Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
File: nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft (raw, json)
Hash identifier: rwZMhCUwYjTzoRI3weIFjCUEfJetbgrsfqqB7sHqfG4=
Subject key identifier: E8:B7:44:0A:23:84:6E:77:5F:CB:9C:DC:FA:4A:EE:44:18:44:18:92
Authority key identifier: 9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
Certificate issuer: /CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Certificate serial: 019CAB3408176C4B31CC2077D8B52F0F64A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
Manifest number: 1365
Signing time: Sun 01 Mar 2026 21:00:39 +0000
Manifest this update: Sun 01 Mar 2026 21:00:39 +0000
Manifest next update: Mon 02 Mar 2026 21:00:39 +0000
Files and hashes: 1: QTigOcVAdf_ybq4yALkL6wD-Vpo.roa (hash: GLaLa+CpFjjdWnIOnhYXw5MIYp/169ESCt0275EXVGo=)
2: nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl (hash: JZMlbL3VuwATZ7WG6Iw83wekFyXUkb6wWMS2gwprq4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:08:17:6c:4b:31:cc:20:77:d8:b5:2f:0f:64:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1e7e2f8f317759f3468fd815bf14eb36e21c8
Validity
Not Before: Mar 1 21:00:39 2026 GMT
Not After : Mar 2 21:00:39 2026 GMT
Subject: CN=e8b7440a23846e775fcb9cdcfa4aee4418441892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:5e:2b:07:52:da:ef:7d:fd:11:0c:69:1d:
1a:70:9d:4b:02:ff:5d:63:e9:28:0e:65:2d:a8:b3:
94:54:53:ba:16:53:38:9c:9e:34:5a:af:f8:aa:ca:
9f:ae:68:94:f4:d2:9c:f3:88:ff:34:5d:63:27:71:
34:29:ab:83:16:05:58:de:84:08:19:f4:81:69:b7:
cf:7e:fe:a7:62:74:f2:5a:6a:94:48:10:47:db:5f:
be:0a:c6:9f:9a:82:9d:dd:8c:ba:d6:a8:d4:36:24:
4c:9a:ba:4f:05:d6:0e:a7:a4:5d:d7:af:d2:08:6b:
f7:97:46:89:d8:e5:b7:84:1b:a0:cc:b4:5a:45:26:
50:95:71:74:3b:e8:45:a4:29:af:dc:7b:b2:b0:ec:
78:9d:7c:25:7a:99:7f:8c:d6:22:ed:86:d0:10:ce:
20:b6:f6:a4:6d:4d:36:c7:73:30:5a:e3:2a:47:9e:
ca:96:14:ec:9c:d6:5d:df:46:f1:0d:39:46:fe:93:
63:ac:39:63:c2:20:ee:8e:2e:5a:fc:ca:f4:d9:da:
b5:3b:e7:1c:76:53:8b:80:e4:30:4b:eb:7d:7e:9d:
9b:0e:d9:13:7a:da:15:86:e9:aa:c5:4f:4a:f9:de:
0c:cb:42:be:1f:6a:3c:34:e5:ea:7d:c6:8f:6b:a0:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B7:44:0A:23:84:6E:77:5F:CB:9C:DC:FA:4A:EE:44:18:44:18:92
X509v3 Authority Key Identifier:
keyid:9E:A1:E7:E2:F8:F3:17:75:9F:34:68:FD:81:5B:F1:4E:B3:6E:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqHn4vjzF3WfNGj9gVvxTrNuIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba3577-ccb3-4ea6-8368-7458608f8d99/1/nqHn4vjzF3WfNGj9gVvxTrNuIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f0:f1:f2:df:ca:87:8f:d6:e7:3a:c4:0f:5d:00:28:88:ba:
a6:f4:1e:00:c6:24:15:3a:58:e0:83:89:f6:11:d5:0b:ca:0c:
ec:d8:81:d7:77:22:19:2d:a4:6e:43:df:65:e7:f7:4a:74:42:
5e:f5:78:1d:e1:ce:e3:d3:9d:89:66:47:2b:34:05:04:8e:fd:
1f:f0:76:2b:47:80:2a:46:9d:30:85:03:af:6a:be:1c:5c:4b:
4f:0d:a8:f3:b6:07:cc:f1:15:1f:44:80:78:a7:13:b9:84:74:
43:53:32:a2:86:23:cc:59:de:3a:af:88:7a:89:60:d2:fb:fd:
31:61:01:9a:0f:99:cf:61:44:73:54:42:e2:a4:2b:3b:7c:a3:
5a:f8:7c:c9:6a:f0:6c:cf:3d:50:d0:76:71:e4:31:1d:ea:c3:
c5:32:84:bc:9b:65:e4:2d:e2:b7:a9:68:6f:06:a6:74:c1:98:
8a:76:70:d3:93:28:bd:b7:91:21:18:80:22:1d:04:92:57:7c:
f8:f6:2e:e6:5a:01:45:0a:1c:e4:0a:6e:f2:68:b6:df:01:74:
f8:f6:84:3c:f4:32:2e:b9:29:39:40:ec:1e:fd:d6:c8:aa:d1:
b5:2c:b3:a0:7f:04:72:0c:2a:9c:1c:59:89:08:70:6e:12:ae:
a1:c3:97:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:59 2026 by rpki-client