Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
File: nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json)
Hash identifier: NbRkPki1g6vD38yMSQGyMBqg9vmdpoCLRUToU9C90yA=
Subject key identifier: CA:8B:CE:F1:4D:7E:D8:48:BE:CD:F8:BB:C9:65:09:25:13:B5:BB:C6
Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Certificate serial: 019D3A53E48A2804E8BE054D75F1AD5E578A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 16:01:09 +0000
Manifest this update: Sun 29 Mar 2026 16:01:09 +0000
Manifest next update: Mon 30 Mar 2026 16:01:09 +0000
Files and hashes: 1: hmbiAgILODH-19HoC5IuydkCSIc.roa (hash: QWw9cp6g2MsHGOQThqrJzqfLHaqPLS5ug0EanzJlcKA=)
2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: xYYrJWmS49D8kvRNC7lwO3etnvLlYSemFZOuzz6I/OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:e4:8a:28:04:e8:be:05:4d:75:f1:ad:5e:57:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Validity
Not Before: Mar 29 16:01:09 2026 GMT
Not After : Mar 30 16:01:09 2026 GMT
Subject: CN=ca8bcef14d7ed848becdf8bbc965092513b5bbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:fc:1e:90:84:bf:b3:11:56:d2:91:76:99:
78:9f:91:9a:46:f8:cb:9d:a1:5e:b1:83:6e:2f:c0:
96:33:97:f3:6d:43:b0:01:6a:9a:0a:6f:23:5a:f7:
33:20:6a:e0:60:7c:11:74:10:26:41:fe:6f:1e:85:
25:a2:78:16:53:67:e3:f7:c4:7e:94:e2:8b:0c:f5:
b3:e7:97:b3:e3:cd:90:72:12:cf:6a:ef:70:08:ef:
2c:b6:70:de:ee:75:e8:db:5e:e6:6a:ba:d1:be:71:
44:a3:df:40:dc:42:14:84:e1:cb:bd:48:a2:59:81:
cd:5f:17:31:b6:80:34:4f:52:3e:1f:7c:ea:a2:88:
3f:a6:d5:e8:3a:2e:fc:ca:88:a3:6f:65:5b:06:9c:
92:7d:10:59:75:51:38:44:26:ad:6c:21:cc:0c:b8:
be:5c:b3:d8:27:79:36:92:b6:d1:80:ee:5c:02:85:
e1:60:58:cf:80:69:28:ad:16:6f:a0:bf:56:ff:6d:
30:0b:a2:25:b1:02:1a:ca:42:18:8a:c9:47:4c:2e:
4c:e3:3f:8f:aa:12:a1:06:d1:7b:ce:9f:11:c5:7b:
62:31:18:3e:57:56:fe:78:2e:aa:89:7a:ea:d6:fc:
02:8a:ef:d3:98:54:28:c9:db:38:20:da:a8:1d:a6:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8B:CE:F1:4D:7E:D8:48:BE:CD:F8:BB:C9:65:09:25:13:B5:BB:C6
X509v3 Authority Key Identifier:
keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:71:bd:cf:47:23:8e:84:54:37:66:2f:ba:30:11:7e:9d:8f:
44:8e:21:a3:e1:3b:29:02:ca:49:7b:4e:81:8a:69:a1:8c:53:
4a:73:0e:f2:42:81:a6:1a:49:a6:41:5a:47:14:ac:d3:da:a2:
06:d1:a4:75:47:23:93:4d:8c:7d:5d:7a:4a:ed:fd:6b:c5:24:
b0:5c:d7:44:e6:36:9e:c8:7f:b5:05:ab:59:56:00:85:7e:ae:
d6:ae:f3:89:ec:ef:54:7a:20:b6:c4:e4:83:53:cb:43:ed:5b:
91:5d:6f:92:40:bb:02:6a:a1:d2:ac:fb:e4:50:cc:00:a0:a6:
0c:a7:b3:11:26:a4:8f:99:23:42:5d:6b:59:63:cd:ad:67:fa:
ea:3a:df:91:db:4c:7f:8f:6f:0e:5b:fe:f7:ae:8a:4c:29:c6:
40:9e:bf:d7:6e:c5:ae:86:ec:19:43:88:ad:fc:f4:57:51:b3:
2f:29:bd:a6:f2:ce:85:09:e9:57:28:fc:fb:53:04:03:3f:08:
28:0a:c3:3e:19:95:dc:16:f4:d6:f3:48:91:fb:0d:71:94:00:
4f:90:ca:f2:17:1b:98:a4:91:ab:04:ba:73:d6:48:46:a5:2b:
92:7c:35:ad:8d:89:d0:3d:9c:08:2f:61:52:b7:80:15:bc:7b:
f4:0e:d3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:54 2026 by rpki-client