Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier: Pz97mz7DuCf++iQ9eT5V3PIZjsak6LOYzS8xt3BHLk0=
Subject key identifier: 30:95:AC:12:F3:BC:98:D4:C5:9B:25:5F:DD:0E:79:54:63:CA:D9:D5
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 019CE4B62B4F4AF51EB45D0B52D180BD348D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number: 17F6
Signing time: Fri 13 Mar 2026 01:01:09 +0000
Manifest this update: Fri 13 Mar 2026 01:01:09 +0000
Manifest next update: Sat 14 Mar 2026 01:01:09 +0000
Files and hashes: 1: 6q8Cn_ihD-9lGbIg6cUdTCqh-Mk.roa (hash: M11btvF49Fo+UxYGyhJ5kL+ajzcw91sm72buQLeP3aw=)
2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: ykIn2m0JK08dw528z1cxHk957BjoUP042TDHkfYNHHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b6:2b:4f:4a:f5:1e:b4:5d:0b:52:d1:80:bd:34:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: Mar 13 01:01:09 2026 GMT
Not After : Mar 14 01:01:09 2026 GMT
Subject: CN=3095ac12f3bc98d4c59b255fdd0e795463cad9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f5:65:9d:12:74:cc:8c:46:4c:d7:33:3c:c6:
a4:97:c3:c7:d0:c9:6f:cb:7c:c9:95:df:aa:bb:6c:
bf:7b:ad:da:61:2f:75:50:d5:92:2e:c8:21:68:0d:
e8:33:05:ba:3e:da:2a:1e:5f:f1:a0:4c:65:a7:09:
95:a5:c5:4d:02:d0:7a:4c:f3:7a:8c:47:cd:48:8f:
a9:14:b1:ec:ca:2a:af:5f:72:56:fc:2a:cf:02:01:
6c:d8:68:3c:ca:a9:7e:8f:64:7c:9e:3d:3b:44:65:
ac:35:a8:74:bd:c0:c6:f9:b0:b8:4a:d9:f3:25:86:
b4:45:95:7e:41:70:ea:8e:fb:e8:05:1e:e4:ec:7a:
76:65:b2:52:2b:f3:93:c4:61:1b:26:e8:e1:93:f5:
a7:ba:3b:5d:1a:c9:a8:da:fc:c6:b2:2e:c6:dd:30:
7b:19:94:1d:0b:3d:05:e1:bc:9d:21:9b:01:86:e9:
0a:ff:25:ed:17:da:f9:93:39:e4:e5:18:37:04:c3:
9e:e4:20:79:ca:9c:3e:fd:3a:f0:ac:12:95:43:09:
6e:97:a5:55:fa:8c:53:35:cf:63:7d:ad:4b:2f:8c:
73:f4:0b:99:f0:b8:6b:ed:20:b0:e4:8a:38:a8:ff:
07:7c:fb:67:fc:7e:9c:7a:76:13:b0:d4:5e:d5:61:
2c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:95:AC:12:F3:BC:98:D4:C5:9B:25:5F:DD:0E:79:54:63:CA:D9:D5
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bd:44:c6:8e:93:cc:e3:72:5e:47:b7:4d:f2:88:c7:b1:cc:
f9:be:79:0d:00:37:ad:f1:b4:8e:b5:2f:12:1a:c2:76:cf:de:
a2:4a:02:15:8a:fc:95:9b:54:6a:2b:75:60:6d:05:e9:e7:dd:
f4:b2:b2:57:23:29:fb:db:ea:82:27:40:e9:db:cc:57:8a:0b:
a6:b7:c3:71:f2:0f:eb:1e:26:ed:b0:00:e0:c7:1b:89:f9:02:
38:79:c3:c2:76:41:9b:15:81:ac:91:8b:3e:10:b0:93:9f:1b:
b4:4b:12:05:09:77:95:a0:da:37:eb:ff:13:cf:6c:16:10:74:
54:c8:2c:19:79:10:c8:94:64:64:cc:00:80:16:b3:f3:e9:af:
65:82:5d:2c:53:25:bc:24:0d:43:ea:ff:fc:d7:6c:9b:7a:a4:
8e:b5:7e:9d:5d:56:ed:1a:ce:50:16:fc:52:9c:08:41:df:38:
ed:76:4f:77:8d:16:20:80:41:d1:7a:c4:e3:c8:09:0b:62:21:
03:9e:28:24:26:2a:50:97:90:b3:34:e2:12:17:8e:0f:bb:f0:
a6:19:99:7a:8f:f2:81:3b:d8:57:ed:e6:9c:51:be:b8:fa:ff:
43:ee:19:d5:2f:0f:01:af:a3:d5:54:78:d0:89:75:5f:9a:f1:
68:36:b8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:57:53 2026 by rpki-client