Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.mft
File: _NWPqid85i17RmD_FIja0mxSR8s.mft (raw, json)
Hash identifier: TCInXzauOTgqsyuYgyZd32auJ1DpkYz27V3Yth5C5zo=
Subject key identifier: 18:75:65:86:81:C7:52:78:6D:6C:86:CF:17:41:00:0B:6D:90:84:A1
Authority key identifier: FC:D5:8F:AA:27:7C:E6:2D:7B:46:60:FF:14:88:DA:D2:6C:52:47:CB
Certificate issuer: /CN=fcd58faa277ce62d7b4660ff1488dad26c5247cb
Certificate serial: 01A0DD60E68D664DDF41CDBB2D48AAF0FCDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NWPqid85i17RmD_FIja0mxSR8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.mft
Manifest number: 2A
Signing time: Sat 26 Sep 2026 11:01:50 +0000
Manifest this update: Sat 26 Sep 2026 11:01:50 +0000
Manifest next update: Sun 27 Sep 2026 11:01:50 +0000
Files and hashes: 1: WxxM6MgRQuQCHwZfkRvOLW-3RUM.roa (hash: U6Td7uAG7reeHiTfQxI1PpECAeu9USD7DlfHvDW3/Ds=)
2: _NWPqid85i17RmD_FIja0mxSR8s.crl (hash: uJK6Xg5KicBGvss+5JH1ieDXz5Hy+0zat06/g1tsTcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NWPqid85i17RmD_FIja0mxSR8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:e6:8d:66:4d:df:41:cd:bb:2d:48:aa:f0:fc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd58faa277ce62d7b4660ff1488dad26c5247cb
Validity
Not Before: Sep 26 11:01:50 2026 GMT
Not After : Sep 27 11:01:50 2026 GMT
Subject: CN=1875658681c752786d6c86cf1741000b6d9084a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:d0:73:a1:a6:9c:c6:47:51:da:2b:f6:a4:
48:3a:10:0a:3c:ad:03:8c:cd:f6:43:e9:5d:1d:63:
36:cc:a5:0b:b4:18:ac:03:7d:5f:eb:53:54:b6:e7:
53:5f:d5:34:8f:6a:4d:0e:d0:3b:11:78:c8:ed:10:
ef:35:87:63:b0:9b:27:73:bc:5b:4b:30:10:3f:b4:
6f:e0:ab:24:0b:fc:0b:91:61:b1:12:9a:0d:65:a1:
a9:d6:85:86:2a:0d:ad:c7:6b:19:34:8f:d7:aa:61:
ea:b7:15:b5:7e:e6:57:48:71:38:47:2d:20:29:67:
09:5c:69:f1:46:76:2f:06:e2:7c:e3:97:62:c6:6b:
0c:0f:10:5c:97:81:e8:5a:bd:26:75:8f:6f:54:89:
dd:c8:7b:80:6c:0a:01:f8:23:70:1f:92:a5:39:0c:
73:73:4e:93:c4:26:34:a2:a8:b5:11:51:13:c7:57:
79:59:77:9f:d7:2d:1e:d8:ba:ea:6b:23:45:1b:fa:
fc:ac:a7:5d:c0:a1:b4:dd:e4:3a:fb:95:d6:18:d7:
86:18:54:db:4f:1d:34:0a:bc:64:b0:f7:90:2b:bc:
2e:a9:3a:0c:19:b8:ad:0f:1b:ac:78:6b:85:6f:42:
ff:12:b7:a9:ad:fb:c5:ba:24:ee:92:18:ef:3b:28:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:75:65:86:81:C7:52:78:6D:6C:86:CF:17:41:00:0B:6D:90:84:A1
X509v3 Authority Key Identifier:
keyid:FC:D5:8F:AA:27:7C:E6:2D:7B:46:60:FF:14:88:DA:D2:6C:52:47:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NWPqid85i17RmD_FIja0mxSR8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:96:88:4b:1f:b9:70:f2:d6:d6:a0:e0:ea:9f:da:e1:a3:e9:
