Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier: bFuN/PGJCFy7ZFg+gLVIwJ7C8/JYRnP2Agmy0E2UGL4=
Subject key identifier: 55:31:89:36:19:C9:99:C4:1A:6C:42:E6:8B:43:2A:A4:0C:E4:D0:2C
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 019F11F79E855CD80F1D4691CED1ED991947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number: 12FB
Signing time: Mon 29 Jun 2026 06:01:08 +0000
Manifest this update: Mon 29 Jun 2026 06:01:08 +0000
Manifest next update: Tue 30 Jun 2026 06:01:08 +0000
Files and hashes: 1: LP-962DLDMgpRMI7_mhHbAEeXHI.roa (hash: L11irqAmN9Yh9SwUVInvcZWfgHtuDzon2+axE8dju+M=)
2: OWOkZZmgGCYknyTPhxnobWYLpHI.roa (hash: bTzqDctbFjp9GWzcDrimAEL7omNgimbSYfc0EwnYgpc=)
3: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: WW/5ocAhJ5iNCZoSALiL6OUY9VpAxo7RqcIpYHHkghc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:9e:85:5c:d8:0f:1d:46:91:ce:d1:ed:99:19:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Jun 29 06:01:08 2026 GMT
Not After : Jun 30 06:01:08 2026 GMT
Subject: CN=5531893619c999c41a6c42e68b432aa40ce4d02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:2a:9b:a5:3c:e5:27:7c:24:a1:17:ba:52:
96:bb:fd:c3:8c:7f:5c:f1:07:48:45:dd:ca:2e:c7:
b4:b6:0f:61:b7:5f:20:83:6b:31:05:2e:0d:bc:ce:
c5:3c:72:2c:f0:98:e5:42:f7:50:b9:25:f0:8e:7f:
0d:d0:73:b3:65:c1:67:24:e4:c2:d1:d6:b0:f1:af:
0c:2d:15:0a:1f:93:0d:0e:91:7b:35:b9:c2:b0:79:
2a:ba:10:2c:4d:64:26:f4:40:43:d1:f6:58:24:11:
c9:f6:0d:6e:e9:1c:87:7d:87:84:11:36:b5:82:b9:
71:79:77:aa:64:a7:00:46:16:bd:e7:83:65:b2:91:
b8:21:fb:e2:ba:fd:d7:b0:dc:7e:fd:4b:37:b0:73:
8c:ac:58:bf:b7:57:c3:2e:fb:c0:1d:af:26:9d:9e:
68:82:09:cb:c1:08:f3:71:02:eb:a8:16:68:ed:01:
c6:5c:fd:10:9f:b2:d3:16:ce:91:72:5c:f8:51:47:
0c:f4:2d:e1:41:2c:ef:0a:2a:f3:77:ee:de:39:36:
4a:83:dd:52:ce:b9:45:0b:06:8d:34:7d:0e:a3:c5:
a1:86:40:c3:3a:24:bf:27:d6:31:27:db:52:80:50:
cc:a1:fc:64:78:b3:ee:c5:41:f4:2a:e0:41:0a:1f:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:31:89:36:19:C9:99:C4:1A:6C:42:E6:8B:43:2A:A4:0C:E4:D0:2C
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e9:70:85:df:71:d2:f0:aa:28:0e:53:c0:4b:a4:ca:4d:16:
80:d4:3a:6d:fa:37:dd:6f:c1:ea:25:0a:be:be:9c:7d:7e:db:
ee:3f:80:0a:84:79:2d:95:7a:88:01:f0:04:7e:81:94:2b:9b:
fb:a9:d1:30:9f:f5:5a:ab:c4:d1:84:fe:b8:b9:37:f5:f7:36:
90:c9:37:bf:38:41:5b:ce:c7:cc:48:2b:33:92:e9:b5:6e:8c:
33:2e:6d:87:91:6a:fa:37:71:f7:6f:d6:6d:7f:2b:95:3c:43:
36:a8:3a:f1:a4:fa:ab:6f:d1:84:a6:00:27:ab:ec:0c:79:e9:
56:55:a4:cc:ad:8e:23:0b:82:a5:3b:5c:3d:5c:92:c6:d6:2c:
1c:a6:a6:8b:3c:b7:73:9f:8d:0d:f3:be:44:24:43:56:76:f0:
88:65:ac:31:43:37:4c:6d:f7:c6:b4:5c:94:3b:b1:02:30:25:
07:2c:0d:69:05:ab:33:d2:b2:9b:fe:e6:ae:b7:12:bd:6d:35:
d1:19:21:9c:49:bf:f6:81:d0:22:0b:cc:d7:26:fe:c4:43:94:
d6:c5:2d:84:1f:6c:f2:cf:57:d3:fb:f1:f1:31:8c:31:71:e6:
75:3d:e0:57:bf:2c:ca:d9:00:b6:68:44:a1:ed:7e:f9:ed:84:
e1:93:dd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:46:44 2026 by rpki-client