Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
File: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft (raw, json)
Hash identifier: mV4i0UwBSvagG8JzjobdTM1qlO/l2vkyWlID9/FliXw=
Subject key identifier: 3C:0F:DC:7C:8C:DB:52:F7:89:37:0E:C3:F7:2D:DA:5C:65:74:07:52
Authority key identifier: 9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
Certificate issuer: /CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Certificate serial: 01A1035B8DB00B33BF4E646D5D051852833F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
Manifest number: 0202
Signing time: Sat 03 Oct 2026 20:01:34 +0000
Manifest this update: Sat 03 Oct 2026 20:01:34 +0000
Manifest next update: Sun 04 Oct 2026 20:01:34 +0000
Files and hashes: 1: GxX0NEfDzMw7gEa_ZAj9VTuZ5rU.asa (hash: mAtK7Fbp0A4HV03b+LlP4AWR9fiqDJ5mHPkbxUfIEUw=)
2: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl (hash: tGgPniSb3RqXDflnFlHD5OzIiPnOhFZRlVF9u4zDS4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5b:8d:b0:0b:33:bf:4e:64:6d:5d:05:18:52:83:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Validity
Not Before: Oct 3 20:01:34 2026 GMT
Not After : Oct 4 20:01:34 2026 GMT
Subject: CN=3c0fdc7c8cdb52f789370ec3f72dda5c65740752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:2e:9a:ab:d8:b9:2f:57:67:75:4c:18:0f:
ca:c4:8a:30:92:82:41:2b:10:b0:1b:97:90:c0:0d:
08:e2:77:1a:d7:94:4b:5e:ba:12:29:f8:db:25:b7:
fd:3b:9b:54:65:a1:27:86:1a:19:8f:4d:e0:3e:96:
76:75:77:b7:c7:e3:6e:46:53:a1:bd:98:1c:b6:ee:
dd:d1:e1:9c:87:e1:25:7f:da:e2:df:38:67:2c:4a:
2a:72:3c:0e:82:45:64:16:78:90:25:6e:4f:4c:eb:
64:ab:ce:19:a4:25:4d:c6:3f:d7:60:f1:ca:de:b0:
0c:31:d4:65:3e:a7:6a:f2:28:cb:bd:aa:e7:55:a2:
de:ed:b4:6e:38:9e:4d:14:b6:43:78:3e:25:4d:50:
16:10:00:f2:34:a2:e9:20:35:9e:46:89:ff:8e:20:
28:ed:e9:39:64:b2:16:7a:1f:b4:e4:b7:fe:2f:6f:
5e:79:f8:73:71:bb:05:b1:cd:71:aa:2e:83:67:c4:
d3:e9:13:bd:f8:b8:7a:4e:f2:79:37:e9:b5:91:2c:
48:b0:ed:3b:2c:1a:a9:09:7e:4f:10:66:c3:2b:60:
66:03:70:5a:da:72:4a:f8:32:0b:aa:69:4c:05:3c:
9d:7f:14:18:27:ae:f3:bb:4e:f4:e8:ec:63:e6:99:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0F:DC:7C:8C:DB:52:F7:89:37:0E:C3:F7:2D:DA:5C:65:74:07:52
X509v3 Authority Key Identifier:
keyid:9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:26:ee:a2:30:bc:08:01:cd:92:4c:af:45:ad:14:60:8f:17:
2d:64:04:b8:d6:98:d5:44:fc:22:2c:71:e1:ce:fe:5b:7f:34:
