Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
File: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json)
Hash identifier: rBpIN2yYgs0HwIFIZz2BIiP/hG04SGLi5GeSe1i/0cU=
Subject key identifier: A8:5A:FC:00:A0:09:C9:75:CA:8D:FA:BA:1C:0A:70:EA:3A:8F:19:B1
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Certificate issuer: /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial: 01A126C2F1DFBFCED3663521B14E125A38C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
Manifest number: 1A2B
Signing time: Sat 10 Oct 2026 17:01:12 +0000
Manifest this update: Sat 10 Oct 2026 17:01:12 +0000
Manifest next update: Sun 11 Oct 2026 17:01:12 +0000
Files and hashes: 1: WgXn9G5ryVcoOunG4ZvkrJdWw94.roa (hash: TVpzuhy4mtyrOaTWx+19/cTwhYu2EZdbTfL5e2TtoDg=)
2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: UIREE0topxwFqMejgI04vr3F2H1O8DXv3JMvOEa4jMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:c2:f1:df:bf:ce:d3:66:35:21:b1:4e:12:5a:38:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Validity
Not Before: Oct 10 17:01:12 2026 GMT
Not After : Oct 11 17:01:12 2026 GMT
Subject: CN=a85afc00a009c975ca8dfaba1c0a70ea3a8f19b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:65:97:ec:61:e9:a4:fa:05:b1:bd:5b:12:
7e:10:95:7c:08:4e:fc:04:4e:83:fa:58:05:ce:67:
76:ca:83:59:3c:f4:99:00:7c:a3:af:d4:44:5f:ff:
d0:46:75:6c:bb:36:5f:cd:de:5b:85:52:ee:bc:c4:
16:a3:28:c8:d6:fb:3f:cb:76:3a:06:ad:4f:b3:51:
3d:e2:06:71:67:31:9a:dc:59:4e:a0:74:b2:a6:fc:
f8:29:eb:48:f8:0a:fe:e2:3a:57:57:3f:3f:96:39:
94:86:c9:d3:04:fb:ac:ef:41:0c:20:f1:93:ba:f3:
d8:fc:8e:9f:0f:9e:b4:ee:6a:36:6f:ae:87:bd:98:
cb:b0:03:4c:bc:74:64:09:bf:74:39:c5:24:20:f1:
70:fb:d7:51:ea:29:2c:f8:97:4a:79:16:6e:0c:c0:
1a:e1:81:74:61:0e:39:ba:4f:03:97:d6:37:aa:10:
89:ca:6f:4e:97:6c:c0:49:d6:1d:f8:69:cf:7d:cc:
3f:95:d7:eb:ed:b9:f8:d7:29:4e:4b:f0:e6:51:f4:
96:fc:78:e7:09:d0:66:b6:79:be:eb:23:03:57:07:
f3:34:6a:23:f2:96:1f:ee:a4:12:31:59:2d:f1:1e:
65:69:50:b2:83:6a:29:51:ad:bd:b2:1d:da:93:d0:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5A:FC:00:A0:09:C9:75:CA:8D:FA:BA:1C:0A:70:EA:3A:8F:19:B1
X509v3 Authority Key Identifier:
keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4d:e7:1f:e2:5f:0f:75:63:bc:2e:50:25:a6:49:63:9b:5a:
73:38:51:03:15:90:db:e0:11:81:f5:66:38:42:27:3f:59:3a:
b0:ed:d4:12:68:75:ab:37:e5:d9:d0:f4:3d:6a:05:b2:e8:f3:
c3:5e:4a:87:c6:a7:87:13:12:03:2c:e8:21:64:8f:4e:ae:6f:
17:9e:3a:ff:be:db:29:f1:ba:bc:d1:61:b7:1c:9a:9d:94:86:
d7:8b:57:37:79:e3:b3:b0:66:4c:06:ef:1a:54:d2:54:de:e0:
bc:4b:06:25:9a:f4:0c:f7:4a:e7:66:f7:a8:30:e2:51:cc:1e:
7d:22:51:fa:6d:3c:f5:83:36:b0:bf:04:55:91:c9:3e:8d:65:
4e:83:0b:c1:4b:d4:d4:6f:ff:20:8f:f7:c8:08:df:2f:ac:ec:
5f:1d:b2:4e:ca:e1:0d:9c:e1:55:8d:4e:a5:39:f4:6e:0a:d9:
d0:e9:71:30:ab:45:ff:61:49:86:f6:82:b4:21:e1:1c:b0:ae:
d8:b7:ae:0f:8b:b1:74:8a:ee:b8:08:69:77:8e:b8:d1:ae:28:
f5:37:98:32:8b:5f:bc:50:b2:4e:5b:61:21:ce:dc:dc:0a:04:
a1:b2:cb:24:1b:f7:63:5b:fb:d5:a1:45:24:79:c9:fa:91:21:
89:57:59:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEmwvHfv87TZjUhsU4SWjjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlN2E4ZDdkYjMyYTQwZDRlMWQwMDI4YTdjZmQwODE0YjY1
MGY0MjIwHhcNMjYxMDEwMTcwMTEyWhcNMjYxMDExMTcwMTEyWjAzMTEwLwYDVQQD
EyhhODVhZmMwMGEwMDljOTc1Y2E4ZGZhYmExYzBhNzBlYTNhOGYxOWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4hll+xh6aT6BbG9WxJ+EJV8CE78
BE6D+lgFzmd2yoNZPPSZAHyjr9REX//QRnVsuzZfzd5bhVLuvMQWoyjI1vs/y3Y6
Bq1Ps1E94gZxZzGa3FlOoHSypvz4KetI+Ar+4jpXVz8/ljmUhsnTBPus70EMIPGT
uvPY/I6fD5607mo2b66HvZjLsANMvHRkCb90OcUkIPFw+9dR6iks+JdKeRZuDMAa
4YF0YQ45uk8Dl9Y3qhCJym9Ol2zASdYd+GnPfcw/ldfr7bn41ylOS/DmUfSW/Hjn
CdBmtnm+6yMDVwfzNGoj8pYf7qQSMVkt8R5laVCyg2opUa29sh3ak9AJFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKha/ACgCcl1yo36uhwKcOo6jxmxMB8GA1UdIwQY
MBaAFP56jX2zKkDU4dACinz9CBS2UPQiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi83MWU5NDgtNjkxZS00ZGVhLWIwMmIt
YjEyYTY5MzNmODI5LzEvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi83MWU5NDgtNjkxZS00ZGVhLWIwMmItYjEyYTY5MzNmODI5
LzEvX25xTmZiTXFRTlRoMEFLS2ZQMElGTFpROUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASE3nH+Jf
D3VjvC5QJaZJY5taczhRAxWQ2+ARgfVmOEInP1k6sO3UEmh1qzfl2dD0PWoFsujz
w15Kh8anhxMSAyzoIWSPTq5vF546/77bKfG6vNFhtxyanZSG14tXN3njs7BmTAbv
GlTSVN7gvEsGJZr0DPdK52b3qDDiUcwefSJR+m089YM2sL8EVZHJPo1lToMLwUvU
1G//II/3yAjfL6zsXx2yTsrhDZzhVY1OpTn0bgrZ0OlxMKtF/2FJhvaCtCHhHLCu
2LeuD4uxdIruuAhpd4640a4o9TeYMotfvFCyTlthIc7c3AoEobLLJBv3Y1v71aFF
JHnJ+pEhiVdZPw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 01:56:54 2026 by rpki-client