Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier: hnmejS6PQnqXQhfAIZ5v5XnEVrOPb1PZYnG66b44BGE=
Subject key identifier: 16:DE:7A:48:23:17:10:9B:DC:D8:72:94:69:0C:48:8C:0D:B9:78:7D
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 019D239582EC3B1ACBAE174BDE623E69CECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number: 11FB
Signing time: Wed 25 Mar 2026 06:01:33 +0000
Manifest this update: Wed 25 Mar 2026 06:01:33 +0000
Manifest next update: Thu 26 Mar 2026 06:01:33 +0000
Files and hashes: 1: LP-962DLDMgpRMI7_mhHbAEeXHI.roa (hash: L11irqAmN9Yh9SwUVInvcZWfgHtuDzon2+axE8dju+M=)
2: OWOkZZmgGCYknyTPhxnobWYLpHI.roa (hash: bTzqDctbFjp9GWzcDrimAEL7omNgimbSYfc0EwnYgpc=)
3: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: TKTELOHbRBJj1i06L+qVLq+vP4O6LxgDTnwKhNzw7bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:23:95:82:ec:3b:1a:cb:ae:17:4b:de:62:3e:69:ce:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Mar 25 06:01:33 2026 GMT
Not After : Mar 26 06:01:33 2026 GMT
Subject: CN=16de7a482317109bdcd87294690c488c0db9787d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:bc:d6:25:51:e6:a6:f8:c7:26:4f:cb:74:
b9:89:56:df:d0:e2:f8:b4:9a:75:55:a2:42:bb:ee:
4b:f6:48:2f:72:a7:55:47:14:08:07:05:db:1d:c6:
88:40:0b:8d:d8:47:f0:19:db:8d:81:b1:36:43:9b:
f5:e0:c6:0e:7e:6e:7d:c3:06:d3:14:3f:fe:ae:e6:
1d:31:51:2f:a8:dc:b6:e1:39:dd:09:43:e9:0a:ed:
ff:9a:8b:d7:b2:7f:5c:37:1b:9a:2d:0d:ca:75:21:
8f:8c:19:74:a6:0b:e3:aa:93:7e:05:74:c2:58:71:
0d:9c:7a:40:76:56:39:9e:0e:92:32:ba:26:86:db:
38:0a:27:e9:01:9d:ae:d2:4d:cd:4d:f3:5e:15:80:
d3:ed:dc:94:0e:c6:43:a2:56:58:52:2d:87:e3:0b:
3e:a8:8a:97:42:0a:5e:02:48:3b:2f:8f:66:cb:e5:
9d:a9:ac:c7:ce:46:46:57:b2:2d:51:c6:7d:c2:fc:
dd:5d:5b:94:7c:15:5a:36:50:ed:02:1c:5e:65:79:
9a:fb:4d:f2:28:05:aa:e3:87:42:5a:33:5f:22:12:
7f:22:6c:35:d1:28:09:bd:d7:9f:b3:c7:51:24:4d:
34:8c:bc:16:bd:b2:31:a5:b7:92:f6:60:bc:f6:59:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DE:7A:48:23:17:10:9B:DC:D8:72:94:69:0C:48:8C:0D:B9:78:7D
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9d:62:bd:ed:88:bf:36:b1:f0:14:61:70:97:98:fd:f2:96:
2f:ef:54:b6:e8:91:cc:5a:88:fb:ee:2a:00:a3:0b:c8:e2:f0:
fa:17:8e:84:bd:de:d5:61:c8:89:93:0a:0f:77:73:d4:ae:5b:
cb:01:83:80:5d:42:34:38:fb:5d:1e:3c:fb:14:93:ca:24:f2:
99:0d:7f:c8:de:9d:6f:cf:74:81:29:24:35:c5:c5:54:8d:61:
e4:46:16:bf:3f:d9:27:66:12:ec:b9:ee:6b:52:43:01:82:40:
ca:eb:1c:5e:13:c1:58:3b:d4:ba:64:ae:c3:12:f7:0c:26:ef:
ce:38:3a:47:78:b5:81:79:67:ea:63:d0:c2:ee:31:05:0b:bd:
28:a1:37:e1:db:8d:26:0b:52:1c:19:4a:26:b1:b8:bc:c8:81:
22:9b:10:68:e5:8f:0f:fd:ff:c0:2d:b1:82:db:8b:43:18:72:
09:ea:c6:88:96:2a:ef:d4:10:ad:fa:cb:81:f5:bd:ac:67:3b:
1a:67:13:9f:29:22:89:4d:42:93:c7:e7:8a:07:ec:7c:1a:01:
1b:36:8c:56:88:cc:a5:72:b1:12:c4:33:85:67:01:b3:4a:eb:
7a:bb:1c:9a:f0:b9:a9:fa:2f:94:05:0f:b6:fc:d8:cd:b4:94:
27:12:4f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 16:20:49 2026 by rpki-client