Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
File: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft (raw, json)
Hash identifier: aQVQvrdwgJZvmXj0hoG/8OWJgMekVKRNgng0iNamJgs=
Subject key identifier: 30:03:00:B4:A9:B4:E3:19:E3:09:F2:2C:58:E6:C0:D6:62:49:1F:42
Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Certificate serial: 01A0C17ABE120B7B7CE8EA1A01F341CA0BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 01:00:41 +0000
Manifest this update: Mon 21 Sep 2026 01:00:41 +0000
Manifest next update: Tue 22 Sep 2026 01:00:41 +0000
Files and hashes: 1: Cu4pJx-r5WHHtQlLqPIl7Qbn6a8.roa (hash: nvdmwUw2DJYlyGm2Jpi5RTC+E3z4Xl1tYxTpqZlijT8=)
2: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl (hash: mpBy2xGfP6X2LwwiJzQcgrH2ie8aaWSqzzzl9qQ2RKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:be:12:0b:7b:7c:e8:ea:1a:01:f3:41:ca:0b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Validity
Not Before: Sep 21 01:00:41 2026 GMT
Not After : Sep 22 01:00:41 2026 GMT
Subject: CN=300300b4a9b4e319e309f22c58e6c0d662491f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:9e:1a:e4:c9:f1:c5:ea:23:e2:fc:9b:b1:
87:03:cf:53:f6:e1:28:e6:5c:9c:f4:0a:a8:0f:c9:
40:bf:3d:9d:35:73:9a:91:4e:19:f0:a7:50:cc:4c:
05:81:2d:79:fe:b7:9b:38:97:08:57:aa:9e:b4:8b:
48:40:a0:0a:d3:a7:1d:45:92:45:bb:b1:e0:c4:b7:
a4:85:b0:56:3e:1a:96:f5:fe:59:68:e2:22:ce:e3:
81:ea:0e:a4:a8:b9:02:fd:00:5d:04:8d:72:18:2f:
ef:76:95:7b:17:d1:52:71:81:91:04:ee:a2:93:9b:
c1:60:d7:7b:8e:bc:0f:39:85:01:62:8c:06:37:cb:
b2:7e:92:e4:c6:cd:d3:b3:c3:5b:1c:ed:e0:72:46:
03:da:a3:91:87:b9:1c:e1:1d:bc:60:38:02:fa:cb:
5b:11:d7:ed:20:b7:5f:96:d9:33:7d:8f:a5:58:1c:
ec:b8:f6:ac:f9:ef:49:01:a3:c6:e6:d2:d1:e1:89:
b8:38:67:8d:2f:90:df:53:41:2a:86:fb:30:c3:8a:
91:ab:80:8c:92:74:1a:b3:00:d0:4a:7c:cb:08:f7:
b4:32:ae:bc:5b:d6:e6:33:21:a3:dc:62:ab:b9:cf:
63:c8:3f:bd:97:e3:3d:39:0c:9d:35:92:8c:e9:9f:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:03:00:B4:A9:B4:E3:19:E3:09:F2:2C:58:E6:C0:D6:62:49:1F:42
X509v3 Authority Key Identifier:
keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:33:34:e1:d6:e7:9a:d1:32:79:56:9e:e7:d8:28:bf:2c:9f:
a1:4f:2e:3d:44:eb:4e:39:c9:67:0e:ca:8b:35:8f:21:03:2b:
d5:7d:cd:41:34:e0:b9:41:51:ae:fe:69:97:6a:6a:a6:ac:bf:
29:e2:8a:2f:1f:99:20:6d:cb:19:bd:5a:a5:ff:7d:e8:39:97:
88:5a:e5:48:55:3e:e5:bf:3c:78:99:52:98:a9:8d:40:e4:8d:
54:65:24:c7:39:47:cc:f1:6a:a5:94:ce:10:2b:50:c7:a9:cc:
3d:ee:6e:41:68:90:dd:53:a9:70:55:18:6a:12:d2:36:4a:43:
6e:e2:08:6b:83:ec:79:f8:86:3a:8f:9c:db:f1:5b:8f:09:ca:
f6:03:b4:0b:bb:ae:d1:5f:ae:fa:f1:12:25:48:67:cb:ee:89:
dc:41:ec:f2:c3:33:88:d5:23:72:b3:e9:1e:bd:fe:e9:50:25:
7a:ca:e0:46:c6:73:78:c1:d4:7e:ac:3a:a5:01:c2:70:cf:f9:
52:e4:f6:31:bf:f6:cb:c4:8e:e3:80:6b:35:55:24:76:0c:d5:
56:c9:2b:0b:7f:43:ad:24:a6:91:d8:1f:e4:f5:1a:6a:24:39:
fd:7d:fd:06:7a:8a:8f:c3:10:bb:73:98:04:16:bd:1f:81:78:
96:de:72:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBer4SC3t86OoaAfNByguyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNzQxMzViYjA3YzY1NDBjZDMwN2JkYTA4Y2EwNjc0YmM4
NGM5MzkwHhcNMjYwOTIxMDEwMDQxWhcNMjYwOTIyMDEwMDQxWjAzMTEwLwYDVQQD
EygzMDAzMDBiNGE5YjRlMzE5ZTMwOWYyMmM1OGU2YzBkNjYyNDkxZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn2eGuTJ8cXqI+L8m7GHA89T9uEo
5lyc9AqoD8lAvz2dNXOakU4Z8KdQzEwFgS15/rebOJcIV6qetItIQKAK06cdRZJF
u7HgxLekhbBWPhqW9f5ZaOIizuOB6g6kqLkC/QBdBI1yGC/vdpV7F9FScYGRBO6i
k5vBYNd7jrwPOYUBYowGN8uyfpLkxs3Ts8NbHO3gckYD2qORh7kc4R28YDgC+stb
EdftILdfltkzfY+lWBzsuPas+e9JAaPG5tLR4Ym4OGeNL5DfU0Eqhvsww4qRq4CM
knQaswDQSnzLCPe0Mq68W9bmMyGj3GKruc9jyD+9l+M9OQydNZKM6Z9ZtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDADALSptOMZ4wnyLFjmwNZiSR9CMB8GA1UdIwQY
MBaAFJ50E1uwfGVAzTB72gjKBnS8hMk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQt
NWRjODBmYWVkMmRjLzEvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQtNWRjODBmYWVkMmRj
LzEvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDM04dbn
mtEyeVae59govyyfoU8uPUTrTjnJZw7KizWPIQMr1X3NQTTguUFRrv5pl2pqpqy/
KeKKLx+ZIG3LGb1apf996DmXiFrlSFU+5b88eJlSmKmNQOSNVGUkxzlHzPFqpZTO
ECtQx6nMPe5uQWiQ3VOpcFUYahLSNkpDbuIIa4PsefiGOo+c2/FbjwnK9gO0C7uu
0V+u+vESJUhny+6J3EHs8sMziNUjcrPpHr3+6VAlesrgRsZzeMHUfqw6pQHCcM/5
UuT2Mb/2y8SO44BrNVUkdgzVVskrC39DrSSmkdgf5PUaaiQ5/X39BnqKj8MQu3OY
BBa9H4F4lt5yVg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:06:41 2026 by rpki-client