Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File: nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier: 7OKYv8sgEceJr1HjtxgsfBD8Ynoe+9L17TLoCGTkkQ4=
Subject key identifier: D4:31:9D:B5:6D:88:20:27:45:C4:16:9D:2D:B4:38:BF:15:D1:38:2D
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer: /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial: 01A0EA090B16AF72CE4F50BC22C99864D893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number: 1A0B
Signing time: Mon 28 Sep 2026 22:00:56 +0000
Manifest this update: Mon 28 Sep 2026 22:00:56 +0000
Manifest next update: Tue 29 Sep 2026 22:00:56 +0000
Files and hashes: 1: 6q8Cn_ihD-9lGbIg6cUdTCqh-Mk.roa (hash: M11btvF49Fo+UxYGyhJ5kL+ajzcw91sm72buQLeP3aw=)
2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: TUswOJ/lwCjeDwd2iE0VYQktf2KkfAa77i+1N+R1iCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:0b:16:af:72:ce:4f:50:bc:22:c9:98:64:d8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Validity
Not Before: Sep 28 22:00:56 2026 GMT
Not After : Sep 29 22:00:56 2026 GMT
Subject: CN=d4319db56d88202745c4169d2db438bf15d1382d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1c:dd:cb:47:75:e3:23:e0:a2:47:7a:5b:e1:
59:19:c3:b8:8d:ba:b7:00:07:8a:c8:72:27:53:b5:
83:13:a0:98:48:2f:9a:3b:ed:fa:f2:48:74:54:a5:
71:ed:e1:b1:19:8a:9b:66:c6:be:d1:96:2c:a5:72:
fc:2a:59:ec:fe:07:90:15:23:96:f3:f3:ff:07:4f:
77:cd:58:5f:7a:4c:51:e9:42:97:58:42:42:c0:b9:
68:74:e8:92:a4:c0:2a:af:d8:fe:8e:42:09:45:cb:
4f:ce:33:8d:33:14:3a:d7:3a:2b:3b:a5:7d:af:f2:
dc:ba:16:f7:cc:21:ee:b3:fa:ff:cc:cc:bd:e3:e1:
24:e8:ea:d0:c6:18:fa:98:15:0b:f2:5e:2e:b2:cc:
b7:63:d0:f3:11:d5:36:5d:81:73:77:11:27:e7:93:
bb:c4:0b:4a:00:a4:f4:a2:63:c7:d4:d9:1b:34:5c:
3e:03:23:98:82:a7:29:26:76:54:a4:27:f0:5a:3d:
c7:2d:fa:13:19:28:b4:39:ca:e4:8d:ab:44:a8:e0:
fd:df:2b:44:32:ce:e3:92:f4:ea:aa:44:42:79:13:
9c:76:09:f0:16:2f:ef:a4:08:2b:80:28:f9:32:b6:
3c:ed:fd:11:be:a8:c5:d3:7b:35:0c:3b:19:28:10:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:31:9D:B5:6D:88:20:27:45:C4:16:9D:2D:B4:38:BF:15:D1:38:2D
X509v3 Authority Key Identifier:
keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:7f:4e:86:ce:6b:62:4c:c5:c5:88:a3:a5:71:79:94:6d:68:
6d:42:a9:20:13:1a:13:27:b1:09:f8:a0:44:2a:7a:00:0b:5a:
d7:06:b5:38:7e:73:88:81:97:2f:20:f7:17:a1:b6:1b:81:d8:
df:b6:51:c7:7b:d0:14:01:8b:b1:40:ba:bf:70:d8:b3:d2:59:
3a:ae:30:74:90:84:af:24:7e:69:4e:56:d9:56:c8:f0:ba:bf:
65:5d:19:08:ed:c8:5a:09:bf:b0:62:46:da:cc:19:a2:53:fc:
4a:16:bf:69:ab:0b:54:ce:2e:fa:de:d6:a8:0c:18:23:78:d4:
e4:0e:c9:f1:fb:e9:9c:5a:1d:0c:51:49:16:71:99:af:d7:f5:
0f:da:e8:a1:f1:1c:d5:f1:8c:da:fe:55:31:c5:35:95:3a:52:
53:67:ad:22:88:20:ff:9e:df:e1:e4:fb:0a:f1:cf:6b:24:d7:
a1:b0:4c:ab:0e:68:eb:10:70:79:7b:b7:0a:77:11:b0:68:40:
76:d3:f5:8d:4b:15:7f:b6:38:dc:1c:3a:24:61:90:20:74:17:
6d:84:bd:4d:3c:b0:e8:f0:3e:90:13:7d:31:de:56:c8:1d:7c:
e6:8b:72:d8:b5:59:bb:32:2b:5a:36:8e:84:91:7a:64:5c:dd:
be:7e:7f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:21:45 2026 by rpki-client