Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier: teA0iNrtbmv/JytC0ZCXlkQAnDGkVvJ67bvkLBK3ysY=
Subject key identifier: 41:3F:C0:7D:40:2F:ED:B0:B2:6A:30:B7:B4:5C:86:E3:DB:70:E4:A4
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 019CAAC6EC241D9E68C79CF4F8D884ED66B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 19:01:29 +0000
Manifest this update: Sun 01 Mar 2026 19:01:29 +0000
Manifest next update: Mon 02 Mar 2026 19:01:29 +0000
Files and hashes: 1: 6q8Cn_ihD-9lGbIg6cUdTCqh-Mk.roa (hash: M11btvF49Fo+UxYGyhJ5kL+ajzcw91sm72buQLeP3aw=)
2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: lp7Yi6/KSaHH02WLmKhQlBs+1bkyt9cp9uJMBGUuA0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ec:24:1d:9e:68:c7:9c:f4:f8:d8:84:ed:66:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: Mar 1 19:01:29 2026 GMT
Not After : Mar 2 19:01:29 2026 GMT
Subject: CN=413fc07d402fedb0b26a30b7b45c86e3db70e4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:8e:5d:ff:a9:1f:a8:ca:93:f9:65:86:8c:
a8:7c:e9:94:69:f0:a7:37:6e:9a:16:2e:f6:5f:b2:
08:76:c2:96:a3:0b:16:db:e9:b7:ce:ee:ae:35:d7:
73:57:76:40:6c:21:19:27:62:ad:a0:af:7f:ae:2f:
ee:60:c3:a0:29:ca:b2:b8:b2:9b:3f:1d:1a:96:42:
4d:b0:8f:ec:15:65:14:97:43:b8:91:a3:cb:c0:23:
92:84:32:68:b7:16:d3:57:b1:05:ab:36:2a:ba:40:
7d:1f:42:15:a5:5c:e9:01:ee:39:eb:10:91:0d:47:
1d:0f:d9:7b:45:b7:73:04:4e:80:fb:c6:2b:06:95:
79:71:e6:2d:0d:47:68:96:ae:b7:cc:f9:22:8a:83:
aa:ae:7a:67:2a:5b:28:f3:7f:9c:4b:1b:33:0d:2a:
04:60:69:2c:6f:17:db:cd:a7:37:88:db:d2:03:0c:
dd:94:fa:9b:be:9c:9b:d2:e6:dc:b3:79:47:64:76:
8a:f5:11:3c:4a:58:60:9a:d0:fa:5d:f5:04:51:54:
d1:b3:28:87:9c:6a:f2:a8:a1:87:57:98:c8:4f:dd:
9f:c1:c2:a3:84:d2:a5:40:4c:f4:e5:1b:2e:85:5d:
a3:2f:12:91:89:12:76:ab:a6:06:98:11:83:e5:44:
eb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3F:C0:7D:40:2F:ED:B0:B2:6A:30:B7:B4:5C:86:E3:DB:70:E4:A4
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9d:b7:f3:63:41:5c:bb:5c:5f:46:4e:fc:48:a7:af:24:18:
2f:8e:a6:e6:c4:96:bd:69:a1:f9:83:30:5d:a3:ff:7e:f0:fe:
65:a1:84:b6:22:6b:5d:f2:3d:5c:03:ee:e6:06:c8:6f:24:1e:
11:60:ac:c8:fa:9b:18:9f:73:28:92:74:8d:fa:63:53:5d:36:
53:19:00:3f:17:93:1f:7f:72:e2:52:a4:2e:33:0b:f8:99:95:
e7:e2:4e:94:30:51:58:d9:93:24:c8:ba:69:d3:d7:8b:08:1c:
11:95:78:19:75:86:f5:2a:d1:a3:ed:5d:87:92:67:06:94:1c:
2f:03:46:a3:32:b3:d8:ba:70:88:76:c1:a3:ac:8c:03:fa:ba:
83:81:98:b8:22:11:a5:6d:44:91:76:4f:25:9a:a4:60:bd:c8:
5b:ac:ca:ea:69:c8:5a:76:7e:f8:96:8f:ca:15:ca:7b:5d:0c:
b7:72:0f:1f:be:b4:32:d0:d6:eb:0d:c7:e2:d5:c6:62:53:58:
34:a2:84:84:69:dc:0f:f5:2c:74:7f:fe:dd:1d:a5:d9:14:1a:
4e:b7:e4:c3:e1:f9:a3:9a:8c:5c:1c:63:4c:f9:97:a6:9f:43:
e9:a1:ee:10:e4:60:46:94:59:07:59:56:c7:13:b7:14:ba:4a:
63:18:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:27 2026 by rpki-client