Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
File: nRFf6cnpz97xfpJBZVksAj77KxY.mft (raw, json)
Hash identifier: u00yHmoInk9UYwzuXSQS4P54b3m7yQKBz/PgLPkvSZ8=
Subject key identifier: 82:A8:D7:63:C1:B1:5C:83:82:D6:D1:E5:7E:BE:9B:BE:67:C6:53:32
Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
Certificate issuer: /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Certificate serial: 019D25836E6C65D539FFF6D263F32415C531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
Manifest number: 0C9B
Signing time: Wed 25 Mar 2026 15:01:03 +0000
Manifest this update: Wed 25 Mar 2026 15:01:03 +0000
Manifest next update: Thu 26 Mar 2026 15:01:03 +0000
Files and hashes: 1: 2XRNzdBMCTGrxZzPMC45UJSE_XY.roa (hash: MALdcoNe429xozLLjWrtiy10AbtWOLY2faCRujnB7oQ=)
2: nRFf6cnpz97xfpJBZVksAj77KxY.crl (hash: 7IJ+PdedtNqxOexMY6ygqZ9sw7IZ0je2i/mkMRMK6a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:6e:6c:65:d5:39:ff:f6:d2:63:f3:24:15:c5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Validity
Not Before: Mar 25 15:01:03 2026 GMT
Not After : Mar 26 15:01:03 2026 GMT
Subject: CN=82a8d763c1b15c8382d6d1e57ebe9bbe67c65332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:62:22:ed:a5:8a:d4:9a:20:a2:21:67:99:b1:
41:3a:f9:4b:4e:00:59:bd:4f:80:fd:12:dd:31:86:
9e:c0:fb:f5:4c:52:a7:2c:c7:8e:c1:2c:dc:1d:94:
9e:d9:5a:6d:cd:08:f3:ce:93:d1:c5:38:e5:99:c8:
9f:02:94:df:99:e7:3a:34:2f:04:cf:e7:4b:d1:8e:
c4:da:87:6d:02:60:b3:15:57:4a:37:9a:16:03:48:
b1:a6:e9:69:54:63:d1:12:a6:0e:93:c4:86:4f:c5:
60:95:2a:19:e3:0d:41:ee:39:6a:42:d0:bd:c4:93:
5d:4e:f7:1d:43:85:e6:31:60:d3:90:cc:e4:9c:a2:
88:d2:3f:9f:a3:c8:3e:16:98:8d:35:37:e3:b8:59:
80:3e:42:b3:c5:1f:fb:39:af:c4:05:95:59:c8:8e:
81:5c:42:28:14:6a:44:9b:9d:1c:8e:38:2d:b1:b0:
2c:f5:59:9c:75:5e:81:50:4a:99:0f:2f:d2:c1:bd:
aa:31:86:ed:b6:9d:d2:58:7b:8f:be:a7:25:33:f5:
32:cf:cf:e4:b8:cb:d4:7b:f6:01:cf:e6:54:d6:13:
b4:2a:98:d8:5d:de:c7:e9:ea:ba:60:1d:96:9d:d5:
aa:3d:5b:89:6e:9c:44:8c:cf:3f:5f:bc:98:1d:a2:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A8:D7:63:C1:B1:5C:83:82:D6:D1:E5:7E:BE:9B:BE:67:C6:53:32
X509v3 Authority Key Identifier:
keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:26:73:65:16:c8:c7:a4:89:8f:6d:72:69:3e:67:e6:b2:15:
21:66:f4:8e:32:26:6c:3f:34:44:c0:f8:63:1e:00:09:fc:fa:
00:1a:8d:a7:5e:14:90:2d:cd:b3:76:be:aa:0d:ff:5a:12:e9:
c4:73:0e:39:47:a3:e5:7e:dd:28:b7:a9:f1:0d:eb:08:76:64:
1a:5e:6f:f6:14:f1:58:d3:74:a2:74:e9:6a:88:cf:96:e3:f5:
4a:d1:b1:98:fb:1b:b3:f2:dc:73:8d:9e:5f:f3:e6:c8:bc:6c:
8e:10:d8:32:b9:57:ca:0e:4e:f0:4a:b5:b9:87:78:be:48:b7:
04:8b:01:bf:65:ef:de:4a:15:ee:99:5f:d9:1c:77:a9:80:27:
63:09:4f:f4:71:55:4d:c4:74:49:fd:10:a9:85:b8:4e:dd:cf:
9f:d4:21:cd:e0:f4:88:f8:31:2f:48:ca:dd:09:7e:e3:fb:14:
e4:6e:cc:33:d4:46:66:04:ce:56:0b:8a:82:bb:59:69:5f:d5:
ac:00:ab:38:2e:b3:92:7c:a3:29:db:dd:2c:2c:48:30:e5:ae:
0b:17:64:67:e7:e4:4b:da:0c:ef:63:62:04:ce:60:b4:ae:36:
1f:2e:84:f2:f2:35:02:9d:cf:d0:ad:8d:d0:2c:68:b0:88:8b:
25:21:c1:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg25sZdU5//bSY/MkFcUxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMTE1ZmU5YzllOWNmZGVmMTdlOTI0MTY1NTkyYzAyM2Vm
YjJiMTYwHhcNMjYwMzI1MTUwMTAzWhcNMjYwMzI2MTUwMTAzWjAzMTEwLwYDVQQD
Eyg4MmE4ZDc2M2MxYjE1YzgzODJkNmQxZTU3ZWJlOWJiZTY3YzY1MzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GIi7aWK1JogoiFnmbFBOvlLTgBZ
vU+A/RLdMYaewPv1TFKnLMeOwSzcHZSe2VptzQjzzpPRxTjlmcifApTfmec6NC8E
z+dL0Y7E2odtAmCzFVdKN5oWA0ixpulpVGPREqYOk8SGT8VglSoZ4w1B7jlqQtC9
xJNdTvcdQ4XmMWDTkMzknKKI0j+fo8g+FpiNNTfjuFmAPkKzxR/7Oa/EBZVZyI6B
XEIoFGpEm50cjjgtsbAs9VmcdV6BUEqZDy/Swb2qMYbttp3SWHuPvqclM/Uyz8/k
uMvUe/YBz+ZU1hO0KpjYXd7H6eq6YB2WndWqPVuJbpxEjM8/X7yYHaK7eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKo12PBsVyDgtbR5X6+m75nxlMyMB8GA1UdIwQY
MBaAFJ0RX+nJ6c/e8X6SQWVZLAI++ysWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblJGZjZjbnB6OTd4ZnBKQlpWa3NBajc3S3hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9iNDE3ZjgtMDczMi00OGFmLWIwMGMt
YmI3OTdjZTdlMTA4LzEvblJGZjZjbnB6OTd4ZnBKQlpWa3NBajc3S3hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9iNDE3ZjgtMDczMi00OGFmLWIwMGMtYmI3OTdjZTdlMTA4
LzEvblJGZjZjbnB6OTd4ZnBKQlpWa3NBajc3S3hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCZzZRbI
x6SJj21yaT5n5rIVIWb0jjImbD80RMD4Yx4ACfz6ABqNp14UkC3Ns3a+qg3/WhLp
xHMOOUej5X7dKLep8Q3rCHZkGl5v9hTxWNN0onTpaojPluP1StGxmPsbs/Lcc42e
X/PmyLxsjhDYMrlXyg5O8Eq1uYd4vki3BIsBv2Xv3koV7plf2Rx3qYAnYwlP9HFV
TcR0Sf0QqYW4Tt3Pn9QhzeD0iPgxL0jK3Ql+4/sU5G7MM9RGZgTOVguKgrtZaV/V
rACrOC6zknyjKdvdLCxIMOWuCxdkZ+fkS9oM72NiBM5gtK42Hy6E8vI1Ap3P0K2N
0CxosIiLJSHBkw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:15 2026 by rpki-client