Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json)
Hash identifier: xFhZxc9lqOzP0YVj+8wL3hcKg2vue6cpeolHcLPZlUg=
Subject key identifier: F1:56:0F:A2:95:CC:9F:00:B0:4E:63:B3:B5:D8:5A:7B:36:8A:F5:ED
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 019FAC3EEE3BE22FFD83128DD8B4D44AD8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
Manifest number: 1967
Signing time: Wed 29 Jul 2026 05:00:33 +0000
Manifest this update: Wed 29 Jul 2026 05:00:33 +0000
Manifest next update: Thu 30 Jul 2026 05:00:33 +0000
Files and hashes: 1: WgXn9G5ryVcoOunG4ZvkrJdWw94.roa (hash: TVpzuhy4mtyrOaTWx+19/cTwhYu2EZdbTfL5e2TtoDg=)
2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: fjWQttguhJ3W22REuB1UXmIqdSplLCThrpvz0gRZeWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:ee:3b:e2:2f:fd:83:12:8d:d8:b4:d4:4a:d8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: Jul 29 05:00:33 2026 GMT
Not After : Jul 30 05:00:33 2026 GMT
Subject: CN=f1560fa295cc9f00b04e63b3b5d85a7b368af5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:6b:45:81:ed:bc:b1:af:7d:1f:24:46:87:
07:1e:73:0d:4a:18:5c:a8:ab:a3:f6:2a:27:75:82:
2e:97:df:8f:35:0e:ae:fc:b9:9f:c4:34:7d:2e:ca:
c9:58:36:25:de:63:a0:9d:91:bb:ac:49:c1:fe:63:
5b:28:80:02:f4:b6:74:e6:87:ef:57:68:c6:8d:41:
1e:35:51:27:79:58:45:77:05:fa:eb:2a:69:5c:55:
b7:2d:10:31:8d:fe:8b:07:63:fd:20:b5:03:2a:37:
de:d2:07:02:bb:63:fa:39:ce:9e:50:b1:b7:da:e1:
86:a8:f2:16:a8:a4:f1:eb:09:45:77:34:45:27:3f:
c7:a2:96:b1:88:6b:b7:73:6d:7d:16:a1:58:3d:27:
50:2c:e9:54:99:88:b6:e0:2c:9b:8f:c9:c6:de:21:
02:36:69:cf:80:83:47:f6:24:a4:e0:0a:be:58:5a:
c2:f4:c4:2f:2b:c8:53:f5:b0:08:bc:47:81:07:ce:
3d:a7:0e:75:a2:e4:cd:63:07:13:3b:fa:c3:07:45:
56:6e:47:99:43:1c:6c:c5:a9:4f:50:ba:bd:0e:81:
3c:22:69:2d:d9:d7:a7:2d:d9:3d:ad:13:01:26:f5:
22:b1:66:63:af:24:0a:d5:9a:c9:db:77:a7:de:b1:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:56:0F:A2:95:CC:9F:00:B0:4E:63:B3:B5:D8:5A:7B:36:8A:F5:ED
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c8:04:17:42:f0:7d:3d:42:10:9d:cb:f7:95:1f:c8:76:cc:
9c:37:f1:64:77:1c:d6:5d:f9:ee:03:9e:c8:dc:25:6c:78:ba:
e4:9d:02:bd:8e:1c:d1:88:a1:ab:57:2f:03:79:85:27:02:88:
7c:7e:cc:f8:6a:44:f3:21:90:6f:03:ae:60:b9:13:2f:d4:07:
da:c7:6e:ed:b8:30:64:69:71:c5:38:b2:db:85:c0:a3:16:d4:
f8:de:9c:1b:20:78:65:c2:52:7b:83:35:2d:55:e5:05:0e:68:
9b:34:1f:c2:fb:df:9c:ae:05:84:c5:29:2b:19:7a:93:03:e6:
13:4e:fe:27:ec:24:1c:68:ae:d1:bd:9d:da:92:50:da:d3:e7:
e3:18:2d:0d:b7:69:ec:b5:b7:5e:2c:17:38:7f:0d:e4:eb:8d:
93:12:a6:55:d6:ed:f9:66:f6:99:84:e3:82:37:6f:13:73:4a:
da:a3:7f:1b:2d:10:22:0c:46:c6:1a:ed:d9:40:2f:ab:ea:70:
04:3d:ce:2e:ac:4a:9d:f9:c1:e4:b8:d6:cf:9f:0a:8a:3b:5c:
45:05:2f:bf:cf:ff:a9:04:56:f2:9b:df:2c:9f:ae:23:e4:5d:
1f:54:af:f1:bf:f3:5d:fa:bb:8f:40:fb:98:ef:99:ba:bb:3a:
90:ba:b4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:59:26 2026 by rpki-client