Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
File: nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json)
Hash identifier: hAuVm6uDEND18Im0Cmhcj6/ma18KuiY04DGcc4Lo3yY=
Subject key identifier: 54:06:68:BA:63:FE:0A:B4:60:4F:E7:8D:1E:B5:17:39:D2:1F:5C:6E
Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Certificate serial: 019DCE2B2C2ED24473648D97800D2DA6BAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
Manifest number: 0BF9
Signing time: Mon 27 Apr 2026 09:00:28 +0000
Manifest this update: Mon 27 Apr 2026 09:00:28 +0000
Manifest next update: Tue 28 Apr 2026 09:00:28 +0000
Files and hashes: 1: dweYmfOa8TTIR4-iBHNV8XmJt9A.roa (hash: tN8Qt6nqsV9vwt70G/tNoeGlwkK0G3mWlGOVDNyRfzk=)
2: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: 3l2CJuntpX6po6eqaqxpUS3gBg0426WuJT7MMIg3g+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:2c:2e:d2:44:73:64:8d:97:80:0d:2d:a6:ba:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Validity
Not Before: Apr 27 09:00:28 2026 GMT
Not After : Apr 28 09:00:28 2026 GMT
Subject: CN=540668ba63fe0ab4604fe78d1eb51739d21f5c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:dd:90:c6:fb:a8:a6:3f:0c:ba:42:fa:6b:
33:5a:24:65:d7:59:48:3d:60:82:13:62:da:8f:fc:
2e:95:70:ad:d3:b3:88:7c:9c:be:aa:1a:e0:94:db:
2b:64:1f:0b:1e:b1:ad:04:83:e0:c3:f9:2d:fa:fa:
2c:57:b9:3d:7d:5c:ee:74:32:21:06:34:4b:e2:35:
f4:44:a1:1f:08:db:29:f6:11:2f:30:92:78:7a:1c:
44:3b:bb:3f:a2:a3:e5:02:14:3c:bc:a0:05:49:af:
a5:a0:00:f2:8b:88:d7:78:95:2c:5a:ab:a9:37:b5:
bc:7e:33:3b:ad:d3:75:6c:d6:38:45:ae:b8:bd:19:
3e:cf:c8:e7:13:8e:d5:2a:42:69:61:99:d4:df:63:
e3:20:74:70:b3:de:98:00:b4:09:d6:4b:7f:ba:08:
1b:e8:d8:96:e0:bd:67:8d:2d:31:d8:3f:c5:71:14:
09:32:d7:b8:1a:4e:e5:2c:8f:83:06:03:1e:b8:f9:
58:c0:9d:15:3a:18:3e:ed:0c:6f:30:b9:22:e3:10:
28:4e:75:a2:3f:4a:3b:d3:f3:ce:74:a7:7e:54:c3:
8c:21:63:08:74:44:f2:49:7f:21:e3:31:a6:79:c7:
06:84:65:44:33:c2:eb:39:80:5e:a0:73:44:d5:fa:
e6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:06:68:BA:63:FE:0A:B4:60:4F:E7:8D:1E:B5:17:39:D2:1F:5C:6E
X509v3 Authority Key Identifier:
keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:74:6d:b0:fb:4e:d6:28:49:8b:c6:ad:65:31:a5:fd:f2:e6:
07:c3:29:30:4b:a9:26:c2:ac:b2:94:c0:13:4b:3a:77:3b:bc:
df:d2:7a:ae:1d:84:68:80:04:c6:d5:24:3a:a6:1c:79:c4:2b:
49:76:62:14:c6:97:9c:22:43:e2:7f:2f:2a:4d:3a:a4:08:d3:
6a:09:c5:e4:be:c3:94:16:19:15:fd:0f:62:1c:67:95:a5:4b:
65:d6:65:b0:3c:a7:db:0e:c8:70:03:b5:27:d5:e6:88:58:44:
43:e0:7a:07:28:fc:8c:aa:57:d9:6e:47:5b:63:87:43:84:f2:
ff:a1:31:f7:5d:01:07:27:66:f7:42:a4:96:4a:27:11:ec:a0:
c7:84:f1:9d:75:32:ae:86:42:b9:3b:24:65:7c:9b:26:59:76:
f2:8b:a1:cf:1d:84:24:57:7b:f5:de:7e:e5:4d:7c:b0:e2:73:
ea:9d:5d:c0:f2:b4:c7:a2:3e:25:62:94:0c:ad:fb:d3:f5:b9:
e7:5e:9c:3f:27:22:3c:41:7f:66:93:b0:01:41:ab:00:e2:ba:
7c:1b:ff:93:a7:20:c1:f7:ac:85:98:0e:6b:4e:66:53:a5:92:
60:55:db:e2:f2:98:2c:67:59:dc:ff:c2:f3:8b:a2:f3:46:de:
86:0c:c5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:14:25 2026 by rpki-client