Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier: uZSgjd8xrwxOhBIy3nlkeVHYCnTQi36P0lncDX1h5Hs=
Subject key identifier: CA:5A:CA:2F:1C:30:D9:4F:65:9C:EC:21:9D:BA:75:21:69:DD:B1:2A
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 019D9B515A134AF754CF448C44257B4A6FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number: 1239
Signing time: Fri 17 Apr 2026 12:01:33 +0000
Manifest this update: Fri 17 Apr 2026 12:01:33 +0000
Manifest next update: Sat 18 Apr 2026 12:01:33 +0000
Files and hashes: 1: LP-962DLDMgpRMI7_mhHbAEeXHI.roa (hash: L11irqAmN9Yh9SwUVInvcZWfgHtuDzon2+axE8dju+M=)
2: OWOkZZmgGCYknyTPhxnobWYLpHI.roa (hash: bTzqDctbFjp9GWzcDrimAEL7omNgimbSYfc0EwnYgpc=)
3: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: tOJBqjBXVl2kNYWEyDg1RKst5OZRdlfJqR9e+uoGrrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:5a:13:4a:f7:54:cf:44:8c:44:25:7b:4a:6f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Apr 17 12:01:33 2026 GMT
Not After : Apr 18 12:01:33 2026 GMT
Subject: CN=ca5aca2f1c30d94f659cec219dba752169ddb12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0e:de:92:86:3d:4b:6a:b3:ce:08:44:92:6a:
bf:e6:58:42:d8:4b:4f:17:8d:a3:c4:c9:e0:fe:b8:
0c:52:01:ea:31:8b:88:48:97:8a:2a:41:b9:64:7b:
bc:1a:8a:15:da:2d:cf:14:67:e9:7e:36:fe:7b:20:
37:7c:96:fe:3b:5e:66:37:97:91:12:3b:c8:12:e3:
11:c5:98:f8:4c:7b:ca:6c:e5:f3:91:6d:b7:9e:8b:
b8:40:7d:51:c9:48:86:82:76:1e:bf:b2:b8:bf:bc:
bb:fd:67:9a:fc:66:6c:b4:95:ed:79:8e:89:34:4e:
ae:a4:c2:85:99:10:3f:05:73:ea:a3:de:0b:9e:b7:
e2:0d:6c:b2:9a:a0:18:1b:9b:27:2a:14:9d:10:06:
7e:b7:30:28:78:14:a5:a2:27:e2:f0:64:be:3d:dd:
80:2f:83:15:15:b4:fc:ec:b4:d0:29:c6:e5:1e:ee:
47:53:35:62:e6:a3:d4:61:ad:f1:1e:41:85:5f:bc:
17:98:e3:7b:14:97:29:ed:5d:ba:ee:c5:19:89:5a:
d9:8f:3e:37:76:ec:85:99:c8:a5:40:37:1a:71:15:
11:fa:a1:7e:68:91:e8:cf:2a:20:b4:1e:29:6d:c7:
78:8f:f1:4c:89:c1:8c:94:d0:69:25:d9:2f:ad:1f:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5A:CA:2F:1C:30:D9:4F:65:9C:EC:21:9D:BA:75:21:69:DD:B1:2A
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ec:bb:b0:42:13:fa:05:c5:47:db:70:31:54:52:82:73:32:
a4:ad:26:c1:19:c8:ca:ee:b5:d4:0e:d0:5f:9e:35:4e:b0:76:
a3:31:67:ac:32:12:1a:fe:68:d5:e6:0a:97:03:14:32:16:3e:
06:11:d6:ca:df:58:2b:3f:a9:51:20:1d:ce:de:93:86:3c:ef:
f8:a8:76:5a:db:e7:72:0c:22:72:f7:91:fb:f0:8f:b3:e2:aa:
ba:65:ec:d5:45:1b:ad:e7:4b:ac:2b:50:20:7c:db:9a:f8:a5:
15:34:85:da:1d:46:b0:88:30:45:89:b5:21:08:21:be:6a:b5:
e5:21:50:63:94:e6:eb:95:e2:63:26:83:c9:73:d1:3d:70:ff:
f4:2c:0e:db:25:9c:4b:b7:be:fd:3e:27:3f:b6:e7:be:93:22:
18:d7:39:8c:dc:42:cb:ae:d0:81:c7:c1:1d:62:98:b4:d2:79:
e2:dc:57:10:1a:b9:ec:e7:c5:f6:ef:84:d5:31:4d:0c:96:78:
7e:47:ae:62:c8:0b:66:e6:27:b0:39:a3:50:d4:44:64:7a:cd:
57:92:60:95:4e:e0:06:73:dd:48:89:c8:cc:cf:01:d6:12:5b:
ec:aa:e0:33:c8:9d:90:a9:6b:72:97:7f:b8:d6:df:c8:e3:18:
85:ce:08:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUVoTSvdUz0SMRCV7Sm/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYTE0MjUyMjU0MTBjOTMyMTFkMDg3NThmY2RhZjBmN2Fh
MWNjYWEwHhcNMjYwNDE3MTIwMTMzWhcNMjYwNDE4MTIwMTMzWjAzMTEwLwYDVQQD
EyhjYTVhY2EyZjFjMzBkOTRmNjU5Y2VjMjE5ZGJhNzUyMTY5ZGRiMTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ7ekoY9S2qzzghEkmq/5lhC2EtP
F42jxMng/rgMUgHqMYuISJeKKkG5ZHu8GooV2i3PFGfpfjb+eyA3fJb+O15mN5eR
EjvIEuMRxZj4THvKbOXzkW23nou4QH1RyUiGgnYev7K4v7y7/Wea/GZstJXteY6J
NE6upMKFmRA/BXPqo94LnrfiDWyymqAYG5snKhSdEAZ+tzAoeBSloifi8GS+Pd2A
L4MVFbT87LTQKcblHu5HUzVi5qPUYa3xHkGFX7wXmON7FJcp7V267sUZiVrZjz43
duyFmcilQDcacRUR+qF+aJHozyogtB4pbcd4j/FMicGMlNBpJdkvrR/GPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpayi8cMNlPZZzsIZ26dSFp3bEqMB8GA1UdIwQY
MBaAFJ6hQlIlQQyTIR0IdY/Nrw96ocyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMt
ZGMwOTY2NjY5NjA5LzEvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9hM2U0NmYtN2U1YS00NjYzLWJkNjMtZGMwOTY2NjY5NjA5
LzEvbnFGQ1VpVkJESk1oSFFoMWo4MnZEM3FoektvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+y7sEIT
+gXFR9twMVRSgnMypK0mwRnIyu611A7QX541TrB2ozFnrDISGv5o1eYKlwMUMhY+
BhHWyt9YKz+pUSAdzt6Thjzv+Kh2WtvncgwicveR+/CPs+KqumXs1UUbredLrCtQ
IHzbmvilFTSF2h1GsIgwRYm1IQghvmq15SFQY5Tm65XiYyaDyXPRPXD/9CwO2yWc
S7e+/T4nP7bnvpMiGNc5jNxCy67QgcfBHWKYtNJ54txXEBq57OfF9u+E1TFNDJZ4
fkeuYsgLZuYnsDmjUNREZHrNV5JglU7gBnPdSInIzM8B1hJb7KrgM8idkKlrcpd/
uNbfyOMYhc4I9A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:44:30 2026 by rpki-client