Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.mft
File: nQeAa4mkzlk_5Hy7X5RgyN7nOB4.mft (raw, json)
Hash identifier: kkM1FvYW5FQpotxm6xGCEunW9Kb9/gF2OFFX/GYXJOY=
Subject key identifier: A4:C9:97:F3:C6:D9:F9:6B:EB:69:F4:61:BB:9D:ED:C6:CB:9A:1E:0C
Authority key identifier: 9D:07:80:6B:89:A4:CE:59:3F:E4:7C:BB:5F:94:60:C8:DE:E7:38:1E
Certificate issuer: /CN=9d07806b89a4ce593fe47cbb5f9460c8dee7381e
Certificate serial: 01A0DD974020A8B64EF69DE7094EB03A166C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:01:12 +0000
Manifest this update: Sat 26 Sep 2026 12:01:12 +0000
Manifest next update: Sun 27 Sep 2026 12:01:12 +0000
Files and hashes: 1: gHVOtIUlfqN9G-25nat8LNgWMC0.roa (hash: ZCyCPqJleAxlPygSUagqhGWeE2V/DZgzKMbA0GGYnGw=)
2: nQeAa4mkzlk_5Hy7X5RgyN7nOB4.crl (hash: QeCEkqNn4LOPvezPOqWAzarV16vRQgRxJy0Hs8lbvoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:40:20:a8:b6:4e:f6:9d:e7:09:4e:b0:3a:16:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d07806b89a4ce593fe47cbb5f9460c8dee7381e
Validity
Not Before: Sep 26 12:01:12 2026 GMT
Not After : Sep 27 12:01:12 2026 GMT
Subject: CN=a4c997f3c6d9f96beb69f461bb9dedc6cb9a1e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:08:0e:f8:8b:7b:37:e6:ff:b4:30:31:71:47:
74:c5:c0:93:fb:7c:11:fe:48:c5:29:a9:ea:6a:01:
09:67:1d:99:37:36:71:1b:6b:d8:03:97:90:9b:63:
11:ba:7c:a7:ae:23:22:28:e2:a8:dc:c6:8a:5a:7b:
a0:5d:90:74:c6:82:c5:b9:2a:74:78:2a:ad:50:47:
15:28:36:90:70:bb:10:28:87:f8:61:18:f9:0b:27:
bf:5f:a7:95:1e:8e:c5:a4:ba:b1:d1:cf:34:2d:25:
1e:79:66:08:ab:02:7c:c6:fd:b0:be:db:be:31:cd:
ab:4a:fc:ec:9f:ea:6e:e6:47:d0:70:84:c6:f6:f5:
5e:93:53:73:2c:d9:5d:5f:48:76:a0:d1:53:4f:71:
5a:43:74:19:f4:8d:c1:a0:70:b7:67:d7:58:a2:ca:
55:47:4d:1b:df:10:36:b7:e3:1f:bb:af:e4:00:9e:
18:8d:30:1a:39:65:c5:3c:b5:99:61:2a:08:26:77:
a6:02:f7:72:a0:01:c8:19:58:12:e0:3f:3c:ec:05:
f2:5b:4b:77:27:8c:de:22:fa:07:85:f6:5f:e6:5c:
4a:a6:62:ba:5b:32:41:bf:4d:ab:88:83:9d:d4:cd:
db:e6:83:79:1e:f8:35:cf:74:5f:d1:2f:82:6c:e0:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C9:97:F3:C6:D9:F9:6B:EB:69:F4:61:BB:9D:ED:C6:CB:9A:1E:0C
X509v3 Authority Key Identifier:
keyid:9D:07:80:6B:89:A4:CE:59:3F:E4:7C:BB:5F:94:60:C8:DE:E7:38:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0a131e-37c6-45cb-9682-0b0c12b22bf9/1/nQeAa4mkzlk_5Hy7X5RgyN7nOB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:27:6f:a4:a6:e1:33:07:90:f3:03:36:dd:d2:43:93:a9:7e:
5d:71:c3:b0:fb:9a:d2:d1:7a:7c:97:31:a2:9f:4e:1f:dd:cf:
f3:98:fc:e4:24:cc:20:a1:77:d0:a4:85:7f:ed:c6:3a:66:8e:
36:98:20:79:42:30:fd:1b:73:6e:bd:95:f4:d5:7e:96:91:0f:
21:bb:06:62:0f:c8:e9:f8:1e:7b:13:12:fc:6b:23:cb:d2:44:
6b:d7:13:50:54:9f:19:f1:bc:1d:93:3b:bc:75:40:5e:fd:1c:
3b:d9:c4:ff:39:86:fd:27:ad:25:49:23:22:ab:6f:b6:ba:ff:
a8:16:fa:4c:32:d2:92:ef:5d:17:b6:43:33:6e:69:78:24:8f:
b6:72:38:c2:5d:41:9f:3e:92:59:fc:6f:d8:20:2a:6a:f5:d1:
76:ca:34:3c:85:f0:4a:30:41:cc:3f:c1:0c:80:6b:cb:d0:e2:
f9:c6:46:4c:71:ce:f7:36:75:96:48:67:e7:51:5c:94:b2:b0:
0e:76:30:48:ba:4e:e4:ad:34:92:7a:3f:30:e3:2e:e5:db:6e:
d4:5d:37:c2:36:a0:ed:17:8b:6d:45:df:97:f8:7f:ef:18:73:
df:5e:3a:a0:1c:d4:38:6b:54:02:2b:13:74:2e:b2:07:89:7f:
12:bd:2e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:33:40 2026 by rpki-client