Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
File: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft (raw, json)
Hash identifier: AOxDBW4EaZyttY3t+8swF1dC4nnr+YFVaHmKsriz970=
Subject key identifier: 05:BC:C3:82:04:DA:04:41:B8:F2:2E:8E:E8:FE:30:28:DC:D5:49:65
Authority key identifier: 9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
Certificate issuer: /CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Certificate serial: 019D2A728C3339205440FB6CFDD6ECABDBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
Manifest number: 048E
Signing time: Thu 26 Mar 2026 14:00:43 +0000
Manifest this update: Thu 26 Mar 2026 14:00:43 +0000
Manifest next update: Fri 27 Mar 2026 14:00:43 +0000
Files and hashes: 1: m8AA96uOHjGk-TGHS6ELVd8Zd-8.roa (hash: KzO3KLMfqTnrwpPiduDo1bAht73kSS22uwNrZN+bB0Q=)
2: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl (hash: IGKZ08irPUtwY2xw2iwyE4CS9KKQkQqMlRwid47mNjY=)
3: tYiu9GmgmRQE0mtTTEACFf7CReM.roa (hash: kV8oONMqJV8h3wORb9Oq/koiMMhAYOJ2nauWTTLAmn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:8c:33:39:20:54:40:fb:6c:fd:d6:ec:ab:db:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Validity
Not Before: Mar 26 14:00:43 2026 GMT
Not After : Mar 27 14:00:43 2026 GMT
Subject: CN=05bcc38204da0441b8f22e8ee8fe3028dcd54965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:47:48:ce:78:87:b3:2a:7d:23:28:fd:f2:2f:
20:b9:76:a3:4a:f2:54:6c:21:b4:95:85:1e:92:10:
0a:79:75:b5:7f:16:ac:01:3a:58:cc:34:d8:6b:39:
af:88:19:2a:83:21:52:13:1c:0e:7f:7b:e4:7d:98:
6d:52:af:15:ea:25:19:25:37:1e:9e:be:8f:ad:ab:
a9:01:94:fe:cd:d1:c4:de:20:7d:34:34:42:ba:15:
dc:69:bc:96:4f:08:4b:43:d0:37:59:93:1c:02:27:
ba:f0:af:86:44:07:05:d9:07:d2:3d:4b:90:20:af:
d6:7d:67:3f:f5:97:74:20:e4:27:96:47:d5:0f:a8:
2f:48:cd:c5:a4:99:e5:ce:63:c9:2c:f5:11:7e:1c:
61:ce:35:77:76:af:12:6f:4d:fb:8b:f8:5e:32:57:
9d:65:c2:b4:f6:f5:03:5d:19:40:fd:38:04:31:e9:
a6:38:79:71:c9:cd:d4:8b:d8:c3:bc:02:11:2a:d8:
21:05:91:73:61:00:ad:9d:9a:11:07:13:30:e1:e4:
3c:ff:00:59:17:29:96:3f:db:dc:34:8e:3c:e1:6f:
1d:42:f4:9b:f5:2a:2b:dd:d0:1c:e0:65:1f:fd:16:
ce:67:ad:a7:0f:df:95:ad:9c:d6:b0:75:93:23:6d:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BC:C3:82:04:DA:04:41:B8:F2:2E:8E:E8:FE:30:28:DC:D5:49:65
X509v3 Authority Key Identifier:
keyid:9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:de:53:98:3e:5b:26:da:c6:ce:b9:20:60:8c:b8:33:58:fd:
