Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
File: nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json)
Hash identifier: ACg4EdEYvqaYX0gJQZhMj7leFds+JQWOSKOZv9me+74=
Subject key identifier: 14:D8:CE:A6:E0:E6:B4:D6:20:57:76:99:F1:05:32:4F:3F:2A:C6:B9
Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Certificate serial: 019CAD5941D15FF9355F8B5616494167A9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 07:00:33 +0000
Manifest this update: Mon 02 Mar 2026 07:00:33 +0000
Manifest next update: Tue 03 Mar 2026 07:00:33 +0000
Files and hashes: 1: hmbiAgILODH-19HoC5IuydkCSIc.roa (hash: QWw9cp6g2MsHGOQThqrJzqfLHaqPLS5ug0EanzJlcKA=)
2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: eBJ/KNQE2mLMzHKfneAuwEh87O+RglVdT63w9YGDs1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:41:d1:5f:f9:35:5f:8b:56:16:49:41:67:a9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Validity
Not Before: Mar 2 07:00:33 2026 GMT
Not After : Mar 3 07:00:33 2026 GMT
Subject: CN=14d8cea6e0e6b4d620577699f105324f3f2ac6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:48:8f:1c:46:e0:9d:b2:a1:df:e9:a2:59:
42:2c:ea:05:b1:6d:70:36:54:f4:2d:d5:28:e9:8d:
7b:34:31:24:26:9e:54:b9:57:4b:38:73:5e:f9:fd:
e9:ea:61:ba:0a:8c:71:a6:09:a8:d3:d1:52:02:d0:
f6:cc:98:88:74:ab:85:90:14:80:2b:58:03:0d:79:
35:e2:03:3e:bd:f2:f7:31:e9:bc:30:cb:6a:c8:5c:
14:bf:6b:97:14:f9:12:02:9c:84:2e:11:1b:75:30:
2f:aa:1c:4c:e2:67:ab:1c:48:06:4a:61:d5:b7:f2:
75:53:4d:4a:07:d4:8f:56:0c:ac:be:95:67:fd:eb:
72:fb:65:6d:d0:8f:8d:37:e0:49:c9:de:2b:1b:ee:
23:c0:1e:71:20:be:d4:be:14:c6:3b:63:52:21:69:
de:df:6a:f9:37:51:10:e0:ce:c0:b5:01:55:db:68:
19:62:71:c6:d2:6d:7f:6f:31:06:ec:10:4b:f0:f8:
8a:9d:36:43:8e:b4:83:1a:5d:a7:a9:3c:25:39:61:
8b:54:3d:a6:6e:77:42:8a:1c:48:e0:88:8d:be:13:
af:4e:85:99:e3:02:62:90:2d:c1:2d:db:c1:2b:a3:
26:9a:3b:b1:e0:41:3f:56:db:7a:fb:27:43:67:cd:
fe:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D8:CE:A6:E0:E6:B4:D6:20:57:76:99:F1:05:32:4F:3F:2A:C6:B9
X509v3 Authority Key Identifier:
keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5c:22:4a:a6:b6:d4:4d:0c:82:bc:6b:9b:ec:ee:02:12:94:
fd:4d:f1:4a:65:f2:9a:57:36:50:1e:8f:16:0a:28:dd:42:91:
f5:ad:1f:37:26:0e:2d:6d:b8:07:42:df:31:fa:8a:6b:0f:dd:
c0:7e:3d:c8:a0:3a:46:73:16:49:0a:1c:48:4e:9f:56:8a:cc:
af:16:ef:6a:cc:f9:ca:84:75:21:92:ca:f3:2d:d7:1d:28:3a:
40:8f:4e:27:1d:6a:6e:38:b7:bc:50:8e:18:28:48:cd:15:0d:
c2:17:09:bd:76:6a:d4:a9:aa:36:f4:53:86:6e:3c:ab:e0:71:
26:54:27:89:f9:b6:6a:53:47:1f:d1:0b:b5:e8:2e:a5:00:ef:
ca:13:fa:2e:2d:e8:cc:14:44:ea:aa:ba:ce:c2:d0:91:3e:49:
ea:21:bc:e0:e7:97:12:b8:51:6f:6b:6b:5b:7d:31:b0:c4:f7:
0c:2b:d1:bc:88:7d:22:8e:56:1f:32:d8:96:fb:c2:f2:4f:68:
4e:97:f3:01:5b:74:33:b4:22:95:d0:87:8a:5e:2b:70:23:ef:
11:4d:29:8c:a0:35:70:79:f8:c4:0f:77:d7:26:35:f5:d0:cf:
c9:29:82:75:29:ff:d6:6c:4f:e9:b5:44:b8:3d:56:06:61:cc:
0f:67:cc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:17:49 2026 by rpki-client