Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier: 4jtIqt4R8s9JbmSF52Dw8E6Al7uowIKB3LOkCZPilDA=
Subject key identifier: FC:57:00:8D:AF:D3:42:C6:AF:C6:59:DA:9C:94:EE:2C:45:36:10:B7
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 019DD050B4CD4F68004D1BD2527AD473F97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number: 1870
Signing time: Mon 27 Apr 2026 19:00:43 +0000
Manifest this update: Mon 27 Apr 2026 19:00:43 +0000
Manifest next update: Tue 28 Apr 2026 19:00:43 +0000
Files and hashes: 1: 6q8Cn_ihD-9lGbIg6cUdTCqh-Mk.roa (hash: M11btvF49Fo+UxYGyhJ5kL+ajzcw91sm72buQLeP3aw=)
2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: o0Lj9i46/JhD/2KBpnLhyRtV+kpGGKJ6lE3M/2BIxpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:50:b4:cd:4f:68:00:4d:1b:d2:52:7a:d4:73:f9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: Apr 27 19:00:43 2026 GMT
Not After : Apr 28 19:00:43 2026 GMT
Subject: CN=fc57008dafd342c6afc659da9c94ee2c453610b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:cb:8c:ab:d5:83:ed:6e:56:27:65:3c:5f:
a2:5e:e9:ad:fe:ea:88:f0:0b:2d:1a:53:2a:36:75:
1d:e2:0d:bd:64:d0:03:00:1b:a2:80:89:52:ac:69:
d3:d9:5b:55:e5:a6:62:97:2c:3b:37:cf:5b:d7:23:
2a:30:0a:a5:52:58:f1:57:bb:e8:0f:89:cd:20:ad:
6c:67:1f:43:74:6b:68:64:48:a6:08:7e:81:ee:63:
f0:3a:19:23:9d:3c:70:10:d0:09:7b:ca:97:7d:89:
1c:e7:4c:75:d2:df:e4:5e:d2:6c:98:65:a6:3d:a5:
e2:4d:64:31:eb:31:cf:c7:18:c6:63:b6:bd:56:32:
76:8d:16:80:34:5d:77:42:68:38:89:f3:e6:8f:87:
7f:62:fc:2f:5e:ca:0f:a6:2d:a3:e5:a8:17:13:8d:
21:ce:31:3b:2a:ee:68:37:50:1f:e0:d4:9e:93:2a:
c0:21:77:c8:28:0b:a4:76:e1:4b:1d:42:c0:a2:15:
3e:4b:b6:bc:4d:e0:e2:bc:27:fb:1d:80:f9:87:bf:
bc:e1:94:44:54:45:04:32:5b:5a:c7:f3:ce:97:26:
87:28:2d:2b:a9:a8:56:86:7d:92:86:99:6c:8c:42:
7a:16:67:97:02:e7:7d:9d:8b:1d:b6:d6:60:2d:33:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:57:00:8D:AF:D3:42:C6:AF:C6:59:DA:9C:94:EE:2C:45:36:10:B7
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e1:07:9e:8f:3a:df:8c:13:f2:0e:00:43:16:f2:a8:56:d8:
e7:30:a1:34:ef:51:48:e1:12:f6:be:c4:dc:d5:09:16:4f:b7:
f5:95:d9:f3:29:c0:fe:87:1d:07:ee:cf:7b:95:a7:f4:64:75:
db:10:52:c1:da:ce:9c:57:ff:7c:41:3d:df:05:35:47:83:4a:
96:60:ef:ba:f2:23:c3:0b:32:93:29:c1:5b:f3:51:71:91:3a:
20:c9:7b:5a:1f:0f:d2:5b:b4:3d:ec:89:4d:23:5f:5a:e7:92:
d8:3c:0b:66:7c:0c:54:00:e7:d5:0a:15:3b:d3:ad:6f:35:36:
73:30:63:47:83:40:85:15:7a:79:38:8e:6c:ad:0d:e2:50:c7:
0c:f0:83:d9:58:a0:cd:80:92:a2:0e:de:bd:e0:34:ce:53:39:
01:87:a6:88:8d:e4:9c:2a:8d:23:de:6b:8f:1d:c4:3b:45:34:
88:27:df:e3:88:b9:b0:e4:c3:55:ea:04:d8:a8:9d:4e:a3:88:
ad:59:cb:29:1a:2e:16:36:56:f4:87:ac:29:8a:3b:ad:93:f6:
19:05:55:8f:e0:5d:4f:dc:2c:3d:74:a4:8f:e4:9e:98:02:da:
33:5e:2b:a6:0b:50:71:12:05:57:f5:5f:92:e8:ce:74:14:43:
d9:77:e6:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QULTNT2gATRvSUnrUc/l/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNzQwY2QzYjY2YjYwZTE4YjNkOTZmZmIzZjQyMThkNzli
NWI3NzAwHhcNMjYwNDI3MTkwMDQzWhcNMjYwNDI4MTkwMDQzWjAzMTEwLwYDVQQD
EyhmYzU3MDA4ZGFmZDM0MmM2YWZjNjU5ZGE5Yzk0ZWUyYzQ1MzYxMGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPfLjKvVg+1uVidlPF+iXumt/uqI
8AstGlMqNnUd4g29ZNADABuigIlSrGnT2VtV5aZilyw7N89b1yMqMAqlUljxV7vo
D4nNIK1sZx9DdGtoZEimCH6B7mPwOhkjnTxwENAJe8qXfYkc50x10t/kXtJsmGWm
PaXiTWQx6zHPxxjGY7a9VjJ2jRaANF13Qmg4ifPmj4d/YvwvXsoPpi2j5agXE40h
zjE7Ku5oN1Af4NSekyrAIXfIKAukduFLHULAohU+S7a8TeDivCf7HYD5h7+84ZRE
VEUEMltax/POlyaHKC0rqahWhn2ShplsjEJ6FmeXAud9nYsdttZgLTONewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxXAI2v00LGr8ZZ2pyU7ixFNhC3MB8GA1UdIwQY
MBaAFJ50DNO2a2Dhiz2W/7P0IY15tbdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDct
NTBlNGIwNTA0ZjQ4LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xZGU2MTMtNjFiOS00YjA3LWFkNDctNTBlNGIwNTA0ZjQ4
LzEvbm5RTTA3WnJZT0dMUFpiX3NfUWhqWG0xdDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOEHno86
34wT8g4AQxbyqFbY5zChNO9RSOES9r7E3NUJFk+39ZXZ8ynA/ocdB+7Pe5Wn9GR1
2xBSwdrOnFf/fEE93wU1R4NKlmDvuvIjwwsykynBW/NRcZE6IMl7Wh8P0lu0PeyJ
TSNfWueS2DwLZnwMVADn1QoVO9OtbzU2czBjR4NAhRV6eTiObK0N4lDHDPCD2Vig
zYCSog7eveA0zlM5AYemiI3knCqNI95rjx3EO0U0iCff44i5sOTDVeoE2KidTqOI
rVnLKRouFjZW9IesKYo7rZP2GQVVj+BdT9wsPXSkj+SemALaM14rpgtQcRIFV/Vf
kujOdBRD2Xfmwg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:26:00 2026 by rpki-client