b8:ea:51:25:0d:9c:29:98:33:1e:72:d2:1a:46:6c:78:99:72:
f6:c4:b8:5a:e4:a3:92:39:27:b5:54:da:da:77:82:fb:36:21:
a4:41:56:29:a6:8a:91:26:3d:b6:87:19:ba:86:ac:9a:83:14:
16:e3:7d:c5:44:c8:ca:51:ed:21:fa:29:b3:68:55:e9:7d:d1:
e7:87:a7:a0:1d:ea:33:ba:c7:5b:0b:78:89:00:27:e4:f9:1d:
0b:2a:23:58:a8:13:f9:8d:4d:67:88:f0:46:6b:05:dd:f9:43:
99:e0:6f:46:20:47:04:28:81:e4:f5:78:e4:0a:42:66:9b:03:
6a:9a:c6:f7:e1:c4:58:0d:d9:6b:67:77:a8:b2:be:ad:3c:70:
ea:ff:aa:bb:1a:f5:bc:df:43:d0:d6:76:15:50:f4:e8:92:4c:
df:0c:9b:67:8e:1a:4f:de:df:66:3b:fc:32:6f:8b:d2:0b:72:
e6:2d:5e:05:8d:f1:b8:88:31:10:27:25:69:e6:09:c7:53:c7:
0c:4e:95:eb:fe:32:29:41:76:1d:1f:20:d8:ef:a3:4d:be:26:
37:a7:61:9b:4a:0c:06:58:38:24:5c:40:9f:84:73:6f:28:19:
6d:e3:9c:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdYOaNZk3fQc27LUiq8PzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZDU4ZmFhMjc3Y2U2MmQ3YjQ2NjBmZjE0ODhkYWQyNmM1
MjQ3Y2IwHhcNMjYwOTI2MTEwMTUwWhcNMjYwOTI3MTEwMTUwWjAzMTEwLwYDVQQD
EygxODc1NjU4NjgxYzc1Mjc4NmQ2Yzg2Y2YxNzQxMDAwYjZkOTA4NGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh7Qc6GmnMZHUdor9qRIOhAKPK0D
jM32Q+ldHWM2zKULtBisA31f61NUtudTX9U0j2pNDtA7EXjI7RDvNYdjsJsnc7xb
SzAQP7Rv4KskC/wLkWGxEpoNZaGp1oWGKg2tx2sZNI/XqmHqtxW1fuZXSHE4Ry0g
KWcJXGnxRnYvBuJ845dixmsMDxBcl4HoWr0mdY9vVIndyHuAbAoB+CNwH5KlOQxz
c06TxCY0oqi1EVETx1d5WXef1y0e2LrqayNFG/r8rKddwKG03eQ6+5XWGNeGGFTb
Tx00CrxksPeQK7wuqToMGbitDxuseGuFb0L/EreprfvFuiTukhjvOyhbVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBh1ZYaBx1J4bWyGzxdBAAttkIShMB8GA1UdIwQY
MBaAFPzVj6onfOYte0Zg/xSI2tJsUkfLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX05XUHFpZDg1aTE3Um1EX0ZJamEwbXhTUjhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82MzNjNzItZmQ0NC00MWJkLTk1Yjct
MzFjMjM0YmQ5NzAwLzEvX05XUHFpZDg1aTE3Um1EX0ZJamEwbXhTUjhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC82MzNjNzItZmQ0NC00MWJkLTk1YjctMzFjMjM0YmQ5NzAw
LzEvX05XUHFpZDg1aTE3Um1EX0ZJamEwbXhTUjhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZaISx+5
cPLW1qDg6p/a4aPpuOpRJQ2cKZgzHnLSGkZseJly9sS4WuSjkjkntVTa2neC+zYh
pEFWKaaKkSY9tocZuoasmoMUFuN9xUTIylHtIfops2hV6X3R54enoB3qM7rHWwt4
iQAn5PkdCyojWKgT+Y1NZ4jwRmsF3flDmeBvRiBHBCiB5PV45ApCZpsDaprG9+HE
WA3Za2d3qLK+rTxw6v+quxr1vN9D0NZ2FVD06JJM3wybZ44aT97fZjv8Mm+L0gty
5i1eBY3xuIgxECclaeYJx1PHDE6V6/4yKUF2HR8g2O+jTb4mN6dhm0oMBlg4JFxA
n4RzbygZbeOc3Q==
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:27:13 2026 by rpki-client