Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: ok05RPLxPDESQARvLSaki9sUcVFGLHH02GnIz2pejm8=
Subject key identifier: 3C:FF:C3:9F:ED:FE:F0:31:CE:CE:C2:03:48:66:39:99:A2:35:90:FF
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 01A0E663C5B79BEAEAEED80BCDBE7C24585B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 1A89
Signing time: Mon 28 Sep 2026 05:01:33 +0000
Manifest this update: Mon 28 Sep 2026 05:01:33 +0000
Manifest next update: Tue 29 Sep 2026 05:01:33 +0000
Files and hashes: 1: DdkhG9ScS5mKOj6FEPIiUrVTDGA.roa (hash: JddADCbKnFgd2w/G6EyTsDQqGgZM9PxBGHiXPX0tQCk=)
2: Kfpukp1mfPmVOexK4iRI3WWUkLE.roa (hash: dRxylayWUvJFav2jQoF/w0hiqJLQbgosTCaGTxEw3QY=)
3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: mJbGoj0bDTmPjKnPYkYCnkXLr9bvbuVz5pgNgNv5gxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:63:c5:b7:9b:ea:ea:ee:d8:0b:cd:be:7c:24:58:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Sep 28 05:01:33 2026 GMT
Not After : Sep 29 05:01:33 2026 GMT
Subject: CN=3cffc39fedfef031cecec20348663999a23590ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:5e:13:b9:74:dd:bf:a9:97:9e:5a:ce:de:
07:45:20:e7:4d:86:ba:52:3c:8e:e4:96:c6:1d:08:
53:19:51:b0:55:90:c1:b5:d7:90:8b:83:23:9c:e8:
96:00:75:83:28:eb:46:d5:2f:73:f6:77:85:95:56:
08:f3:a8:6d:b3:a6:ab:09:4d:b2:1b:4f:89:cd:85:
79:13:9f:c6:25:07:f0:ec:58:c3:ef:7a:e6:eb:8d:
ba:19:83:7c:a1:27:ac:a3:d8:74:a9:91:7a:5d:39:
98:43:19:8f:38:81:0c:84:c4:45:78:96:63:64:41:
53:8c:e2:7a:92:aa:fe:c0:99:1e:92:d4:ef:1f:72:
62:51:da:51:8d:bd:ff:71:3c:60:d8:be:3a:c0:be:
8a:1b:7e:ca:d7:0b:e6:14:46:b2:e8:16:47:f0:56:
76:1f:ea:4a:3c:51:87:5c:40:20:eb:e2:9b:81:77:
95:c2:7d:02:20:b2:0b:77:8f:17:92:40:c4:9b:b6:
bb:15:42:14:68:f3:91:37:6a:a1:dc:1e:d1:52:4c:
55:5b:d1:0b:42:8e:d7:c2:35:b3:a8:ac:81:cd:94:
5b:cb:e5:4a:79:af:62:10:e7:80:57:c4:f1:11:4f:
25:94:44:86:cc:61:44:f8:95:3e:75:09:65:e7:d7:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FF:C3:9F:ED:FE:F0:31:CE:CE:C2:03:48:66:39:99:A2:35:90:FF
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:62:e1:1f:ca:af:ec:36:bb:af:c5:10:0f:65:f5:32:35:81:
23:d4:75:71:ae:4c:bb:00:36:fd:6e:93:21:1f:94:64:3e:59:
92:8c:62:cb:68:6f:20:02:6b:d4:1c:fa:5d:75:c5:d7:79:48:
90:1f:ed:8b:9d:22:ab:67:ae:94:18:0d:ee:0d:ff:39:a9:36:
8e:7d:70:00:a8:2c:c3:4e:5e:40:31:30:c9:ba:d4:21:09:12:
10:3e:b2:9a:96:6e:ac:79:22:c5:d2:88:8b:ee:c6:6e:59:34:
26:fd:5e:4a:75:0f:59:0c:d8:7d:c3:f6:ea:df:3d:41:d5:5f:
b7:92:bd:3c:99:95:e3:76:49:51:0f:42:7f:83:96:6e:ce:c1:
49:e5:72:e9:32:89:85:22:40:07:38:5e:99:d8:82:35:c9:64:
ed:10:6f:4d:ea:3a:f9:6f:ed:31:8c:b9:4b:ad:c2:5d:8c:b8:
aa:f3:b7:9f:7e:7e:ef:b1:b7:79:2c:63:a2:4f:12:b1:0b:f0:
2f:8a:c4:0c:46:df:b9:3a:de:23:67:c7:05:aa:f1:a8:21:59:
40:39:ca:fd:69:a0:37:ef:b0:0f:74:02:39:e5:87:05:45:a4:
8a:02:74:24:e2:fb:46:0a:91:4f:f3:c4:20:72:89:0c:31:c7:
2a:e4:c8:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDmY8W3m+rq7tgLzb58JFhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMDY2Y2I4NDg4ZGFlN2U0MjM0YWE3Yzg5MjQzMGRhZDEx
ZmU1YjEwHhcNMjYwOTI4MDUwMTMzWhcNMjYwOTI5MDUwMTMzWjAzMTEwLwYDVQQD
EygzY2ZmYzM5ZmVkZmVmMDMxY2VjZWMyMDM0ODY2Mzk5OWEyMzU5MGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMVeE7l03b+pl55azt4HRSDnTYa6
UjyO5JbGHQhTGVGwVZDBtdeQi4MjnOiWAHWDKOtG1S9z9neFlVYI86hts6arCU2y
G0+JzYV5E5/GJQfw7FjD73rm6426GYN8oSeso9h0qZF6XTmYQxmPOIEMhMRFeJZj
ZEFTjOJ6kqr+wJkektTvH3JiUdpRjb3/cTxg2L46wL6KG37K1wvmFEay6BZH8FZ2
H+pKPFGHXEAg6+KbgXeVwn0CILILd48XkkDEm7a7FUIUaPORN2qh3B7RUkxVW9EL
Qo7XwjWzqKyBzZRby+VKea9iEOeAV8TxEU8llESGzGFE+JU+dQll59e6eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDz/w5/t/vAxzs7CA0hmOZmiNZD/MB8GA1UdIwQY
MBaAFJ0GbLhIja5+QjSqfIkkMNrRH+WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQt
M2VmMDJkNTE0MGI3LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQtM2VmMDJkNTE0MGI3
LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWLhH8qv
7Da7r8UQD2X1MjWBI9R1ca5MuwA2/W6TIR+UZD5Zkoxiy2hvIAJr1Bz6XXXF13lI
kB/ti50iq2eulBgN7g3/Oak2jn1wAKgsw05eQDEwybrUIQkSED6ympZurHkixdKI
i+7Gblk0Jv1eSnUPWQzYfcP26t89QdVft5K9PJmV43ZJUQ9Cf4OWbs7BSeVy6TKJ
hSJABzhemdiCNclk7RBvTeo6+W/tMYy5S63CXYy4qvO3n35+77G3eSxjok8SsQvw
L4rEDEbfuTreI2fHBarxqCFZQDnK/WmgN++wD3QCOeWHBUWkigJ0JOL7RgqRT/PE
IHKJDDHHKuTIIg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 14:42:21 2026 by rpki-client