Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier: 71nCM/HKqlEx3JChkTm+g3dzjFX+dNsARo/g7UozYgQ=
Subject key identifier: 8C:B3:89:F8:3F:F3:06:84:D3:01:4C:A8:08:35:17:8D:C1:01:86:99
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 019CADC81CD1AB63A747B49D934AEC9791AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number: 11BE
Signing time: Mon 02 Mar 2026 09:01:38 +0000
Manifest this update: Mon 02 Mar 2026 09:01:38 +0000
Manifest next update: Tue 03 Mar 2026 09:01:38 +0000
Files and hashes: 1: LP-962DLDMgpRMI7_mhHbAEeXHI.roa (hash: L11irqAmN9Yh9SwUVInvcZWfgHtuDzon2+axE8dju+M=)
2: OWOkZZmgGCYknyTPhxnobWYLpHI.roa (hash: bTzqDctbFjp9GWzcDrimAEL7omNgimbSYfc0EwnYgpc=)
3: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: GoVWYNI2BDwtUbwL72gYEjXagSDL2ed4Sv+va7z8a5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:1c:d1:ab:63:a7:47:b4:9d:93:4a:ec:97:91:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Mar 2 09:01:38 2026 GMT
Not After : Mar 3 09:01:38 2026 GMT
Subject: CN=8cb389f83ff30684d3014ca80835178dc1018699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:7d:5b:70:68:2d:b0:25:64:3c:ed:ca:1f:
96:9c:4e:09:5e:38:ef:23:39:fa:00:1e:cf:46:90:
51:b5:52:0a:50:3d:ad:aa:4c:9a:9a:b6:19:89:e2:
1b:c2:bf:7d:61:e5:d7:99:9f:79:f1:1f:31:d9:57:
12:76:a8:30:96:ec:d0:13:ad:56:73:b7:1c:5b:89:
00:7f:fc:1a:81:4a:bc:13:4f:f2:30:68:2f:5c:99:
f9:54:72:72:0b:a9:52:fa:02:76:22:75:f0:b8:e6:
d0:71:af:07:14:4e:64:99:29:bc:58:a0:26:e9:6d:
d9:3b:fc:a7:e2:2c:36:e2:57:74:bd:54:86:23:45:
a0:f8:da:2d:68:95:8d:4d:66:22:f6:2d:18:71:5d:
04:2d:0d:48:e5:97:c8:47:23:be:42:25:f8:8e:1a:
59:ce:cd:30:a0:cd:d4:85:23:f5:01:36:22:cd:5a:
e7:b5:12:f9:f2:97:d9:c1:c2:b5:d7:1a:a3:fc:f0:
59:77:ad:3a:99:11:ba:59:b5:a2:56:4e:90:fa:54:
98:5c:73:51:3a:b4:fc:71:e5:ce:4f:f7:5c:5a:cb:
2d:0b:95:c8:46:16:0d:e0:cc:89:f0:2b:47:5f:20:
05:c0:40:9d:94:76:8b:6c:06:dc:5b:28:1c:3a:f3:
2c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B3:89:F8:3F:F3:06:84:D3:01:4C:A8:08:35:17:8D:C1:01:86:99
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:74:bc:16:9f:9d:11:3a:3c:3d:12:bc:ff:bb:c4:ef:3d:09:
e9:71:d7:b1:6d:20:81:70:30:78:a3:a7:18:1a:7d:78:85:58:
7e:73:86:fa:b7:db:fa:c9:4d:95:ba:2c:b6:33:67:e1:f0:f7:
9b:37:1a:08:1b:98:ec:90:57:51:2f:4c:33:62:5e:52:9e:4b:
fe:e2:46:bc:6e:33:61:84:f5:55:be:4e:db:db:ee:d9:be:b3:
f1:09:0d:84:3e:a8:6a:ee:f1:ae:b3:15:cf:b1:9c:c0:4b:c0:
0f:a7:f9:6d:f6:10:de:57:a3:a5:ad:0f:91:46:c9:60:76:c6:
85:54:dc:7d:96:56:09:92:f6:b8:7d:5e:0f:5a:93:9b:25:15:
90:53:b8:ed:51:39:53:22:4e:d9:ed:2c:41:5e:e8:55:3c:d4:
48:16:b6:c7:d6:31:f6:f5:1b:53:f4:8d:bb:41:ff:d1:7c:a1:
40:c7:a2:f7:95:02:ec:25:81:b9:27:88:3a:28:2e:17:10:12:
62:44:dc:50:ea:b7:a6:89:5f:26:07:8c:38:e2:98:83:40:6a:
44:cc:8e:95:e4:40:ae:a1:85:7f:8a:2e:22:65:8c:d1:08:51:
23:d9:b9:30:83:7f:df:ac:a9:c5:97:02:c2:16:5c:f4:b1:7b:
7a:b6:2c:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytyBzRq2OnR7Sdk0rsl5GvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYTE0MjUyMjU0MTBjOTMyMTFkMDg3NThmY2RhZjBmN2Fh
MWNjYWEwHhcNMjYwMzAyMDkwMTM4WhcNMjYwMzAzMDkwMTM4WjAzMTEwLwYDVQQD
Eyg4Y2IzODlmODNmZjMwNjg0ZDMwMTRjYTgwODM1MTc4ZGMxMDE4Njk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDR9W3BoLbAlZDztyh+WnE4JXjjv
Izn6AB7PRpBRtVIKUD2tqkyamrYZieIbwr99YeXXmZ958R8x2VcSdqgwluzQE61W
c7ccW4kAf/wagUq8E0/yMGgvXJn5VHJyC6lS+gJ2InXwuObQca8HFE5kmSm8WKAm
6W3ZO/yn4iw24ld0vVSGI0Wg+NotaJWNTWYi9i0YcV0ELQ1I5ZfIRyO+QiX4jhpZ
zs0woM3UhSP1ATYizVrntRL58pfZwcK11xqj/PBZd606mRG6WbWiVk6Q+lSYXHNR
OrT8ceXOT/dcWsstC5XIRhYN4MyJ8CtHXyAFwECdlHaLbAbcWygcOvMsmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyzifg/8waE0wFMqAg1F43BAYaZMB8GA1UdIwQY
MBaAFJ6hQlIlQQyTIR0IdY/Nrw96ocyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMt
ZGMwOTY2NjY5NjA5LzEvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMtZGMwOTY2NjY5NjA5
LzEvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3S8Fp+d
ETo8PRK8/7vE7z0J6XHXsW0ggXAweKOnGBp9eIVYfnOG+rfb+slNlbostjNn4fD3
mzcaCBuY7JBXUS9MM2JeUp5L/uJGvG4zYYT1Vb5O29vu2b6z8QkNhD6oau7xrrMV
z7GcwEvAD6f5bfYQ3lejpa0PkUbJYHbGhVTcfZZWCZL2uH1eD1qTmyUVkFO47VE5
UyJO2e0sQV7oVTzUSBa2x9Yx9vUbU/SNu0H/0XyhQMei95UC7CWBuSeIOiguFxAS
YkTcUOq3polfJgeMOOKYg0BqRMyOleRArqGFf4ouImWM0QhRI9m5MIN/36ypxZcC
whZc9LF7erYsew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:42 2026 by rpki-client