Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft
File: nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft (raw, json)
Hash identifier: hTXFB2fGN0qG65+CExREhn/Z6VkdTmV8cMt8ef340I8=
Subject key identifier: 1D:74:CA:E3:C1:AB:EA:17:48:55:18:0B:6B:7C:B3:85:39:1E:0A:25
Authority key identifier: 9C:7D:0A:01:DD:BE:83:67:19:B0:00:14:1E:A4:7A:2F:71:3B:3E:0D
Certificate issuer: /CN=9c7d0a01ddbe836719b000141ea47a2f713b3e0d
Certificate serial: 01A0D048A2245EA30D93B86D8D079549D7D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft
Manifest number: 9C
Signing time: Wed 23 Sep 2026 22:00:15 +0000
Manifest this update: Wed 23 Sep 2026 22:00:15 +0000
Manifest next update: Thu 24 Sep 2026 22:00:15 +0000
Files and hashes: 1: DOzgdPzODjDX1Ql-hTykAK7psLs.roa (hash: mYengSshg8va1KT9JslIYiakS9Az+FP585Uc0+emJdk=)
2: nH0KAd2-g2cZsAAUHqR6L3E7Pg0.crl (hash: CrpVlGN7f3lTdXkdlxg5Rb1tIigh62g3OKYJ2czXYeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:a2:24:5e:a3:0d:93:b8:6d:8d:07:95:49:d7:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7d0a01ddbe836719b000141ea47a2f713b3e0d
Validity
Not Before: Sep 23 22:00:15 2026 GMT
Not After : Sep 24 22:00:15 2026 GMT
Subject: CN=1d74cae3c1abea174855180b6b7cb385391e0a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:9b:49:61:4c:d3:05:49:fc:4d:9f:f5:7e:
6b:d0:6a:e5:e0:76:59:2b:5f:44:0c:c8:4f:27:8b:
a5:62:67:20:42:81:e6:b8:2c:42:7d:3e:f9:57:c5:
cf:7b:33:00:51:3f:9e:bc:7f:63:5f:83:d6:d0:2b:
68:3b:44:d3:47:85:d8:de:99:fb:c2:ba:3c:3e:51:
9c:8d:01:e4:60:01:3d:6c:3e:ef:38:a3:78:6b:f7:
9b:46:af:47:9b:02:46:c5:80:7c:67:f2:cf:89:78:
89:4d:c9:02:a6:cd:b1:cd:81:3b:e7:5f:e0:79:fa:
cf:c5:11:cb:de:b0:1b:26:c9:5a:15:08:29:81:a8:
c8:9a:97:6e:df:4b:aa:0e:20:38:a9:cd:53:96:33:
6a:a8:35:99:a2:63:79:89:dd:c5:8a:63:33:69:99:
fc:02:61:1c:89:14:16:6c:bd:3c:6c:f3:1e:6b:85:
63:91:e5:3d:0b:21:78:5b:12:c9:68:50:31:f7:42:
b8:d3:f5:46:7c:52:2b:a0:84:0c:42:57:f0:53:11:
50:d2:11:5d:d5:06:69:82:fd:0f:97:71:72:31:52:
cf:70:76:d7:27:0c:eb:24:77:ac:ef:d7:26:96:7f:
66:2b:3a:9b:38:43:be:27:8f:36:fa:bd:88:fa:78:
0b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:74:CA:E3:C1:AB:EA:17:48:55:18:0B:6B:7C:B3:85:39:1E:0A:25
X509v3 Authority Key Identifier:
keyid:9C:7D:0A:01:DD:BE:83:67:19:B0:00:14:1E:A4:7A:2F:71:3B:3E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:6c:58:3d:62:5f:dc:53:6f:89:4f:17:5d:69:d8:b0:2d:64:
