Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
File: nqeCd0gM8trWyesKUr5I33q2Z1o.mft (raw, json)
Hash identifier: UikoSpEFEOkPTYkK9gsz485IZpFh4E0f5ojMpPwKwzE=
Subject key identifier: DB:47:F7:3D:96:48:16:22:43:31:0C:CB:C6:58:C5:02:44:00:15:B8
Authority key identifier: 9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
Certificate issuer: /CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Certificate serial: 019E227FC9CECC63FC0C9C2ED916DFDD8CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
Manifest number: 120D
Signing time: Wed 13 May 2026 18:01:00 +0000
Manifest this update: Wed 13 May 2026 18:01:00 +0000
Manifest next update: Thu 14 May 2026 18:01:00 +0000
Files and hashes: 1: 9g6pOYHufxn_OQfDKkRqzS5XeEk.roa (hash: wDN1atJFquIXsTNAwjLE+5ZKVEXzShSPCEpqiDwXD30=)
2: nqeCd0gM8trWyesKUr5I33q2Z1o.crl (hash: Tnkxr5YwqHGZDzcaSO8V3kjs78iU/Ea4a6q+fOfZEh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:7f:c9:ce:cc:63:fc:0c:9c:2e:d9:16:df:dd:8c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea78277480cf2dad6c9eb0a52be48df7ab6675a
Validity
Not Before: May 13 18:01:00 2026 GMT
Not After : May 14 18:01:00 2026 GMT
Subject: CN=db47f73d9648162243310ccbc658c502440015b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:f3:91:24:1a:38:ab:9d:fa:21:2a:a9:df:
86:8a:23:1d:95:81:26:93:9e:13:8a:9b:af:54:e8:
ef:c4:c7:8a:b8:01:3e:c0:eb:c6:28:ba:59:c9:4e:
ba:8d:5a:47:26:1c:e0:7e:d3:f9:68:9f:f8:2f:a3:
40:d8:9b:c6:ee:ac:07:a7:18:ea:e0:0a:d6:b7:b6:
e4:4f:1e:a4:4e:99:00:18:1f:07:75:a4:0c:8f:ad:
fd:c4:96:1c:ce:89:1b:d6:1d:ba:8b:29:09:34:d1:
52:d1:c0:92:47:8f:d3:54:e4:40:d0:6d:b8:9c:11:
6d:42:12:01:48:14:ee:55:80:04:dc:16:3b:93:b4:
21:3e:0f:3f:79:ae:15:5f:08:c1:0a:a6:d9:5c:8d:
e3:c5:90:b2:cd:e7:c6:ff:2a:07:fc:c0:e2:ca:00:
f4:14:42:7d:a4:c7:8e:97:88:eb:12:58:7b:79:ce:
a1:6c:22:31:47:d6:a2:6e:b3:bd:6f:7e:ad:6b:83:
7e:43:b5:b0:3e:8c:2d:50:6b:1c:ff:54:db:a5:8a:
46:4e:d9:8b:95:ec:7d:21:19:a9:bf:1e:0e:26:91:
49:c2:42:34:85:7d:71:93:22:66:66:ae:6f:d8:bb:
0e:f2:fc:ea:de:dc:2e:4a:d1:17:30:d5:00:ef:86:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:47:F7:3D:96:48:16:22:43:31:0C:CB:C6:58:C5:02:44:00:15:B8
X509v3 Authority Key Identifier:
keyid:9E:A7:82:77:48:0C:F2:DA:D6:C9:EB:0A:52:BE:48:DF:7A:B6:67:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqeCd0gM8trWyesKUr5I33q2Z1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/cb9493-e834-4f0e-8abb-1a92fb0dc1c7/1/nqeCd0gM8trWyesKUr5I33q2Z1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8e:d2:28:4c:a3:1a:3d:39:c5:1e:d6:27:da:16:e7:20:7b:
14:05:0d:db:9b:4f:6f:74:73:75:0e:f4:75:ab:1a:91:80:93:
34:1b:be:dd:aa:ae:e5:34:c1:46:30:11:0d:f7:2b:14:f1:60:
d3:0e:02:8d:c9:60:4f:35:e9:9c:55:77:63:19:df:9a:74:46:
e1:5d:a8:cb:71:ef:54:b8:bb:c2:25:2b:ab:92:84:a5:b5:aa:
45:5c:2f:40:84:af:4a:6d:31:5b:30:ba:a0:36:cb:7b:b5:35:
98:f1:83:a9:35:79:4a:1a:f4:3e:60:db:a8:a8:be:eb:3d:4b:
46:97:c2:65:d4:03:76:0f:4d:9d:bc:b8:22:db:f0:b0:2f:3e:
23:93:2e:63:5d:d4:43:47:9c:2b:6e:04:92:9d:c2:91:26:1f:
be:11:8b:d3:6a:af:2b:27:b0:9d:33:e3:03:06:27:76:b7:f8:
85:4c:e2:20:06:42:28:29:35:06:1d:f6:4a:9e:64:5c:36:ea:
c6:a3:33:51:f4:3b:fd:e8:ca:2c:56:b9:86:81:f5:c9:d8:88:
57:eb:ba:86:e3:25:94:60:f2:5c:91:1c:2d:34:e9:ec:8f:19:
00:75:a8:c1:41:91:29:43:4e:f2:e4:e2:b4:74:48:3f:cf:7d:
04:12:3b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 00:54:57 2026 by rpki-client