Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier: A74NF54xsyKFyEYJ0GSoRfh3uMCt4+mQJvEqicwZgnU=
Subject key identifier: 06:3D:AB:D3:50:CA:8D:80:00:4B:F0:82:9C:F8:CA:ED:ED:CD:04:99
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 019DCE629CA9073E2463BCAF414E5858E0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number: 186F
Signing time: Mon 27 Apr 2026 10:01:02 +0000
Manifest this update: Mon 27 Apr 2026 10:01:02 +0000
Manifest next update: Tue 28 Apr 2026 10:01:02 +0000
Files and hashes: 1: 6q8Cn_ihD-9lGbIg6cUdTCqh-Mk.roa (hash: M11btvF49Fo+UxYGyhJ5kL+ajzcw91sm72buQLeP3aw=)
2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: 7TRxiWqn8gAFLfjMwe5lOmJCssWzEdUOY33CkC486h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:9c:a9:07:3e:24:63:bc:af:41:4e:58:58:e0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: Apr 27 10:01:02 2026 GMT
Not After : Apr 28 10:01:02 2026 GMT
Subject: CN=063dabd350ca8d80004bf0829cf8caededcd0499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:92:5a:2f:d5:f4:43:35:76:8b:2f:ac:c3:35:
15:3d:f4:1b:99:81:39:c3:30:e3:f7:fa:71:41:dc:
53:cb:a1:db:4d:03:ab:06:91:c3:5a:f5:7f:ce:54:
d1:a9:3b:bb:9a:e8:85:41:7d:9e:5a:6a:ea:3c:94:
19:bc:be:ac:fa:01:be:25:1d:eb:27:5d:e5:d8:ae:
4a:9c:cd:f8:bb:a3:ef:e5:77:3e:30:c5:cd:f5:74:
5d:e3:2e:8f:a0:cc:f6:69:8e:75:be:33:d9:bf:d0:
16:91:92:81:fe:d7:ef:5c:78:e4:a3:d7:49:df:85:
80:d0:f9:ab:c7:19:a2:93:3f:b7:8b:c3:b0:c7:0c:
55:e5:dd:d4:8f:bc:d9:86:0c:8b:6f:6b:aa:f1:cf:
04:b6:31:27:d0:d8:a5:2c:b7:00:b3:56:6b:90:20:
c8:23:12:da:50:b7:a1:3f:2b:8d:3e:9e:ac:53:76:
0d:d1:2f:76:05:08:19:70:b6:90:35:ec:77:07:06:
7e:91:12:71:ab:d2:a0:12:3c:e1:7f:97:cf:69:6b:
60:5e:cf:be:1d:4d:52:15:f5:9e:96:1c:16:88:a0:
0b:24:c1:f9:6a:8a:73:b1:8d:8f:ef:f1:1b:0c:e7:
4e:0e:ad:d7:d7:b3:0f:3c:46:6c:c4:84:88:7b:4a:
95:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3D:AB:D3:50:CA:8D:80:00:4B:F0:82:9C:F8:CA:ED:ED:CD:04:99
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:aa:3e:50:e6:ef:9c:cf:f7:76:96:c2:ac:17:dc:03:18:a4:
09:ce:25:5e:43:a7:f8:c8:2f:73:ad:7f:0f:69:b7:b4:64:90:
88:b7:29:af:a7:6d:33:6b:91:fd:a0:a5:cf:22:92:5c:30:76:
d3:87:aa:2c:ce:29:f2:77:c7:83:c5:bd:5b:e5:fb:63:46:14:
76:da:fc:ef:17:4b:2e:5a:c0:5b:f3:d5:3b:52:60:2b:1d:de:
28:ad:fb:01:d6:c0:b7:25:15:8c:d8:2d:c7:25:19:e3:df:53:
94:75:48:0d:b0:33:7b:c4:29:a0:d0:d6:be:14:bd:60:f5:64:
4a:7e:38:2a:4e:9f:e8:58:8e:fc:d3:f6:1d:f8:50:b5:64:97:
fb:a8:a8:42:58:dc:b2:54:c9:96:5b:ce:5d:cd:0d:13:c2:28:
f7:14:bc:02:3b:b6:04:2e:23:a1:54:80:d7:55:ba:e1:51:53:
c5:0e:74:be:9a:78:8a:34:db:d8:8a:87:66:d7:59:b1:9d:b5:
c6:76:e6:67:8c:7d:ea:f1:f5:17:eb:0d:66:73:7c:70:3b:d3:
8e:b9:0e:73:dd:7c:cf:14:06:6c:9e:5b:83:f4:a6:70:6d:ac:
d5:90:63:4c:a6:20:cc:76:c4:36:26:4e:7d:71:ec:65:fa:f2:
0f:72:63:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:13:29 2026 by rpki-client