3c:0f:e0:06:d1:07:cf:a2:d0:36:54:dd:bf:fc:b4:d6:62:c0:
ee:8a:4d:1f:0e:66:91:98:b7:3c:bb:ed:26:54:04:60:6a:3b:
64:87:3f:c2:05:f1:e7:7e:d8:9c:32:90:09:d6:0c:67:eb:60:
1d:1d:6a:6e:d9:d2:33:8f:39:9a:28:e9:89:53:ce:0b:8f:e7:
ca:4a:2d:db:26:d8:77:29:89:41:bd:b4:69:a8:49:58:d0:2d:
86:44:b7:9f:d4:ed:09:91:2b:55:74:74:2e:11:13:bc:9c:64:
4e:f8:44:0d:e2:f2:7c:27:cc:64:29:33:11:4e:e0:ed:da:8e:
a1:f4:76:f5:be:97:46:79:e8:18:d5:64:95:ad:e1:29:8c:3d:
9b:45:0b:52:d4:91:da:1e:56:fa:05:85:6f:4f:c6:d7:4d:ff:
25:01:84:cd:9e:eb:18:73:ab:e3:eb:5c:dd:51:7c:3f:b6:cf:
78:46:8f:cc:b9:88:df:27:e3:a1:8f:01:b0:2a:2e:af:af:1a:
16:08:c9:4c:56:57:61:2d:2d:81:70:59:fc:1a:c7:5f:90:0a:
cf:c3:87:0b:d2:96:65:be:0b:2b:e1:e1:94:ed:b8:ad:9f:e4:
fc:1a:bd:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQSKIkXqMNk7htjQeVSdfSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljN2QwYTAxZGRiZTgzNjcxOWIwMDAxNDFlYTQ3YTJmNzEz
YjNlMGQwHhcNMjYwOTIzMjIwMDE1WhcNMjYwOTI0MjIwMDE1WjAzMTEwLwYDVQQD
EygxZDc0Y2FlM2MxYWJlYTE3NDg1NTE4MGI2YjdjYjM4NTM5MWUwYTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNGbSWFM0wVJ/E2f9X5r0Grl4HZZ
K19EDMhPJ4ulYmcgQoHmuCxCfT75V8XPezMAUT+evH9jX4PW0CtoO0TTR4XY3pn7
wro8PlGcjQHkYAE9bD7vOKN4a/ebRq9HmwJGxYB8Z/LPiXiJTckCps2xzYE751/g
efrPxRHL3rAbJslaFQgpgajImpdu30uqDiA4qc1TljNqqDWZomN5id3FimMzaZn8
AmEciRQWbL08bPMea4VjkeU9CyF4WxLJaFAx90K40/VGfFIroIQMQlfwUxFQ0hFd
1QZpgv0Pl3FyMVLPcHbXJwzrJHes79cmln9mKzqbOEO+J482+r2I+ngLHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB10yuPBq+oXSFUYC2t8s4U5HgolMB8GA1UdIwQY
MBaAFJx9CgHdvoNnGbAAFB6kei9xOz4NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkgwS0FkMi1nMmNac0FBVUhxUjZMM0U3UGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83MmRhYzktNzIxNi00ZTc2LTkwNGMt
MjZlMTZhMzNhMmFmLzEvbkgwS0FkMi1nMmNac0FBVUhxUjZMM0U3UGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83MmRhYzktNzIxNi00ZTc2LTkwNGMtMjZlMTZhMzNhMmFm
LzEvbkgwS0FkMi1nMmNac0FBVUhxUjZMM0U3UGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2xYPWJf
3FNviU8XXWnYsC1kPA/gBtEHz6LQNlTdv/y01mLA7opNHw5mkZi3PLvtJlQEYGo7
ZIc/wgXx537YnDKQCdYMZ+tgHR1qbtnSM485mijpiVPOC4/nykot2ybYdymJQb20
aahJWNAthkS3n9TtCZErVXR0LhETvJxkTvhEDeLyfCfMZCkzEU7g7dqOofR29b6X
RnnoGNVkla3hKYw9m0ULUtSR2h5W+gWFb0/G103/JQGEzZ7rGHOr4+tc3VF8P7bP
eEaPzLmI3yfjoY8BsCour68aFgjJTFZXYS0tgXBZ/BrHX5AKz8OHC9KWZb4LK+Hh
lO24rZ/k/Bq9Zw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:11:46 2026 by rpki-client