Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: pzUEdPgPDS5Sgi+splBbYXdEDP2ebkJcyX7EKO1aLIw=
Subject key identifier: CF:42:B2:C7:72:3D:6C:DC:E5:98:F9:0F:9A:4E:80:34:17:CB:E6:78
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 01A10E4C1951FA05036E9047DB1270DBD7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 1A49
Signing time: Mon 05 Oct 2026 23:00:30 +0000
Manifest this update: Mon 05 Oct 2026 23:00:30 +0000
Manifest next update: Tue 06 Oct 2026 23:00:30 +0000
Files and hashes: 1: Kx2A4QHC9gQsEflStPjFwVjhvSA.roa (hash: FMGSXjNyUjkWfrbaK6kOA/2OaW9XrZEgBYS29pUlyug=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: 5N9P6ZxtpIZpi4QtOazqlVrXuYPxo2m+cgOsNjdMu7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:4c:19:51:fa:05:03:6e:90:47:db:12:70:db:d7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Oct 5 23:00:30 2026 GMT
Not After : Oct 6 23:00:30 2026 GMT
Subject: CN=cf42b2c7723d6cdce598f90f9a4e803417cbe678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:5f:8a:2c:65:70:66:7e:f2:f3:4b:7c:78:
57:e8:1e:55:f0:b8:33:12:26:45:7d:49:d7:87:8c:
df:76:93:0b:06:cf:99:1c:af:1b:71:4a:28:a7:8c:
1f:b2:72:2b:17:c6:86:8d:12:e2:86:b5:6f:19:c0:
ea:2d:35:09:bf:35:36:7a:c2:1c:49:1f:1e:0b:66:
47:ba:19:a4:3e:97:5a:f5:6a:ad:a8:3a:1c:72:f6:
52:e8:ed:2f:8f:93:1b:cd:f0:48:b3:d3:61:fb:d5:
e6:dd:c3:bc:9c:21:5c:ed:1b:c6:7a:c4:21:64:e1:
40:62:f7:ed:34:e7:2a:0d:f5:a6:1b:99:75:a0:61:
b8:93:29:8e:dc:68:ba:17:d4:6c:b4:5a:8f:3b:05:
89:64:6d:bf:cd:68:82:34:e8:ed:4a:f5:25:85:fe:
d8:01:d0:11:aa:cd:71:86:ac:78:10:25:09:55:a9:
4e:28:57:d9:98:a5:4e:d2:a9:65:65:e7:51:51:3c:
10:67:83:2a:ae:c1:15:25:00:0b:20:44:b9:b8:e0:
1a:73:49:b5:88:81:2a:6f:9f:d2:35:be:1a:ad:e6:
5b:7e:56:6b:cb:a3:25:7d:27:d7:93:fa:2a:95:41:
86:70:40:07:3e:17:eb:c9:27:f3:28:48:d6:90:20:
c5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:42:B2:C7:72:3D:6C:DC:E5:98:F9:0F:9A:4E:80:34:17:CB:E6:78
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:82:bb:ca:3d:97:3f:4d:10:34:eb:f2:bf:09:34:12:a3:9a:
1d:ee:b9:c7:0f:22:4b:3c:02:df:25:b0:db:65:ce:57:8a:8c:
d3:2a:22:16:22:df:e9:fa:b0:39:c7:d9:76:a4:ee:94:11:5d:
f5:10:6a:5c:a5:85:a8:e6:09:c9:ea:6f:1f:06:c4:13:92:29:
70:8e:fc:ee:c3:7f:67:55:f6:00:2c:14:ff:3e:88:d7:0f:60:
70:61:e4:44:ee:c5:8d:4d:cb:73:5a:9d:3c:b7:0b:fd:07:b0:
80:cd:84:79:cf:26:48:39:6b:d4:c5:7b:f9:76:c5:71:22:4d:
82:82:82:7a:13:d0:1a:dd:56:08:7f:c7:ca:54:79:94:3e:e4:
b5:c0:a6:91:0a:cc:94:f2:c1:e8:99:be:22:86:77:34:b3:2b:
67:53:40:19:37:e1:83:23:93:46:48:6a:14:93:29:2d:43:07:
4e:02:94:4a:2e:75:5a:5c:22:bb:28:0c:07:e9:c0:16:ef:e8:
b4:e2:70:d5:53:96:ca:99:43:c8:e8:90:e2:c4:8f:e3:d7:27:
6a:d9:1b:eb:1c:ef:95:aa:50:81:19:1c:6c:f1:fe:3c:9d:1d:
06:00:74:46:4f:83:42:3a:b0:cf:d6:eb:31:e6:d3:88:b9:e2:
d6:b5:6a:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEOTBlR+gUDbpBH2xJw29epMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzM2NmFmNmNlMGIxYTlmNjAxNzNiMTRiNWZkZGQ3ZTBi
OTYzMDYwHhcNMjYxMDA1MjMwMDMwWhcNMjYxMDA2MjMwMDMwWjAzMTEwLwYDVQQD
EyhjZjQyYjJjNzcyM2Q2Y2RjZTU5OGY5MGY5YTRlODAzNDE3Y2JlNjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGlfiixlcGZ+8vNLfHhX6B5V8Lgz
EiZFfUnXh4zfdpMLBs+ZHK8bcUoop4wfsnIrF8aGjRLihrVvGcDqLTUJvzU2esIc
SR8eC2ZHuhmkPpda9WqtqDoccvZS6O0vj5MbzfBIs9Nh+9Xm3cO8nCFc7RvGesQh
ZOFAYvftNOcqDfWmG5l1oGG4kymO3Gi6F9RstFqPOwWJZG2/zWiCNOjtSvUlhf7Y
AdARqs1xhqx4ECUJValOKFfZmKVO0qllZedRUTwQZ4MqrsEVJQALIES5uOAac0m1
iIEqb5/SNb4areZbflZry6MlfSfXk/oqlUGGcEAHPhfrySfzKEjWkCDFLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9CssdyPWzc5Zj5D5pOgDQXy+Z4MB8GA1UdIwQY
MBaAFJ3DZq9s4LGp9gFzsUtf3dfguWMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgt
ODJmNDc2YjVjZmRiLzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgtODJmNDc2YjVjZmRi
LzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4K7yj2X
P00QNOvyvwk0EqOaHe65xw8iSzwC3yWw22XOV4qM0yoiFiLf6fqwOcfZdqTulBFd
9RBqXKWFqOYJyepvHwbEE5IpcI787sN/Z1X2ACwU/z6I1w9gcGHkRO7FjU3Lc1qd
PLcL/QewgM2Eec8mSDlr1MV7+XbFcSJNgoKCehPQGt1WCH/HylR5lD7ktcCmkQrM
lPLB6Jm+IoZ3NLMrZ1NAGTfhgyOTRkhqFJMpLUMHTgKUSi51WlwiuygMB+nAFu/o
tOJw1VOWyplDyOiQ4sSP49cnatkb6xzvlapQgRkcbPH+PJ0dBgB0Rk+DQjqwz9br
MebTiLni1rVqkQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 02:23:56 2026 by rpki-client