
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
File: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft (raw, json)
Hash identifier: QUQfbd7sUHpjIj7Ku8pqdAlIswLbGGFbLi7WExnbxSw=
Subject key identifier: D9:B7:11:67:DE:5D:ED:B9:21:7B:87:6B:88:A3:09:6A:71:02:CD:90
Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
Certificate issuer: /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Certificate serial: 019CA8D85B7C2C47C74FA5CD3FDB7F869CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
Manifest number: 0A88
Signing time: Sun 01 Mar 2026 10:01:17 +0000
Manifest this update: Sun 01 Mar 2026 10:01:17 +0000
Manifest next update: Mon 02 Mar 2026 10:01:17 +0000
Files and hashes: 1: M-pl4LaQUItk0m-69LSvPVZA3tg.asa (hash: g9r6BDuIqIRx4/AyiydjNlAr6R2d/zmQzWOV1iyWIL4=)
2: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl (hash: LheCD7uHxMfkkM9fmRHI7YV3TxY4LGeTAURxFw5gwFg=)
3: ywBiy-o4XsBIPI_fWrb7hhnAVLE.roa (hash: kmkUiCIL5Vn2DsWe4fEj+7WvXbP95E8Y7UJwXAFQhao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:5b:7c:2c:47:c7:4f:a5:cd:3f:db:7f:86:9c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Validity
Not Before: Mar 1 10:01:17 2026 GMT
Not After : Mar 2 10:01:17 2026 GMT
Subject: CN=d9b71167de5dedb9217b876b88a3096a7102cd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:78:3c:26:d1:1d:4b:ca:b5:22:48:c4:68:
75:02:34:6e:10:0b:2b:37:ad:de:7b:c2:c6:c3:3d:
a0:83:bc:5b:bb:9b:7d:27:4f:3b:13:ab:97:13:6a:
aa:7e:78:ce:b3:82:c4:41:5a:50:22:c0:e9:dc:5d:
48:23:2f:0b:01:e7:52:d2:35:b8:8f:b6:d3:ba:9e:
a5:4b:84:45:27:a5:c5:d5:60:6f:9c:f9:1c:f3:b5:
98:99:8d:e9:d6:5d:39:71:4c:36:82:9c:4d:3e:7d:
86:50:04:40:1d:5d:d8:af:dc:74:d3:1e:3c:a8:dc:
5e:ad:a2:6b:0e:69:79:57:28:ad:65:e7:86:1b:63:
05:3d:ba:48:3f:8b:89:20:8f:75:66:e3:a7:0b:02:
11:25:0f:ab:6f:2d:e2:8d:fe:34:cc:88:5b:72:f0:
92:70:16:f6:18:f6:61:22:e2:a5:4e:07:df:b7:b8:
e3:f7:4d:5f:8a:8e:b8:37:3a:92:f9:34:2a:2f:19:
5b:46:8e:52:5a:f6:02:a4:7e:c2:b4:ca:ea:f2:19:
fc:83:d6:6f:4f:e5:10:ee:10:5a:16:5c:7e:75:ce:
c0:38:00:c1:2b:40:9a:f0:b0:6b:5c:06:81:1c:89:
9b:1c:c6:3b:05:ba:03:70:04:aa:cc:e6:7a:f6:12:
47:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B7:11:67:DE:5D:ED:B9:21:7B:87:6B:88:A3:09:6A:71:02:CD:90
X509v3 Authority Key Identifier:
keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d5:a5:a7:44:e9:d8:42:c9:22:d3:d2:2a:a7:56:a7:6f:be:
d2:43:10:6a:2a:d7:b9:f3:36:90:08:a5:e4:ce:eb:9e:e8:ad:
c7:f3:0f:72:c9:cf:73:e3:7f:7e:95:79:2f:69:36:9e:c6:b9:
04:b4:1c:0c:17:c9:fe:eb:95:3a:04:e8:ed:15:65:bc:17:7d:
17:4c:e6:52:e2:04:97:6c:a7:46:b1:c6:20:6d:c5:6c:9a:2c:
e8:49:c6:54:6e:a7:39:1a:11:7a:52:40:fd:f6:5a:03:ef:fa:
18:7e:1a:fc:61:62:c3:6b:aa:66:c2:cf:0c:d6:2d:cb:b7:bb:
73:e4:a0:58:a1:9c:48:8e:9a:c2:0f:89:98:e9:16:7d:30:d4:
05:fc:dd:e5:bf:82:e2:32:56:5f:07:51:af:d8:d9:53:b1:d0:
b7:3b:f9:2e:f2:e5:96:2e:0f:6e:40:92:dd:3b:81:38:58:bb:
71:d1:3a:79:35:a0:0f:9b:e3:06:5b:b1:44:63:60:bd:5c:0c:
92:34:82:47:9e:1b:8d:7f:e8:54:a3:8a:60:3d:e6:6a:a2:7b:
26:3e:e5:22:55:f1:3c:37:c9:bb:bb:16:22:18:31:51:7a:2a:
44:27:1f:c1:ae:78:6c:37:36:24:2f:08:18:fb:61:23:55:fd:
e2:e3:01:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:32:16 2026 by rpki-client