Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json)
Hash identifier: z+iNFxaj1ENB8xbC5UvW0tWJriTly8sCyLg1Z4wjl68=
Subject key identifier: 6B:71:E5:10:39:49:35:31:CD:72:59:76:DF:10:BC:09:80:33:0E:0C
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 019D992B6A74C0FC86172228BF1407ECB7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
Manifest number: 1854
Signing time: Fri 17 Apr 2026 02:00:52 +0000
Manifest this update: Fri 17 Apr 2026 02:00:52 +0000
Manifest next update: Sat 18 Apr 2026 02:00:52 +0000
Files and hashes: 1: WgXn9G5ryVcoOunG4ZvkrJdWw94.roa (hash: TVpzuhy4mtyrOaTWx+19/cTwhYu2EZdbTfL5e2TtoDg=)
2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: lnY5GvT0eeujWLq+5gbjaMJVpwFltgmAPRfm1cTok2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:6a:74:c0:fc:86:17:22:28:bf:14:07:ec:b7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: Apr 17 02:00:52 2026 GMT
Not After : Apr 18 02:00:52 2026 GMT
Subject: CN=6b71e51039493531cd725976df10bc0980330e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:ae:73:e1:b8:f6:74:a2:0d:b5:71:58:16:
63:e9:69:fa:80:6d:b6:61:1a:41:f8:54:4d:b9:d4:
cd:88:ec:96:f8:43:30:75:50:e0:b0:15:93:6b:b8:
3a:c6:d4:93:73:89:db:e3:4a:1f:06:ab:6c:04:ee:
75:6c:01:64:70:a0:d5:ba:ff:ee:48:4d:93:cd:a3:
89:2c:2f:35:bc:da:f7:46:f0:b1:48:b0:62:ca:fe:
1a:f1:25:bb:74:96:ef:be:fb:7d:f2:1c:0c:12:f6:
1b:4b:13:76:3e:76:42:32:e5:f8:b5:03:d6:26:dd:
28:09:f8:e5:ec:63:5c:11:ce:c7:a5:ff:20:7e:15:
d3:c7:df:73:44:d4:39:a5:d7:ab:a7:cd:10:3d:68:
ae:96:8a:93:bc:ab:86:64:42:f8:a6:d0:ea:a8:90:
2f:c5:24:06:81:0f:04:5f:28:d1:1f:fe:90:b5:0b:
d5:84:90:8d:4b:ee:9a:c6:9e:f0:4e:d2:f2:a2:03:
55:fd:0d:2b:a9:3e:7b:ff:20:03:fc:a2:3c:32:1b:
c0:96:32:e5:77:49:55:0a:27:6f:61:44:2d:51:0e:
33:fd:d9:e9:8e:e0:d3:67:16:d1:81:e2:01:09:03:
49:a4:31:8d:36:40:3c:d4:eb:50:d2:a1:6f:f5:f0:
e2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:71:E5:10:39:49:35:31:CD:72:59:76:DF:10:BC:09:80:33:0E:0C
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:56:b5:85:96:13:3c:cb:3e:72:09:9c:70:a8:69:ca:b6:aa:
60:0f:a6:63:0c:a7:88:22:87:ab:4a:04:fb:9e:79:01:17:3d:
0a:6e:21:ce:8d:c7:ae:16:57:7f:1a:60:55:a5:95:cf:63:11:
3a:62:dd:aa:ee:a2:9e:43:87:f2:fc:47:6c:ec:40:95:86:ad:
fe:14:fa:ac:34:50:e7:29:fc:22:6b:16:6b:7f:d9:f8:0e:17:
4b:d3:5d:31:1e:0f:fe:f7:41:07:41:98:d1:54:85:43:30:03:
22:07:89:ab:21:41:70:e2:8c:36:a4:36:bc:13:ab:72:ad:c4:
9a:86:8e:ae:80:be:0d:0e:b8:b3:1f:3c:66:e0:a9:b6:22:9f:
a2:16:e1:99:54:a1:e7:82:5d:00:99:2b:a7:13:59:69:c5:ff:
22:2e:63:6c:44:28:6a:f2:10:7e:08:9d:85:1d:48:46:58:07:
74:f6:68:f0:20:2f:e5:83:1f:44:95:60:cc:cb:3a:48:2e:62:
94:21:29:d4:d6:3e:30:52:60:be:c4:fb:b0:2a:11:0f:6c:08:
21:a8:0c:8a:49:8f:d8:d9:f7:28:92:db:06:11:22:b5:b4:bb:
96:c1:11:a8:4e:d8:bb:32:03:19:f2:e8:3a:61:d6:1e:7b:a5:
af:ea:08:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:53 2026 by rpki-client