Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
File: nrsWvFz7nr7DQthaRqotzsdZnHQ.mft (raw, json)
Hash identifier: 52p2Aomc0RN+l2KbgEtqdf98fyadCupsBREQv5KOy9M=
Subject key identifier: 34:41:F8:42:9D:D9:0C:CA:02:4D:9D:CA:65:74:7D:4E:53:6E:E7:CA
Authority key identifier: 9E:BB:16:BC:5C:FB:9E:BE:C3:42:D8:5A:46:AA:2D:CE:C7:59:9C:74
Certificate issuer: /CN=9ebb16bc5cfb9ebec342d85a46aa2dcec7599c74
Certificate serial: 01A0E174E3559DD110C114469783760EAF4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:02:08 +0000
Manifest this update: Sun 27 Sep 2026 06:02:08 +0000
Manifest next update: Mon 28 Sep 2026 06:02:08 +0000
Files and hashes: 1: H27MD2CieLZp0Gd96y24V6eN1uk.roa (hash: v0jt11oYg3Kn2bNdyfMBSWovTVFN50C6d1JZmMFdqoQ=)
2: nrsWvFz7nr7DQthaRqotzsdZnHQ.crl (hash: /gveC7pGFDKxcVoY7qRMb1qZx3N1tYbMYWA5LG3sZns=)
3: sc2FhAecUe53TLCvtBXPAlXJXIM.roa (hash: E7Uzf+BTtrQ4zwZ86xm4BEd5CWBMA2VIf5T230VCzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:e3:55:9d:d1:10:c1:14:46:97:83:76:0e:af:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebb16bc5cfb9ebec342d85a46aa2dcec7599c74
Validity
Not Before: Sep 27 06:02:08 2026 GMT
Not After : Sep 28 06:02:08 2026 GMT
Subject: CN=3441f8429dd90cca024d9dca65747d4e536ee7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:a3:7e:0f:e5:5a:63:40:1f:b0:b1:58:ac:
75:c9:e2:49:72:fc:65:85:27:04:56:18:93:93:72:
fb:9d:6f:e5:73:3d:0f:c9:49:34:85:1b:82:d3:7c:
e7:9a:dd:67:c4:aa:f5:08:cc:af:cd:1d:d8:06:f9:
89:2d:e6:a3:d5:83:0e:c3:fc:ce:99:ca:c6:b3:5d:
ec:37:eb:90:87:97:ec:bf:12:ba:af:7b:6e:a4:e9:
7a:fc:4b:63:ab:67:af:fa:35:09:06:d8:d1:3f:0a:
26:e7:0b:42:fd:4e:4b:8b:3a:ee:82:57:3c:c5:26:
b5:13:31:1c:88:92:87:7a:5b:9f:68:a6:1c:a1:0c:
3a:ce:0e:15:6c:e6:41:a7:5f:5c:aa:cc:82:b0:ef:
67:35:c1:60:e0:c1:77:24:f8:ac:cd:12:ab:d2:bd:
d8:48:4b:41:9b:b1:1c:9c:33:86:ef:7d:d6:aa:8e:
38:68:27:5f:e3:00:99:cd:e0:dc:9d:9b:63:88:3c:
c0:2a:bb:cb:e8:37:05:2c:7c:e0:ff:1b:79:1e:be:
3b:c0:0c:f2:30:d7:ac:42:2f:34:71:98:6d:ce:36:
45:4c:f5:b2:cb:40:bd:c6:71:ae:9c:d1:7c:cd:21:
d8:af:8e:40:9b:11:1d:4c:3b:7b:e5:ee:ee:90:1d:
b3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:41:F8:42:9D:D9:0C:CA:02:4D:9D:CA:65:74:7D:4E:53:6E:E7:CA
X509v3 Authority Key Identifier:
keyid:9E:BB:16:BC:5C:FB:9E:BE:C3:42:D8:5A:46:AA:2D:CE:C7:59:9C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:07:87:e7:53:9c:03:b0:48:59:d9:bb:a4:78:8d:c0:b5:28:
