Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
File: nPReAK4WTmeqE1SFcjfQmt8nyVI.mft (raw, json)
Hash identifier: 8myBaON1ljf37x3fZm5J4obxA2Y3izyx2cBVC1H7d+c=
Subject key identifier: 28:A5:BC:AA:EF:CC:3B:E9:F6:F9:C7:74:4D:96:50:62:14:4B:ED:7E
Authority key identifier: 9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
Certificate issuer: /CN=9cf45e00ae164e67aa1354857237d09adf27c952
Certificate serial: 019D27A91B0463D1A245CFB1C2015505A666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
Manifest number: 135F
Signing time: Thu 26 Mar 2026 01:01:26 +0000
Manifest this update: Thu 26 Mar 2026 01:01:26 +0000
Manifest next update: Fri 27 Mar 2026 01:01:26 +0000
Files and hashes: 1: nPReAK4WTmeqE1SFcjfQmt8nyVI.crl (hash: jRuDwVGrUdcTNUGKiBcMH/qxcVUBz/2EmWgV1zgPFqY=)
2: yH0aijgaGO1sOyv5Jg6D95KfZ58.roa (hash: fSdLoz8/XDItScytuLveTLBHygsoLoVUMSB0Zg60LLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:1b:04:63:d1:a2:45:cf:b1:c2:01:55:05:a6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf45e00ae164e67aa1354857237d09adf27c952
Validity
Not Before: Mar 26 01:01:26 2026 GMT
Not After : Mar 27 01:01:26 2026 GMT
Subject: CN=28a5bcaaefcc3be9f6f9c7744d965062144bed7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:d0:e1:7e:c4:e5:57:51:cb:c6:ed:93:df:
3e:2e:4f:4e:ae:5b:17:50:89:4d:ed:31:21:18:5e:
10:fe:c7:2b:e1:85:f9:11:16:38:c9:f1:85:a7:fe:
84:81:40:04:b9:c0:65:d2:ff:4d:13:8e:70:98:84:
80:47:45:e5:01:80:7b:da:f5:13:42:79:30:67:a1:
de:32:52:20:27:f3:87:ef:b0:b5:0d:4c:a3:02:2f:
10:fb:7a:7b:77:f9:bf:0e:b4:51:0c:82:e5:66:ab:
22:ce:f4:5e:8e:fe:59:78:bc:e4:73:0d:8c:f1:4f:
33:ab:e7:a2:d4:63:9c:b3:41:78:31:f7:d6:d4:a6:
b4:60:3b:04:14:dc:52:7f:b6:51:54:bf:5f:b2:5a:
78:06:aa:76:8a:43:53:3f:c0:54:8b:ad:73:41:65:
3c:ca:5e:66:d5:bf:a4:e2:70:85:b3:6b:08:d8:42:
84:cd:2a:e6:07:bd:0d:6e:be:2a:47:59:8c:d8:20:
ac:95:96:90:ca:af:6d:fa:06:11:5e:be:63:04:63:
87:54:55:59:28:44:1a:85:be:2d:7c:6a:e0:82:7f:
fb:2c:22:80:e6:47:0f:51:d5:2d:d8:6a:0e:d7:f7:
8c:86:12:95:69:e8:5a:69:08:da:e6:12:2f:60:83:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A5:BC:AA:EF:CC:3B:E9:F6:F9:C7:74:4D:96:50:62:14:4B:ED:7E
X509v3 Authority Key Identifier:
keyid:9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f3:74:31:2a:21:b6:e6:90:48:d3:9a:2c:3f:8e:91:13:7b:
