Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
File: nqeCd0gM8trWyesKUr5I33q2Z1o.mft (raw, json)
Hash identifier: w31N1GCGgwZ9Xra1HWO3QrQ2niuytOHjxa9ETVDaBro=
Subject key identifier: 2B:24:91:9E:33:C1:15:7C:3C:EE:C3:4B:77:53:A4:85:EE:84:82:89
Authority key identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
Certificate issuer: /CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Certificate serial: 019F0E1B26A7DF0C59E8CF0DDC313FF781CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
Manifest number: 1287
Signing time: Sun 28 Jun 2026 12:01:28 +0000
Manifest this update: Sun 28 Jun 2026 12:01:28 +0000
Manifest next update: Mon 29 Jun 2026 12:01:28 +0000
Files and hashes: 1: 9g6pOYHufxn_OQfDKkRqzS5XeEk.roa (hash: wDN1atJFquIXsTNAwjLE+5ZKVEXzShSPCEpqiDwXD30=)
2: nqeCd0gM8trWyesKUr5I33q2Z1o.crl (hash: E5XxmUWBG57MAr6vWQQEOc4OVWf/AW7cNED7QTX6L4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:1b:26:a7:df:0c:59:e8:cf:0d:dc:31:3f:f7:81:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Validity
Not Before: Jun 28 12:01:28 2026 GMT
Not After : Jun 29 12:01:28 2026 GMT
Subject: CN=2b24919e33c1157c3ceec34b7753a485ee848289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:ee:f6:89:1d:ce:65:cd:6a:3e:50:1f:3a:
49:6a:30:0b:f4:ea:63:c9:50:33:14:8e:4d:bf:f0:
91:5e:a5:e7:44:f2:bc:09:f5:a7:a4:58:9d:7d:c5:
6f:01:eb:b2:61:3d:97:56:c8:1a:2a:f6:1c:e8:17:
7b:08:ad:1a:5d:d5:2c:0b:3a:40:d7:b0:43:f2:a1:
e5:e3:9d:01:81:ca:20:bf:9e:e6:02:43:e6:89:2d:
e9:f6:c1:c2:d1:29:6a:44:90:07:0b:c7:48:e5:28:
03:e2:01:7a:88:b2:1b:cb:10:fa:32:e6:fc:c8:2d:
81:f5:cb:67:d2:a0:ec:0f:fb:f1:e9:d4:82:97:2c:
7e:1b:69:e4:c6:bd:2b:96:eb:33:be:25:21:a7:54:
78:d5:b1:ed:83:e0:03:e2:71:ee:76:93:6d:d2:66:
cf:8a:82:7e:e6:58:36:56:ed:cb:4c:72:eb:8f:64:
42:b7:d1:74:20:17:ae:08:09:e9:30:76:34:ae:1c:
10:1d:7b:8f:e4:1e:4d:fa:4e:53:1b:60:db:a6:22:
ef:76:5f:5e:bc:38:b3:32:50:36:3e:7f:43:b0:ec:
25:d3:9b:69:fb:42:24:35:18:b8:2e:1b:63:b0:5e:
1b:1a:04:93:04:9e:d7:17:ed:c2:47:91:1e:5f:c8:
e0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:24:91:9E:33:C1:15:7C:3C:EE:C3:4B:77:53:A4:85:EE:84:82:89
X509v3 Authority Key Identifier:
keyid:9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e3:08:47:37:6f:4a:32:19:b5:6f:b8:c1:c7:d0:e4:96:82:
a1:73:9b:3b:f5:8a:8a:77:05:54:52:1b:1f:48:c0:14:5b:0f:
10:4e:05:1a:ba:42:3a:76:72:8d:92:b3:96:5c:c1:0b:6a:28:
68:65:73:70:75:b9:a6:05:61:77:e5:60:c9:70:6e:17:1a:67:
7a:f2:0a:45:15:aa:3c:3a:9c:e6:96:08:b8:98:29:9e:6c:ff:
b8:d1:ac:36:a6:c3:19:4d:09:7d:1d:a7:cc:f1:d3:d9:ab:3e:
91:da:7b:73:bd:fa:79:89:12:0b:5f:ce:10:8e:fe:a0:0e:c7:
3f:eb:e5:2e:d6:10:36:4b:11:e4:31:37:9f:14:e1:82:9a:c3:
fe:e2:27:6f:97:5f:5e:20:fc:bb:96:55:f9:e4:2a:6a:42:a7:
2f:36:bb:75:17:4e:14:56:75:96:b4:4c:02:7a:6e:89:7e:22:
2a:b1:3b:7e:75:98:90:71:19:e6:eb:e1:47:5b:74:a7:36:4e:
e8:1f:6f:f7:ef:3b:cf:47:df:fd:bb:3f:ea:fc:12:16:a3:b0:
d2:b6:a3:59:6a:02:bc:8a:21:36:d0:ae:81:c5:6d:1a:64:ad:
3e:bb:c5:f5:e9:b8:db:7d:56:37:91:c1:ac:b9:58:db:13:3e:
32:d4:e6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:53:20 2026 by rpki-client