
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
File: NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft (raw, json)
Hash identifier: wF72oNfxzaq+r9HR1CB/tDvQPgFchG0UTajB1YXD3ZA=
Subject key identifier: 59:78:0B:B9:0B:0D:BC:8D:3A:FC:1F:EE:97:36:E0:27:2D:45:E2:6C
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 01A0D5394768D0EA8DF0B729D16B5A9508E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
Manifest number: 0171
Signing time: Thu 24 Sep 2026 21:01:35 +0000
Manifest this update: Thu 24 Sep 2026 21:01:35 +0000
Manifest next update: Fri 25 Sep 2026 21:01:35 +0000
Files and hashes: 1: 27nZxtjqrhsKmeNau6Mu8UTu9qg.roa (hash: GU3wDMHTiFASdAwvMqW0bfWi5rSGbCrCyQ5R6PuT9c4=)
2: 3hGblXZHkfF0d3EHYGbTWnSiNQA.roa (hash: QJIZI7te5M7LXWjeDg4x4g3m7iNaESqw8YCnOYlGo0M=)
3: 6Lv9xgBswnbY_FNskzfEcq59C1A.roa (hash: CzGHB25B2Y3HWvTLL1QHf1CCzXJg+G/vhxr8ewgTUwI=)
4: J8Nu292jWRKPjq7q0neCyO9_j2A.roa (hash: s5eBVw7COyG6QNqTi8sSQVL4i8mVKcCaq0WtADvLryU=)
5: KYIOb7iz6nFpO-VncG2SvHnAuoA.roa (hash: 23ReOjB4kGN1q/sNfdaF2PaXOtnQc0L4ZtZOtPEv92k=)
6: Mim9CmMQR3ozLGCE-Tgf11KxorA.roa (hash: dOIzZQ99FYcO+06vOL0/z+/bioujv1F4xxKsnMDaHCA=)
7: NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl (hash: SCvVpUxEm8G+UuZ5gSMWxXRhvLnzHlOfPY5FDMaHpJg=)
8: QSu8RTBS_GeHC7vNPlkN8FoxyTA.roa (hash: HcKvfKMp+RjVDwb3JERnNNpq1J/LEdftWRuUkuEkLrQ=)
9: R003eJ685xL4vI7Rx7erEgImXsE.roa (hash: Kn+zWzH0TeYwPc5g0P4isWFRbz2/1fuiQuV46eT09Fw=)
10: RvuwBuE5RLjqU9ItKhg6fPHE9TM.roa (hash: ds+euKfxTfF7hND8wtNeMyTwF3e0No2ssJQRbr3zP5Y=)
11: Sx3lD8t_1d5XN5YvVg5ooDUsYHY.roa (hash: MVIq2OMyU9/DCJe+SAOqCNWgxjau22pregso3ngLxcc=)
12: Ud21UgAkszMTN1VkhwH7y54HQls.roa (hash: TDiL5RYpZd5bkb4q9qfKhjcV0EPJz6ihmUZhWMEEhwA=)
13: Vc48rKL3rg5h-ZOkYPMqFhAt-nY.roa (hash: kggOhBvOEFBZS+rMyd+otPlcng38mjnoQvO7twIO76Q=)
14: d4OSwoXQlpA_V2IlmsumrCVG0eA.roa (hash: GrvCqW7XhLqAfO+TfzgF+JV4za+LPwgcaVQvzgfpvP0=)
15: e_cXOrDWwR3TeN2c1Kr1PKuViBk.roa (hash: kqkj5A92+iThaqjqDCNYYmFmC0iddYkUAgisdKJ0pF4=)
16: h0HXUbU7K9M7vsEH0MTzY9tBW24.roa (hash: KinjtYYkU6EBuqBQ4h9VrRMUF1Ql7tgkKGymIZ7XUvg=)
17: jRdAeFmN0KBRFg-nGD-IJy-4ZJg.roa (hash: nQMC3hCRmQ4D1KBdRyKzmttIb877jjd5D7xgwAT2WdI=)
18: mof6xABa_nGqS79lZW3MEn80zPI.roa (hash: GWP6CyDwsuU6R2JSLP0qzlZxMJto6qHE9P2Mbf7sWk8=)
19: nI1n5z6H4QpqTIdE1CU51Zoj8Ug.roa (hash: pekKDXCoFGjGVOlGNhx761IGJHBeUQoSqOrucczOuwM=)
20: oiFGNGuEBoRxwV4tr_6ltQZUOyM.roa (hash: hE47UOJjAbNPBn6kqwspGJbsZURO2T/edGWHIkT04NQ=)
21: yXtKJtXl1GGBlYxXvK8ql3NPq6o.roa (hash: tIwicRRSMx21IewgpFZvBk4WqVp51kxIDCo1e8mwH2Y=)
22: y_FCqy7P7gN_dqUlYOs7ITZzZm0.roa (hash: iKfJV06hDO3bUGR/X++44B2zKvdsDsdX0WIZV7QDd4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:47:68:d0:ea:8d:f0:b7:29:d1:6b:5a:95:08:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Sep 24 21:01:35 2026 GMT
Not After : Sep 25 21:01:35 2026 GMT
Subject: CN=59780bb90b0dbc8d3afc1fee9736e0272d45e26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:87:85:ae:4a:f6:36:01:7d:71:74:84:ef:
46:57:a8:3a:2c:ff:91:00:63:8d:32:e3:b8:b0:34:
f3:71:a9:22:50:d5:5b:ba:19:21:cd:7d:f9:e4:fc:
9b:4e:54:47:1e:1c:37:16:a0:02:b0:02:96:7a:08:
53:bb:9c:dc:f2:c9:e2:1f:30:01:7f:6f:61:5a:8f:
17:69:0d:f2:e1:1f:c1:ad:6e:27:5d:b1:e4:4a:1b:
27:de:79:f3:d3:00:18:d6:27:e2:f6:1d:49:bc:8a:
f2:ca:ba:02:c0:1b:8c:8a:d3:d9:ac:31:dd:d7:97:
bc:66:82:b9:ab:84:20:ff:06:c8:89:6c:21:a7:ab:
d0:48:42:07:a2:a1:81:2a:74:a6:89:e0:97:1d:2d:
2f:71:8a:93:81:59:f5:e1:bb:0b:4b:98:5e:84:3c:
5a:70:c9:97:1a:fd:28:31:6d:dc:a2:b2:a3:a0:ff:
37:9d:09:5b:3b:b4:54:b4:12:23:4e:4d:16:23:9a:
4e:16:2b:d7:a5:46:e3:54:4b:2b:44:32:05:90:bc:
09:98:fd:72:0e:36:2a:12:75:bd:e7:cf:10:15:84:
22:be:02:43:62:c9:85:b3:70:3f:f8:e4:1c:83:7b:
47:30:c4:af:79:db:b3:94:35:9f:6f:ff:17:d8:63:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:78:0B:B9:0B:0D:BC:8D:3A:FC:1F:EE:97:36:E0:27:2D:45:E2:6C
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:79:d7:55:cd:58:9f:e9:7c:3d:1c:62:da:af:db:26:91:89:
52:0b:0a:75:c7:e5:28:bf:63:22:92:b3:21:8d:fb:4f:95:a6:
e5:fa:44:19:09:14:d0:de:23:39:11:21:12:7a:41:13:33:bd:
db:ca:75:6d:ef:aa:11:74:cb:e5:14:f1:be:ac:ea:92:3e:48:
99:b6:f0:3b:ba:7c:26:2a:0a:1e:75:ec:98:0b:3f:17:49:43:
b8:06:7d:41:14:62:cc:0a:4d:19:cf:44:c3:ed:ed:03:d6:aa:
c7:dc:30:14:b3:71:fd:0e:ce:2a:81:f7:4c:25:58:19:0d:80:
3b:88:4a:5c:a8:e6:97:93:56:c6:11:5b:68:47:70:10:de:a5:
c6:27:80:eb:dc:29:09:82:b3:8b:5d:ac:7a:d1:5c:e6:5b:c9:
8f:2f:5e:74:79:1c:59:88:37:46:fa:20:55:2f:ff:81:50:0c:
42:a3:06:dd:50:f6:b7:9b:1b:9e:b7:43:b8:c2:82:71:48:1e:
a3:41:60:ab:8d:3e:85:a6:59:95:15:c4:8d:4e:1d:74:9e:53:
05:e4:7c:03:cf:e6:94:92:54:14:de:99:33:60:84:93:aa:5f:
d6:8d:3e:99:46:73:49:f2:2f:a2:74:8b:c8:d3:a6:b0:46:39:
4c:6d:e6:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVOUdo0OqN8Lcp0WtalQjlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NzE2MDE4MTczOTU2OGU1NzhlMWI1ZjU3OTc2YTYwMzk4
MDYyZTYwHhcNMjYwOTI0MjEwMTM1WhcNMjYwOTI1MjEwMTM1WjAzMTEwLwYDVQQD
Eyg1OTc4MGJiOTBiMGRiYzhkM2FmYzFmZWU5NzM2ZTAyNzJkNDVlMjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3SHha5K9jYBfXF0hO9GV6g6LP+R
AGONMuO4sDTzcakiUNVbuhkhzX355PybTlRHHhw3FqACsAKWeghTu5zc8sniHzAB
f29hWo8XaQ3y4R/BrW4nXbHkShsn3nnz0wAY1ifi9h1JvIryyroCwBuMitPZrDHd
15e8ZoK5q4Qg/wbIiWwhp6vQSEIHoqGBKnSmieCXHS0vcYqTgVn14bsLS5hehDxa
cMmXGv0oMW3corKjoP83nQlbO7RUtBIjTk0WI5pOFivXpUbjVEsrRDIFkLwJmP1y
DjYqEnW9588QFYQivgJDYsmFs3A/+OQcg3tHMMSveduzlDWfb/8X2GOk6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFl4C7kLDbyNOvwf7pc24CctReJsMB8GA1UdIwQY
MBaAFDZxYBgXOVaOV44bX1eXamA5gGLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wNDVmNzAtOWVhNS00MmEzLTg3ODYt
ZWU4Y2ZkZDJlZDk0LzEvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wNDVmNzAtOWVhNS00MmEzLTg3ODYtZWU4Y2ZkZDJlZDk0
LzEvTm5GZ0dCYzVWbzVYamh0ZlY1ZHFZRG1BWXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXnXVc1Y
n+l8PRxi2q/bJpGJUgsKdcflKL9jIpKzIY37T5Wm5fpEGQkU0N4jOREhEnpBEzO9
28p1be+qEXTL5RTxvqzqkj5ImbbwO7p8JioKHnXsmAs/F0lDuAZ9QRRizApNGc9E
w+3tA9aqx9wwFLNx/Q7OKoH3TCVYGQ2AO4hKXKjml5NWxhFbaEdwEN6lxieA69wp
CYKzi12setFc5lvJjy9edHkcWYg3RvogVS//gVAMQqMG3VD2t5sbnrdDuMKCcUge
o0Fgq40+haZZlRXEjU4ddJ5TBeR8A8/mlJJUFN6ZM2CEk6pf1o0+mUZzSfIvonSL
yNOmsEY5TG3mMw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:50:25 2026 by rpki-client