Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: 3sBsgMdn0LtbNz4Vyc54fBqJqzb0Kzjs0NtoYniTG2Y=
Subject key identifier: 12:FA:93:6B:FE:3D:2F:48:8E:16:1D:BC:0E:5A:80:8B:1A:6B:22:A2
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 019EC1EDC8A91AFD12B4C039AF068C2BCB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 196D
Signing time: Sat 13 Jun 2026 17:00:46 +0000
Manifest this update: Sat 13 Jun 2026 17:00:46 +0000
Manifest next update: Sun 14 Jun 2026 17:00:46 +0000
Files and hashes: 1: DdkhG9ScS5mKOj6FEPIiUrVTDGA.roa (hash: JddADCbKnFgd2w/G6EyTsDQqGgZM9PxBGHiXPX0tQCk=)
2: Kfpukp1mfPmVOexK4iRI3WWUkLE.roa (hash: dRxylayWUvJFav2jQoF/w0hiqJLQbgosTCaGTxEw3QY=)
3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: ethLpSSh6rup9JkQ9c0latz+xRtigpAWJps2PL0GRxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:c8:a9:1a:fd:12:b4:c0:39:af:06:8c:2b:cb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Jun 13 17:00:46 2026 GMT
Not After : Jun 14 17:00:46 2026 GMT
Subject: CN=12fa936bfe3d2f488e161dbc0e5a808b1a6b22a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:eb:a1:ab:7d:e0:ec:4d:39:7c:a2:f5:39:
cd:59:a8:19:8a:ac:4e:fa:41:dc:3b:84:54:a6:5b:
11:7b:e3:f9:3c:91:de:c0:7c:79:d7:de:5a:1e:a2:
85:54:9b:6b:bf:be:9d:76:08:2b:ff:ba:31:cb:11:
30:f2:3d:3b:c8:fa:0c:f8:36:92:df:20:54:15:6f:
fc:63:96:b6:c0:63:df:52:24:75:26:0c:47:b1:0d:
80:cd:38:33:1a:ff:03:1a:79:ff:00:46:ae:b0:00:
60:39:5a:06:20:3e:53:c2:09:c9:f0:b8:67:6d:92:
da:25:90:2e:a3:a3:de:48:6a:13:6f:51:ca:01:62:
95:f4:10:d6:18:98:9e:68:06:83:ff:6f:54:c6:ae:
d3:87:7e:08:86:56:68:27:e6:4d:97:a6:4e:35:b6:
45:b6:14:6f:77:5b:3c:92:6d:5a:72:9d:91:de:b3:
aa:a5:43:6e:9d:3c:04:d7:80:51:0f:62:a2:9a:a5:
08:d3:39:b1:18:68:f9:38:36:e0:2f:6b:c6:b8:f8:
98:35:cd:ec:e0:a1:d3:24:be:6b:87:20:66:16:78:
b1:53:37:74:9f:59:ea:d7:4e:9a:3b:b4:59:45:b5:
d0:44:6c:5e:2b:e4:c6:51:ba:63:91:1b:98:20:8f:
1e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FA:93:6B:FE:3D:2F:48:8E:16:1D:BC:0E:5A:80:8B:1A:6B:22:A2
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ab:30:09:8a:a4:8a:31:d9:e2:c0:3b:d4:24:1d:fd:7c:ab:
95:e0:5a:1c:5c:6d:fb:ad:14:66:a4:9e:96:3d:a5:fd:de:21:
2a:99:58:d7:99:c7:a0:20:57:68:00:04:82:03:f2:85:ba:da:
75:e4:b8:16:45:9a:90:0e:aa:2a:a1:63:4a:3a:d8:68:c8:58:
36:b7:44:72:ac:26:30:f7:de:be:5c:b3:38:98:9b:c4:b7:32:
b8:88:f5:30:8a:83:36:1b:03:f7:60:7c:63:35:33:17:2f:26:
52:bf:e7:06:70:42:5f:30:ba:32:44:39:39:02:f4:59:4c:0e:
0f:74:9c:a3:8a:86:50:74:63:bc:f1:71:16:96:05:ca:8a:37:
ef:90:af:fc:2b:37:48:06:cd:57:54:7b:13:bd:ff:75:89:6b:
56:b4:17:6b:b9:23:80:df:6f:b7:d8:4a:6c:af:2e:c6:87:c1:
7d:a3:3d:40:d9:14:9f:af:79:b7:71:e0:87:f9:80:ec:c9:8f:
b3:51:01:18:5f:86:b7:9d:0c:de:14:bc:ed:45:ab:93:46:f9:
67:00:71:65:0a:ee:2a:0c:36:14:cb:79:7b:e3:51:16:cc:1b:
ba:b2:98:8c:a3:6c:ad:e6:d8:b2:fd:de:36:7f:66:af:44:99:
e6:1a:49:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:43:05 2026 by rpki-client