15:4b:c7:c9:d4:eb:07:41:6f:6d:fe:9c:ad:40:6a:e0:44:ab:
01:92:26:43:05:0c:20:04:f2:8a:bf:27:c1:55:ca:40:fe:b3:
72:b2:05:b3:96:db:be:91:55:97:d0:cd:9f:32:a8:0c:b4:2e:
b0:76:27:e9:98:50:8a:47:de:cb:af:b0:58:c9:b3:07:41:6d:
55:aa:24:86:11:36:18:17:7c:d7:b9:b9:79:26:d7:dc:ca:82:
9b:e5:81:42:a3:92:07:65:1d:34:74:a6:bc:da:31:2e:d6:1e:
4f:b8:40:c8:8b:09:54:15:58:e2:cf:37:49:9e:67:42:4b:d8:
61:67:d6:76:da:ab:03:6d:93:75:56:04:d3:4d:3e:f7:8b:9e:
ee:ed:02:eb:e0:8c:52:d2:03:22:95:09:10:ce:ea:35:40:cc:
81:69:f4:a4:56:de:2d:3b:29:65:d7:43:56:be:16:15:23:9b:
c1:44:2d:c7:5b:ff:16:76:41:51:0f:c0:7f:b5:57:81:df:b3:
92:b2:2d:ff:36:99:83:5f:6d:2a:72:16:ec:b7:d8:e2:d0:02:
f4:5b:72:25:99:90:4b:c4:d2:a8:ec:2b:02:cc:32:ae:78:c5:
28:93:93:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcowzOSBUQPts/dbsq9u4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNWExNzI3MWQ5OWNmMTViNzNlY2M2NTg2NzMxNDNjMjhl
MjA3ZWQwHhcNMjYwMzI2MTQwMDQzWhcNMjYwMzI3MTQwMDQzWjAzMTEwLwYDVQQD
EygwNWJjYzM4MjA0ZGEwNDQxYjhmMjJlOGVlOGZlMzAyOGRjZDU0OTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kdIzniHsyp9Iyj98i8guXajSvJU
bCG0lYUekhAKeXW1fxasATpYzDTYazmviBkqgyFSExwOf3vkfZhtUq8V6iUZJTce
nr6PraupAZT+zdHE3iB9NDRCuhXcabyWTwhLQ9A3WZMcAie68K+GRAcF2QfSPUuQ
IK/WfWc/9Zd0IOQnlkfVD6gvSM3FpJnlzmPJLPURfhxhzjV3dq8Sb037i/heMled
ZcK09vUDXRlA/TgEMemmOHlxyc3Ui9jDvAIRKtghBZFzYQCtnZoRBxMw4eQ8/wBZ
FymWP9vcNI484W8dQvSb9Sor3dAc4GUf/RbOZ62nD9+VrZzWsHWTI23eCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAW8w4IE2gRBuPIujuj+MCjc1UllMB8GA1UdIwQY
MBaAFJ1aFycdmc8Vtz7MZYZzFDwo4gftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblZvWEp4Mlp6eFczUHN4bGhuTVVQQ2ppQi0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My85MDg5NTYtYzVlNi00YTNlLTlmMTct
YTE0Y2EwZWMxYzFhLzEvblZvWEp4Mlp6eFczUHN4bGhuTVVQQ2ppQi0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My85MDg5NTYtYzVlNi00YTNlLTlmMTctYTE0Y2EwZWMxYzFh
LzEvblZvWEp4Mlp6eFczUHN4bGhuTVVQQ2ppQi0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAed5TmD5b
JtrGzrkgYIy4M1j9FUvHydTrB0Fvbf6crUBq4ESrAZImQwUMIATyir8nwVXKQP6z
crIFs5bbvpFVl9DNnzKoDLQusHYn6ZhQikfey6+wWMmzB0FtVaokhhE2GBd817m5
eSbX3MqCm+WBQqOSB2UdNHSmvNoxLtYeT7hAyIsJVBVY4s83SZ5nQkvYYWfWdtqr
A22TdVYE000+94ue7u0C6+CMUtIDIpUJEM7qNUDMgWn0pFbeLTspZddDVr4WFSOb
wUQtx1v/FnZBUQ/Af7VXgd+zkrIt/zaZg19tKnIW7LfY4tAC9FtyJZmQS8TSqOwr
AswyrnjFKJOTyg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:10:19 2026 by rpki-client