:e2:f6:f5:
c4:8c:f0:5f:9e:08:36:50:c1:13:58:27:f5:7b:02:
8f:c1:cf:a1:9f:df:4b:32:18:88:fb:d0:2b:19:53:
44:e9:33:8f:f0:cc:95:6b:c5:0a:41:08:5f:94:e3:
7f:54:31:f0:8c:38:23:88:e9:ac:47:4b:17:65:ab:
e9:1e:1d:99:1b:c1:53:44:58:9b:26:02:14:b1:6c:
70:96:e4:73:d3:00:fb:60:f4:ff:d0:8b:53:9c:05:
85:89:38:30:b0:13:99:2c:4b:59:2d:df:8d:32:94:
ba:37:7c:15:4c:26:eb:20:d0:29:68:99:9c:fc:ca:
28:81:30:0c:fd:9d:91:0d:60:d1:cb:b3:84:68:1c:
d4:42:bf:3f:a7:69:12:a9:7b:6c:4c:64:7d:d7:ad:
8f:9f:2f:fb:e0:b4:e3:18:8e:b6:23:85:e6:74:93:
ea:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B9:C0:4C:80:DF:72:92:9D:F7:87:09:D3:54:DF:78:5C:AD:A4:2D
X509v3 Authority Key Identifier:
keyid:9E:C4:3E:0A:41:AB:B6:D1:54:BA:DC:37:16:23:B4:D1:4D:91:86:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsQ-CkGrttFUutw3FiO00U2RhnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b8bf28-b410-4f33-a2e8-c29497291171/1/nsQ-CkGrttFUutw3FiO00U2RhnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b8bf28-b410-4f33-a2e8-c29497291171/1/nsQ-CkGrttFUutw3FiO00U2RhnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8a:53:17:72:cf:ad:da:2f:87:ac:60:bc:cc:65:9f:c9:cd:
db:49:0a:bf:78:fa:04:af:b3:56:49:4f:1e:19:00:40:78:6b:
45:cc:a1:11:81:a4:4c:d0:76:0b:c3:f3:06:e4:db:7d:41:bf:
8e:3a:fe:c9:f9:55:b6:be:dd:5e:5f:88:3b:01:48:d9:2a:3e:
ae:e6:6c:47:2a:13:06:5b:4c:18:6f:fa:71:3a:34:79:0e:63:
b8:f8:48:ea:64:24:42:5c:28:62:77:c2:0f:a2:57:4b:d7:ec:
9e:b2:4b:a7:2f:b2:22:9b:ec:8b:b2:76:aa:89:d5:43:c0:e1:
97:19:bd:5f:da:cd:c9:d7:34:9b:17:95:5c:09:59:58:0a:39:
e8:ed:66:18:df:7a:79:6f:19:26:49:11:3e:f2:85:14:29:83:
fd:ad:f7:b5:46:63:a4:15:e4:d6:39:8e:1d:5b:9e:2e:08:e2:
b6:ea:67:1f:74:c3:82:13:b2:e8:64:91:a7:a5:0c:80:fc:c7:
6f:60:87:04:2e:fa:93:39:10:03:04:5b:f3:65:02:4c:3e:31:
ae:3a:f4:8b:89:c0:dc:81:cd:51:6e:38:30:ca:22:45:ec:fa:
c1:45:c6:90:89:cc:5d:b8:57:e7:12:ff:5a:a8:4f:96:ee:32:
88:9d:aa:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m8NCjncfn5WUYed3JUPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYzQzZTBhNDFhYmI2ZDE1NGJhZGMzNzE2MjNiNGQxNGQ5
MTg2NzUwHhcNMjYwMzI5MDgwMDI1WhcNMjYwMzMwMDgwMDI1WjAzMTEwLwYDVQQD
EyhmY2I5YzA0YzgwZGY3MjkyOWRmNzg3MDlkMzU0ZGY3ODVjYWRhNDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9LTdyQp13xfpv0tUtP+NBwaJwEa
XNNuaxbP+IFURMmhnk7ckhgaRyuQYGkQMR6ItIuQrfhtdUJYdgooImFsohUsQRyk
OjpycpZskNNDVv0UBqB5L0/i9vXEjPBfngg2UMETWCf1ewKPwc+hn99LMhiI+9Ar
GVNE6TOP8MyVa8UKQQhflON/VDHwjDgjiOmsR0sXZavpHh2ZG8FTRFibJgIUsWxw
luRz0wD7YPT/0ItTnAWFiTgwsBOZLEtZLd+NMpS6N3wVTCbrINApaJmc/MoogTAM
/Z2RDWDRy7OEaBzUQr8/p2kSqXtsTGR9162Pny/74LTjGI62I4XmdJPqswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPy5wEyA33KSnfeHCdNU33hcraQtMB8GA1UdIwQY
MBaAFJ7EPgpBq7bRVLrcNxYjtNFNkYZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnNRLUNrR3J0dEZVdXR3M0ZpTzAwVTJSaG5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9iOGJmMjgtYjQxMC00ZjMzLWEyZTgt
YzI5NDk3MjkxMTcxLzEvbnNRLUNrR3J0dEZVdXR3M0ZpTzAwVTJSaG5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9iOGJmMjgtYjQxMC00ZjMzLWEyZTgtYzI5NDk3MjkxMTcx
LzEvbnNRLUNrR3J0dEZVdXR3M0ZpTzAwVTJSaG5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIpTF3LP
rdovh6xgvMxln8nN20kKv3j6BK+zVklPHhkAQHhrRcyhEYGkTNB2C8PzBuTbfUG/
jjr+yflVtr7dXl+IOwFI2So+ruZsRyoTBltMGG/6cTo0eQ5juPhI6mQkQlwoYnfC
D6JXS9fsnrJLpy+yIpvsi7J2qonVQ8Dhlxm9X9rNydc0mxeVXAlZWAo56O1mGN96
eW8ZJkkRPvKFFCmD/a33tUZjpBXk1jmOHVueLgjitupnH3TDghOy6GSRp6UMgPzH
b2CHBC76kzkQAwRb82UCTD4xrjr0i4nA3IHNUW44MMoiRez6wUXGkInMXbhX5xL/
WqhPlu4yiJ2qsQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:57 2026 by rpki-client