Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
File: nqeCd0gM8trWyesKUr5I33q2Z1o.mft (raw, json)
Hash identifier: AG1ZtD94FnR/3SENXJZHGXOETM7cgl7IMpzzHWHLevA=
Subject key identifier: 40:3B:19:19:FF:C0:B5:D7:6D:85:F5:2B:6A:85:04:F3:C2:65:7C:32
Authority key identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
Certificate issuer: /CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Certificate serial: 019D36E51D87F51E49316D84C27247C87E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
Manifest number: 1193
Signing time: Sun 29 Mar 2026 00:01:18 +0000
Manifest this update: Sun 29 Mar 2026 00:01:18 +0000
Manifest next update: Mon 30 Mar 2026 00:01:18 +0000
Files and hashes: 1: 9g6pOYHufxn_OQfDKkRqzS5XeEk.roa (hash: wDN1atJFquIXsTNAwjLE+5ZKVEXzShSPCEpqiDwXD30=)
2: nqeCd0gM8trWyesKUr5I33q2Z1o.crl (hash: Lc63cDOqEi8/hNINO1jnw48QbtDwvPYwjTOxnZWLpEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:1d:87:f5:1e:49:31:6d:84:c2:72:47:c8:7e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Validity
Not Before: Mar 29 00:01:18 2026 GMT
Not After : Mar 30 00:01:18 2026 GMT
Subject: CN=403b1919ffc0b5d76d85f52b6a8504f3c2657c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:6e:72:be:d2:9f:8d:94:76:e6:b3:f0:ca:
50:28:97:7b:2f:d0:e0:af:37:46:0c:1f:d1:ce:e4:
df:1f:dd:2b:f2:ee:da:b8:8c:1a:0d:29:51:4e:30:
35:1d:36:04:2f:7e:d9:6c:e5:81:2d:74:a6:5e:dc:
9f:a7:88:f4:f0:86:0d:69:62:e8:d7:37:93:fb:90:
d0:53:8e:76:ae:03:d5:13:f9:17:6b:23:31:1a:35:
c7:ab:df:14:84:5d:3c:50:0d:af:9e:ab:95:d8:16:
74:78:36:58:c9:d5:6f:e1:d6:5d:20:16:4f:fe:7c:
40:cd:e2:f6:a6:39:8c:f6:f7:54:b3:bf:5d:35:1d:
59:2f:ca:26:19:3c:1f:e5:a1:61:a8:ec:57:aa:87:
b9:da:fc:c9:e9:c1:cd:f5:44:42:50:ee:bd:06:e6:
a7:99:80:2f:d0:82:7e:6a:e3:f4:ec:a0:cf:59:d4:
a6:1c:b5:d1:4f:fa:54:39:2d:82:78:b2:6a:e4:71:
9f:77:87:1c:b3:73:a5:4e:05:ce:94:c7:11:76:f8:
45:90:e5:c4:89:49:79:39:45:51:fc:32:b5:3c:24:
a6:a6:6c:4a:5d:9e:5d:21:ee:3c:cd:a3:41:47:5f:
54:66:78:bf:3f:f1:33:7a:59:c8:f3:43:f3:51:a7:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3B:19:19:FF:C0:B5:D7:6D:85:F5:2B:6A:85:04:F3:C2:65:7C:32
X509v3 Authority Key Identifier:
keyid:9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:dc:aa:0f:c4:25:fa:5a:9e:0b:bc:1e:c6:02:b8:80:55:cb:
21:a8:62:4b:78:88:3e:b2:77:7a:27:8a:eb:b1:18:d7:c7:4d:
be:d9:63:4e:93:34:88:4f:be:df:69:43:3d:80:18:13:43:de:
57:9b:2e:7d:27:a3:27:39:50:f2:a3:41:5a:13:2a:04:05:cc:
7e:29:d9:43:18:83:44:b4:29:4e:79:54:50:fb:b6:2a:1c:cc:
50:89:6f:37:89:d3:5f:5e:7b:39:57:f6:86:89:ca:85:0d:dc:
be:90:d7:18:e0:35:8b:34:0b:1f:a2:3f:c5:bc:a9:42:ee:27:
bc:e2:30:b6:a8:95:c2:e1:85:cd:2e:66:8a:78:28:cc:47:0c:
c4:c3:d7:7a:13:ee:cb:85:cc:b6:92:a5:fd:1a:c8:98:41:9d:
32:a2:52:90:54:31:6f:06:29:1b:c0:ae:db:bc:80:1d:9a:de:
98:c6:70:ef:27:4c:7b:ba:63:bd:3e:2a:a1:d8:8f:f5:f0:87:
2b:9a:70:38:60:9e:6a:81:30:5a:ce:01:4e:a9:a0:61:ca:5f:
da:d5:7e:34:74:27:b1:bf:41:b9:3d:20:0a:32:67:2d:0f:fb:
64:14:33:19:7e:7a:c8:8a:84:ef:bc:a7:29:bc:6e:c8:e9:27:
a8:32:76:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 04:51:10 2026 by rpki-client