58:25:4a:21:6d:6c:a4:61:45:57:17:b4:6d:ab:50:b1:9a:78:
4f:65:7e:98:05:19:f5:d7:27:c0:74:4e:5d:c0:24:4c:7a:19:
9b:48:9c:68:51:37:af:d7:c0:30:23:89:6d:74:a6:24:53:52:
32:02:71:f1:fb:43:13:a9:20:d0:0a:b8:00:ec:b1:df:ac:2c:
a4:4e:e8:00:45:bc:a1:6d:4d:fd:13:b3:60:65:91:91:cd:81:
26:30:7b:cc:be:41:ac:cf:ab:ea:ed:2d:c6:f4:58:96:16:b8:
de:c9:d3:19:e0:96:a0:5c:da:07:80:c2:c7:c7:75:a3:0a:25:
dc:84:ab:1d:99:ba:f4:dd:c2:d9:f3:8b:bb:60:7d:f1:80:0c:
f1:89:0f:2e:41:0f:fa:76:0c:b4:11:7f:8f:69:a1:5d:6d:9d:
64:d8:01:56:8d:48:da:d6:f2:96:4e:5e:38:9f:3a:1b:40:67:
9e:2e:79:9e:1b:aa:da:02:c3:4e:7e:47:1f:eb:ca:be:9b:7d:
1a:39:77:66:df:9a:28:3b:8c:76:61:7a:2c:12:9b:7c:ab:04:
91:56:1d:26:cf:29:07:8f:1b:89:7f:30:aa:bc:f7:fb:a5:f8:
fe:f8:b4:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqRsEY9GiRc+xwgFVBaZmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZjQ1ZTAwYWUxNjRlNjdhYTEzNTQ4NTcyMzdkMDlhZGYy
N2M5NTIwHhcNMjYwMzI2MDEwMTI2WhcNMjYwMzI3MDEwMTI2WjAzMTEwLwYDVQQD
EygyOGE1YmNhYWVmY2MzYmU5ZjZmOWM3NzQ0ZDk2NTA2MjE0NGJlZDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz3Q4X7E5VdRy8btk98+Lk9OrlsX
UIlN7TEhGF4Q/scr4YX5ERY4yfGFp/6EgUAEucBl0v9NE45wmISAR0XlAYB72vUT
QnkwZ6HeMlIgJ/OH77C1DUyjAi8Q+3p7d/m/DrRRDILlZqsizvRejv5ZeLzkcw2M
8U8zq+ei1GOcs0F4MffW1Ka0YDsEFNxSf7ZRVL9fslp4Bqp2ikNTP8BUi61zQWU8
yl5m1b+k4nCFs2sI2EKEzSrmB70Nbr4qR1mM2CCslZaQyq9t+gYRXr5jBGOHVFVZ
KEQahb4tfGrggn/7LCKA5kcPUdUt2GoO1/eMhhKVaehaaQja5hIvYIMTAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCilvKrvzDvp9vnHdE2WUGIUS+1+MB8GA1UdIwQY
MBaAFJz0XgCuFk5nqhNUhXI30JrfJ8lSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82ZmUxMTAtMmIzMS00ZmVkLWE1NmIt
NWFkNWQyOWQ3MmRkLzEvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82ZmUxMTAtMmIzMS00ZmVkLWE1NmItNWFkNWQyOWQ3MmRk
LzEvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPN0MSoh
tuaQSNOaLD+OkRN7WCVKIW1spGFFVxe0batQsZp4T2V+mAUZ9dcnwHROXcAkTHoZ
m0icaFE3r9fAMCOJbXSmJFNSMgJx8ftDE6kg0Aq4AOyx36wspE7oAEW8oW1N/ROz
YGWRkc2BJjB7zL5BrM+r6u0txvRYlha43snTGeCWoFzaB4DCx8d1owol3ISrHZm6
9N3C2fOLu2B98YAM8YkPLkEP+nYMtBF/j2mhXW2dZNgBVo1I2tbylk5eOJ86G0Bn
ni55nhuq2gLDTn5HH+vKvpt9Gjl3Zt+aKDuMdmF6LBKbfKsEkVYdJs8pB48biX8w
qrz3+6X4/vi0Vg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:59 2026 by rpki-client