Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier: lG/gV7xzoPSaS7uR2kmjqd7ndRi8+4JIKc2tJT92fH4=
Subject key identifier: E9:E9:D3:F7:CB:20:23:9E:2E:25:EF:97:B8:A1:1F:0C:45:B3:F6:FF
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer: /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial: 019ED42ADAAA68251D9844BD0854D5AF9702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number: 12DB
Signing time: Wed 17 Jun 2026 06:00:38 +0000
Manifest this update: Wed 17 Jun 2026 06:00:38 +0000
Manifest next update: Thu 18 Jun 2026 06:00:38 +0000
Files and hashes: 1: LP-962DLDMgpRMI7_mhHbAEeXHI.roa (hash: L11irqAmN9Yh9SwUVInvcZWfgHtuDzon2+axE8dju+M=)
2: OWOkZZmgGCYknyTPhxnobWYLpHI.roa (hash: bTzqDctbFjp9GWzcDrimAEL7omNgimbSYfc0EwnYgpc=)
3: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: 5pdOpFLLO2kNojYRLqo+c6odf05SaD84dFOf3pXoi6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2a:da:aa:68:25:1d:98:44:bd:08:54:d5:af:97:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Validity
Not Before: Jun 17 06:00:38 2026 GMT
Not After : Jun 18 06:00:38 2026 GMT
Subject: CN=e9e9d3f7cb20239e2e25ef97b8a11f0c45b3f6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:8a:ed:d5:9d:0f:d9:dc:75:76:24:1a:49:
f3:f2:f7:6d:1e:5c:39:39:c1:d1:fd:a4:e7:b8:7a:
b2:ab:7e:dc:ea:6d:aa:40:6a:f9:e1:e8:c6:d3:14:
d8:97:38:e7:c3:85:90:f0:36:ee:dc:2c:d8:ba:48:
2f:5c:a6:54:e1:b6:73:c1:ca:2c:c1:a9:3e:db:6d:
e6:a2:84:80:5d:ee:69:25:56:f2:7f:dd:3f:ba:16:
c9:64:f7:4f:36:f8:e8:35:3f:7c:76:22:69:04:18:
97:40:2a:8d:8d:25:a6:84:02:65:58:23:92:ec:1a:
bb:ac:8b:0e:3a:8c:a0:00:d2:47:cf:da:34:1f:a3:
56:c7:bb:86:33:fb:03:a3:9c:4e:c8:18:d2:64:d4:
59:a9:d5:e6:dd:16:a0:f8:c9:9a:10:50:c3:f5:9d:
f7:55:37:18:03:13:fa:43:f1:b0:d7:29:b4:13:ad:
78:03:dc:22:fb:55:38:57:44:2d:43:27:e6:20:9c:
f2:f0:6d:5b:3b:8e:dd:53:f4:a8:7f:ee:52:b5:bd:
c9:e4:fc:08:3a:76:c4:c5:1e:ab:28:b7:4a:14:07:
75:17:a5:fd:63:ae:c1:7a:bb:6b:8a:37:32:cb:91:
1e:37:25:b1:79:33:e5:64:64:05:4c:f9:a3:02:ef:
ac:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E9:D3:F7:CB:20:23:9E:2E:25:EF:97:B8:A1:1F:0C:45:B3:F6:FF
X509v3 Authority Key Identifier:
keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:49:b5:95:02:78:47:1a:61:8c:5e:75:4f:ee:f1:e1:fe:b4:
7f:15:b3:cf:59:bd:7a:b4:7e:bd:c2:94:e2:79:90:cd:6f:62:
79:eb:d1:1a:df:8d:a4:f0:33:62:8e:2a:01:e4:02:c9:07:c1:
e2:e7:54:61:8e:97:32:df:cc:a8:87:05:55:f6:96:0d:b1:71:
8e:aa:51:fb:36:e6:64:2c:92:9a:bf:27:eb:32:bf:04:b3:84:
89:02:cb:9a:7a:c8:3d:68:9e:be:42:73:7a:83:04:1b:e7:bf:
f3:8b:83:b4:ee:3a:6e:52:d1:4f:fc:bf:6c:d1:ba:1b:e7:10:
ec:5c:65:4b:e0:fd:a0:ea:5b:52:ad:e5:2d:7e:f3:47:5a:bd:
d6:c8:66:bf:9f:a3:d4:28:48:50:86:01:4a:65:d8:ff:52:19:
48:bf:87:b8:4f:7a:2e:ee:44:98:51:58:96:8a:e3:3a:82:9c:
b2:9d:98:b0:05:e8:00:f9:c6:10:3b:2f:17:c9:47:5d:ed:41:
cd:74:39:b4:60:ae:3d:3b:0c:22:72:43:fd:a2:df:9a:40:a8:
9b:7f:bd:32:bf:b0:f4:a9:65:87:ff:fe:50:83:bb:ec:f6:9f:
e3:ae:4a:92:c7:e0:80:87:55:c4:cc:48:ea:e6:90:98:28:3e:
90:36:e0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:13:40 2026 by rpki-client