Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier: hCi3qXy4UecIMtpcFWq8HMJzRAqlOze5GYBB2h0MxVg=
Subject key identifier: 28:FC:4C:B4:6B:3B:84:64:C4:0B:C1:E4:2E:B9:57:78:C4:DD:61:B2
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 01A08B68C1E9CF82A6B9D8E4A76AAECEB27F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number: 19DA
Signing time: Thu 10 Sep 2026 13:01:33 +0000
Manifest this update: Thu 10 Sep 2026 13:01:33 +0000
Manifest next update: Fri 11 Sep 2026 13:01:33 +0000
Files and hashes: 1: 6q8Cn_ihD-9lGbIg6cUdTCqh-Mk.roa (hash: M11btvF49Fo+UxYGyhJ5kL+ajzcw91sm72buQLeP3aw=)
2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: wL0LodBEUnLU1rpH4mq3/rA+u1NIr/TiPhr6bZSMHBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:c1:e9:cf:82:a6:b9:d8:e4:a7:6a:ae:ce:b2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: Sep 10 13:01:33 2026 GMT
Not After : Sep 11 13:01:33 2026 GMT
Subject: CN=28fc4cb46b3b8464c40bc1e42eb95778c4dd61b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:ff:1e:a9:57:ef:83:ee:2e:1d:99:3f:2c:
15:a0:aa:42:e7:bb:8b:29:86:e5:e4:03:3a:90:e5:
6e:f9:08:d6:80:36:40:b3:14:c4:28:f7:f6:7f:6c:
79:df:12:90:a2:a9:4b:c3:fd:1c:78:90:42:2e:31:
aa:60:58:90:04:00:94:e5:86:93:16:6d:97:93:86:
9a:2f:14:28:59:dc:23:c6:8e:5e:6e:34:eb:50:30:
8a:e9:6d:d0:e2:00:fb:29:8b:80:71:e9:07:ba:47:
c8:0b:18:b4:e2:e3:c3:0a:9d:45:f5:be:e6:6d:57:
1d:e7:57:ce:63:e5:a1:f6:eb:7c:3e:02:84:01:fb:
c4:86:bb:98:5e:e1:c8:1d:cc:36:8c:ba:a3:06:7d:
67:92:11:a4:15:f8:51:36:2a:58:13:bf:a8:35:08:
4f:ad:d2:c8:03:dd:7f:e2:35:e7:3e:60:1c:02:87:
f5:c8:3a:7d:74:75:24:44:11:2c:cf:b4:a9:95:43:
fa:a6:84:ad:40:d9:5c:dd:6b:01:a1:83:bb:bb:19:
17:7f:6e:7e:aa:e3:59:48:cd:cc:4f:2d:e8:24:2e:
a9:69:d9:8c:c6:1d:a7:ff:ff:ce:17:79:a8:5d:fd:
f9:48:43:8b:99:21:99:07:2d:a5:5d:40:c9:4e:c4:
02:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FC:4C:B4:6B:3B:84:64:C4:0B:C1:E4:2E:B9:57:78:C4:DD:61:B2
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:41:b3:97:34:67:82:8a:d2:e8:fe:01:e1:06:84:32:fd:90:
71:a4:e7:e3:46:25:ec:5c:0e:49:7d:5e:31:f1:22:19:bf:5e:
81:f2:9f:39:f5:0c:1c:e9:d2:37:34:5f:76:c7:7f:eb:2f:c5:
36:42:3d:ab:17:0c:46:7a:69:53:72:83:ea:ac:ae:b6:33:91:
0e:ee:cf:c8:5a:b5:db:4b:f9:db:ec:5a:4f:e3:dd:48:a9:4d:
3d:fd:9c:0b:e7:bf:36:21:01:11:cb:53:b7:ed:f8:c1:91:81:
00:6e:32:0e:0d:d2:30:2c:92:3c:5f:10:aa:25:06:d8:bd:a0:
87:d2:72:9a:30:2a:50:5c:4a:3c:88:23:b4:65:83:b7:1d:16:
58:cb:2b:46:2c:36:08:12:e0:fc:09:af:d2:ea:5a:be:96:8c:
2b:cb:dc:ae:f6:81:f5:ac:e9:d5:e3:8e:dc:94:f9:d5:01:2e:
6b:e5:d3:56:6f:3b:a1:3d:e3:0e:d1:05:23:d8:ad:df:41:f3:
bb:c0:94:8a:e1:8a:fe:f3:f5:2a:46:d2:bd:a3:c4:59:ab:95:
6c:63:d5:ca:91:04:11:65:84:7b:f5:a7:7d:ce:2d:cb:1a:a3:
bb:9f:2c:ea:1b:0a:43:d6:83:60:04:32:12:81:ae:28:12:bd:
2f:43:2c:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLaMHpz4Kmudjkp2quzrJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNzQwY2QzYjY2YjYwZTE4YjNkOTZmZmIzZjQyMThkNzli
NWI3NzAwHhcNMjYwOTEwMTMwMTMzWhcNMjYwOTExMTMwMTMzWjAzMTEwLwYDVQQD
EygyOGZjNGNiNDZiM2I4NDY0YzQwYmMxZTQyZWI5NTc3OGM0ZGQ2MWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqH/HqlX74PuLh2ZPywVoKpC57uL
KYbl5AM6kOVu+QjWgDZAsxTEKPf2f2x53xKQoqlLw/0ceJBCLjGqYFiQBACU5YaT
Fm2Xk4aaLxQoWdwjxo5ebjTrUDCK6W3Q4gD7KYuAcekHukfICxi04uPDCp1F9b7m
bVcd51fOY+Wh9ut8PgKEAfvEhruYXuHIHcw2jLqjBn1nkhGkFfhRNipYE7+oNQhP
rdLIA91/4jXnPmAcAof1yDp9dHUkRBEsz7SplUP6poStQNlc3WsBoYO7uxkXf25+
quNZSM3MTy3oJC6padmMxh2n///OF3moXf35SEOLmSGZBy2lXUDJTsQCsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCj8TLRrO4RkxAvB5C65V3jE3WGyMB8GA1UdIwQY
MBaAFJ50DNO2a2Dhiz2W/7P0IY15tbdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDct
NTBlNGIwNTA0ZjQ4LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDctNTBlNGIwNTA0ZjQ4
LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkGzlzRn
gorS6P4B4QaEMv2QcaTn40Yl7FwOSX1eMfEiGb9egfKfOfUMHOnSNzRfdsd/6y/F
NkI9qxcMRnppU3KD6qyutjORDu7PyFq120v52+xaT+PdSKlNPf2cC+e/NiEBEctT
t+34wZGBAG4yDg3SMCySPF8QqiUG2L2gh9JymjAqUFxKPIgjtGWDtx0WWMsrRiw2
CBLg/Amv0upavpaMK8vcrvaB9azp1eOO3JT51QEua+XTVm87oT3jDtEFI9it30Hz
u8CUiuGK/vP1KkbSvaPEWauVbGPVypEEEWWEe/Wnfc4tyxqju58s6hsKQ9aDYAQy
EoGuKBK9L0Msxw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:57:41 2026 by rpki-client