03:2b:10:53:4b:82:f9:9a:5c:e6:61:a6:37:4a:2e:a8:1a:60:
89:65:7c:7a:ae:93:91:93:f1:1c:22:5b:5a:3f:88:56:d7:f8:
55:18:c3:2c:16:54:3a:0d:04:eb:04:6a:b4:b1:79:b4:1e:d3:
71:0d:44:93:8d:00:1a:26:2f:2c:05:fc:da:58:76:56:55:b3:
5b:be:e9:87:14:ff:4d:9d:e2:cf:31:7f:51:40:43:70:73:b5:
40:ff:3c:be:47:39:26:9c:9c:67:8d:5e:c7:91:43:cf:e0:61:
2f:4d:23:5d:b4:6f:99:a9:31:2a:f4:52:7c:59:4b:83:3e:0c:
ee:2a:ef:ca:54:5b:9c:15:9d:ab:70:a9:94:59:39:41:6d:2a:
8a:e5:91:2b:ff:44:ea:fe:e0:d9:0f:ae:52:7a:75:c6:a6:16:
d6:98:43:4e:68:00:d6:a0:8d:09:f6:6c:70:72:61:2c:c5:a6:
7a:de:6c:ac:03:ad:83:31:b7:ad:77:09:da:51:6c:50:05:24:
29:0f:47:c8:e9:be:1e:0f:f3:66:e8:5a:e2:8c:d8:2b:13:9a:
fa:fb:46:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDW42wCzO/TmRtXQUYUoM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjkxMWFmYjI5Y2UzMzUyNzY3ZTcxMzlkOWI5NWRmOGEw
NTk4Y2IwHhcNMjYxMDAzMjAwMTM0WhcNMjYxMDA0MjAwMTM0WjAzMTEwLwYDVQQD
EygzYzBmZGM3YzhjZGI1MmY3ODkzNzBlYzNmNzJkZGE1YzY1NzQwNzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvUumqvYuS9XZ3VMGA/KxIowkoJB
KxCwG5eQwA0I4nca15RLXroSKfjbJbf9O5tUZaEnhhoZj03gPpZ2dXe3x+NuRlOh
vZgctu7d0eGch+Elf9ri3zhnLEoqcjwOgkVkFniQJW5PTOtkq84ZpCVNxj/XYPHK
3rAMMdRlPqdq8ijLvarnVaLe7bRuOJ5NFLZDeD4lTVAWEADyNKLpIDWeRon/jiAo
7ek5ZLIWeh+05Lf+L29eefhzcbsFsc1xqi6DZ8TT6RO9+Lh6TvJ5N+m1kSxIsO07
LBqpCX5PEGbDK2BmA3Ba2nJK+DILqmlMBTydfxQYJ67zu0706Oxj5pmLaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwP3HyM21L3iTcOw/ct2lxldAdSMB8GA1UdIwQY
MBaAFJ65Ea+ynOM1J2fnE52bld+KBZjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJrUnI3S2M0elVuWi1jVG5adVYzNG9GbU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xYWI5MWYtMzMyOC00MzY2LWE1MTYt
NjVlMjQ1NzEzMmVmLzEvbnJrUnI3S2M0elVuWi1jVG5adVYzNG9GbU1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xYWI5MWYtMzMyOC00MzY2LWE1MTYtNjVlMjQ1NzEzMmVm
LzEvbnJrUnI3S2M0elVuWi1jVG5adVYzNG9GbU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXibuojC8
CAHNkkyvRa0UYI8XLWQEuNaY1UT8Iixx4c7+W380AysQU0uC+Zpc5mGmN0ouqBpg
iWV8eq6TkZPxHCJbWj+IVtf4VRjDLBZUOg0E6wRqtLF5tB7TcQ1Ek40AGiYvLAX8
2lh2VlWzW77phxT/TZ3izzF/UUBDcHO1QP88vkc5JpycZ41ex5FDz+BhL00jXbRv
makxKvRSfFlLgz4M7irvylRbnBWdq3CplFk5QW0qiuWRK/9E6v7g2Q+uUnp1xqYW
1phDTmgA1qCNCfZscHJhLMWmet5srAOtgzG3rXcJ2lFsUAUkKQ9HyOm+Hg/zZuha
4ozYKxOa+vtGTg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:38:44 2026 by rpki-client