73:29:e3:8d:98:cd:25:a3:f3:e8:fc:4a:67:10:68:2d:77:af:
f4:31:6e:5e:71:f3:90:90:1a:fe:a6:7a:58:8c:c3:18:41:b3:
f7:b6:9b:e4:92:5d:cf:7e:f5:31:79:20:f0:ee:6d:ac:ed:84:
72:2a:fc:da:91:1e:e1:27:46:e7:d3:52:fa:59:dc:0d:4c:05:
22:ca:2c:11:26:6b:f7:07:ab:22:f7:d2:61:3b:4e:f2:24:2b:
df:d4:df:98:75:d0:07:13:0f:19:0e:f5:aa:fd:cb:80:2a:47:
f3:c9:da:bd:58:ff:ee:e0:11:e3:80:43:71:c8:95:ec:da:d9:
77:38:16:4e:ba:28:f5:ec:20:4e:2c:d0:37:c3:fc:0b:48:0a:
c9:03:6f:6b:e5:a0:f5:e5:6e:3d:99:45:c6:4b:bb:95:27:6f:
a1:4b:0f:9e:cd:01:fc:9e:dd:90:15:26:c3:c3:e6:3c:74:03:
e0:7f:c2:bd:93:bc:18:34:d3:4b:ff:bf:35:7a:a0:e8:a4:31:
77:01:1d:85:bc:fe:9f:42:24:f1:b6:0a:2c:cc:4c:34:40:1a:
5f:dd:56:8d:f8:12:84:dc:ef:7d:81:7d:6a:f6:23:a9:f2:19:
fe:88:fa:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhdONVndEQwRRGl4N2Dq9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYmIxNmJjNWNmYjllYmVjMzQyZDg1YTQ2YWEyZGNlYzc1
OTljNzQwHhcNMjYwOTI3MDYwMjA4WhcNMjYwOTI4MDYwMjA4WjAzMTEwLwYDVQQD
EygzNDQxZjg0MjlkZDkwY2NhMDI0ZDlkY2E2NTc0N2Q0ZTUzNmVlN2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Jqjfg/lWmNAH7CxWKx1yeJJcvxl
hScEVhiTk3L7nW/lcz0PyUk0hRuC03znmt1nxKr1CMyvzR3YBvmJLeaj1YMOw/zO
mcrGs13sN+uQh5fsvxK6r3tupOl6/Etjq2ev+jUJBtjRPwom5wtC/U5Lizruglc8
xSa1EzEciJKHelufaKYcoQw6zg4VbOZBp19cqsyCsO9nNcFg4MF3JPiszRKr0r3Y
SEtBm7EcnDOG733Wqo44aCdf4wCZzeDcnZtjiDzAKrvL6DcFLHzg/xt5Hr47wAzy
MNesQi80cZhtzjZFTPWyy0C9xnGunNF8zSHYr45AmxEdTDt75e7ukB2zXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRB+EKd2QzKAk2dymV0fU5TbufKMB8GA1UdIwQY
MBaAFJ67Frxc+56+w0LYWkaqLc7HWZx0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJzV3ZGejducjdEUXRoYVJxb3R6c2RabkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMt
NGNlNDc3ZGJiNDA3LzEvbnJzV3ZGejducjdEUXRoYVJxb3R6c2RabkhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMtNGNlNDc3ZGJiNDA3
LzEvbnJzV3ZGejducjdEUXRoYVJxb3R6c2RabkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwQeH51Oc
A7BIWdm7pHiNwLUocynjjZjNJaPz6PxKZxBoLXev9DFuXnHzkJAa/qZ6WIzDGEGz
97ab5JJdz371MXkg8O5trO2Ecir82pEe4SdG59NS+lncDUwFIsosESZr9werIvfS
YTtO8iQr39TfmHXQBxMPGQ71qv3LgCpH88navVj/7uAR44BDcciV7NrZdzgWTroo
9ewgTizQN8P8C0gKyQNva+Wg9eVuPZlFxku7lSdvoUsPns0B/J7dkBUmw8PmPHQD
4H/CvZO8GDTTS/+/NXqg6KQxdwEdhbz+n0Ik8bYKLMxMNEAaX91WjfgShNzvfYF9
avYjqfIZ/oj6vA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:55:47 2026 by rpki-client