Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: HpawR6NbnKkLDRlMRQRrZ60vkPr8qPvRJFLhGZ1xnxw=
Subject key identifier: CC:CB:56:04:3F:65:F3:36:59:28:6E:1A:2F:32:48:E2:95:62:F8:2C
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 019D9A74FDD64CBDD993501FE42AD923847A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 18D4
Signing time: Fri 17 Apr 2026 08:00:51 +0000
Manifest this update: Fri 17 Apr 2026 08:00:51 +0000
Manifest next update: Sat 18 Apr 2026 08:00:51 +0000
Files and hashes: 1: DdkhG9ScS5mKOj6FEPIiUrVTDGA.roa (hash: JddADCbKnFgd2w/G6EyTsDQqGgZM9PxBGHiXPX0tQCk=)
2: Kfpukp1mfPmVOexK4iRI3WWUkLE.roa (hash: dRxylayWUvJFav2jQoF/w0hiqJLQbgosTCaGTxEw3QY=)
3: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: VrLEjyMx6bMbhXAMsFKrnGWxGOOteHJ9eMWrlRjwNJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:fd:d6:4c:bd:d9:93:50:1f:e4:2a:d9:23:84:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Apr 17 08:00:51 2026 GMT
Not After : Apr 18 08:00:51 2026 GMT
Subject: CN=cccb56043f65f33659286e1a2f3248e29562f82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:af:4b:07:f7:2a:94:73:5b:8f:e4:b4:2a:
c4:40:4c:0e:cb:7e:d9:51:1e:e3:ed:c2:24:18:2a:
37:f2:59:53:3a:7e:df:72:82:10:89:23:8c:19:5d:
90:91:50:2e:5a:31:48:3a:76:14:28:2d:0a:4a:fc:
e5:59:73:03:04:eb:3e:1b:a6:11:77:82:05:29:2a:
be:5b:3e:d9:ba:b7:fb:02:10:83:45:f4:16:fc:9f:
4b:9f:5b:99:1a:bd:2b:03:4f:30:92:67:7c:99:4b:
2e:25:93:af:ef:bf:22:ee:6b:84:17:9a:db:fb:e3:
9b:dc:f0:0e:f8:88:3d:1d:0c:db:a5:bc:1a:b9:44:
e3:f4:11:d7:9d:79:94:f6:56:9e:5f:3b:99:10:f8:
29:d0:f0:a1:87:99:6e:79:86:8d:74:32:b9:5d:48:
f5:4a:41:96:4c:58:aa:4c:4a:37:0a:0a:b4:c4:3d:
0c:60:5a:09:08:8b:62:47:19:da:aa:dd:57:26:ed:
57:c0:9f:7e:8e:28:c7:84:98:2d:5d:06:ba:f7:11:
63:02:7f:be:b0:7c:7c:aa:dd:92:12:f0:4e:a3:79:
0c:e2:cb:6e:5b:dc:30:87:09:6d:82:c5:99:74:9a:
1f:d7:44:e3:d0:6e:f7:62:60:44:9c:cd:37:83:6d:
1d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CB:56:04:3F:65:F3:36:59:28:6E:1A:2F:32:48:E2:95:62:F8:2C
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:95:9a:23:5d:8d:78:de:b4:60:e0:dd:60:dd:97:cb:d8:d4:
d2:86:a6:26:4c:21:35:8f:cc:6c:27:c3:7e:a6:8d:6f:62:02:
ef:44:6c:81:09:63:99:74:8c:4e:d1:c0:09:a6:8f:9c:fa:ce:
20:22:66:ce:f3:8f:65:df:c3:21:48:5d:0f:46:db:dc:49:d3:
52:e9:6b:02:67:47:9d:28:b9:c2:63:22:e0:09:7f:e7:62:f6:
81:24:7c:d8:f7:82:a2:9f:ba:b3:44:0a:5a:b7:2c:d3:36:cf:
58:e0:7c:7f:d2:f0:54:9a:cc:da:19:61:4a:30:d8:f3:20:fd:
c3:7f:fc:9c:4f:7a:e0:bf:ab:9d:f4:6f:4e:98:cf:dc:94:03:
cc:8a:44:66:5e:59:07:f1:8f:c4:3e:b1:a1:de:6e:7e:8d:83:
31:62:36:74:c6:9b:75:8a:74:31:69:b9:75:69:4a:b1:97:78:
88:64:3c:28:99:c0:5b:5c:b8:b1:20:ed:f4:34:2b:7a:16:51:
2c:9b:90:83:79:5d:01:69:62:89:a0:b4:e8:ea:d8:4e:42:0f:
48:28:23:5a:84:b1:4f:56:0a:24:66:bd:31:09:8b:f7:ac:a4:
1d:69:90:93:eb:eb:ce:e0:8d:54:d1:d8:e8:c8:f4:5c:58:e3:
f3:77:b8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:02:25 2026 by rpki-client