Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
File: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft (raw, json)
Hash identifier: xiwtz9YNBvqOUDDuQ8zqSFtgTt2+0ZOHE5231DYEKAo=
Subject key identifier: 4B:FF:D1:00:54:40:6D:DB:80:31:5E:83:CB:DA:82:69:10:50:55:14
Authority key identifier: 35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
Certificate issuer: /CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Certificate serial: 01A0CD1152B1B69F257C3CFEC3656A8C2A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
Manifest number: 13CF
Signing time: Wed 23 Sep 2026 07:00:59 +0000
Manifest this update: Wed 23 Sep 2026 07:00:59 +0000
Manifest next update: Thu 24 Sep 2026 07:00:59 +0000
Files and hashes: 1: 0KXcrZCfQQCMUJ-Oh6SKIaYBOxQ.roa (hash: gzxW7vQjQaL5VdH2MwBQ91tWqChVH7iFvHzc5ySCf74=)
2: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl (hash: YyIDy3PWIjhtsHwM+l3vDDoSDUT+7yo5H0tJnWuVMug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:52:b1:b6:9f:25:7c:3c:fe:c3:65:6a:8c:2a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Validity
Not Before: Sep 23 07:00:59 2026 GMT
Not After : Sep 24 07:00:59 2026 GMT
Subject: CN=4bffd10054406ddb80315e83cbda826910505514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b5:03:f8:24:e2:fa:a4:69:31:ba:3b:24:fb:
7d:ee:09:b4:d2:4b:68:de:0a:a5:29:e6:79:48:dc:
27:ff:04:3d:88:70:2f:f3:c8:3a:2b:09:40:86:b1:
d0:45:42:be:74:8a:6e:9a:b6:59:55:85:96:6d:a0:
7b:a9:4b:5b:7b:b7:24:11:74:db:82:34:e8:28:3e:
27:91:1c:3a:ad:54:05:5a:31:0e:e3:18:ad:2d:71:
f0:9b:4b:62:85:1f:4c:f6:62:72:f1:c2:28:a7:19:
63:55:fc:eb:20:5b:c9:47:db:fb:1c:f3:94:25:0e:
00:3f:fe:3b:52:d1:0e:5f:6a:37:1c:26:4e:03:7b:
88:c5:45:6a:1f:e6:45:a4:b8:8b:f1:40:f9:06:4f:
07:8c:e1:fe:0e:eb:b2:9f:71:b0:bb:fa:18:07:5c:
5b:45:58:71:ac:b0:93:d4:f6:0f:9c:60:2f:61:fc:
1d:bf:7c:7b:2a:c6:d9:c3:05:cb:c6:f7:44:11:b6:
d5:a0:4d:82:96:6f:3e:24:ff:3c:6d:e3:50:b9:d7:
0d:65:4f:b7:68:ef:9e:4e:32:ed:96:99:9a:89:db:
8e:f7:4c:7f:37:54:e7:0b:5e:b0:71:b8:9f:41:9b:
76:14:96:da:86:46:7b:aa:f8:74:21:0e:3e:fe:a0:
44:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FF:D1:00:54:40:6D:DB:80:31:5E:83:CB:DA:82:69:10:50:55:14
X509v3 Authority Key Identifier:
keyid:35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:35:58:8a:70:aa:e4:83:5b:97:7d:fb:e6:e9:77:5c:d9:6c:
6b:db:cd:1a:c4:14:77:87:f6:16:80:52:eb:34:bd:f5:4a:51:
b2:f8:93:fd:e0:ee:8c:e5:22:57:2d:39:4c:bf:db:e1:4a:ac:
75:02:87:1e:0a:27:d9:37:9a:d6:61:d2:f1:5f:51:a3:fe:2a:
0f:20:6e:fd:d8:50:ed:17:20:0a:bd:31:b1:59:a4:6b:92:a2:
96:99:46:94:1e:c8:f7:8f:84:f3:21:b6:c2:43:fe:05:e1:fd:
ee:34:8f:5d:d3:f9:fa:c2:f7:cd:9f:a7:b3:e3:c9:68:80:22:
7b:ab:ee:50:3c:0e:86:f0:cd:85:fb:3d:4e:13:bc:0f:3a:10:
a5:52:cf:f4:a5:84:dd:8e:0c:0b:21:40:d6:a4:cd:7e:ae:04:
7e:cb:06:4a:10:de:bf:0c:e7:79:7c:eb:59:3b:77:71:cd:63:
14:19:3b:e5:8b:a8:f5:b3:a2:b7:a2:10:87:7e:13:d8:40:c9:
0f:7a:1b:de:57:0f:56:c0:94:b3:75:fb:7c:a6:61:85:36:49:
66:61:7f:ff:3f:00:af:09:44:a7:d1:8d:90:9b:05:17:fe:2c:
ac:66:67:a3:74:b4:09:cd:a0:4d:c5:d1:aa:ac:09:cf:6b:00:
4b:f9:7d:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNEVKxtp8lfDz+w2VqjCpHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTRmZjY3ZjNiOGQ0ZjZmNmJkYTIzZWNiYmM3YjBmMDlm
ZTYwODAwHhcNMjYwOTIzMDcwMDU5WhcNMjYwOTI0MDcwMDU5WjAzMTEwLwYDVQQD
Eyg0YmZmZDEwMDU0NDA2ZGRiODAzMTVlODNjYmRhODI2OTEwNTA1NTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbUD+CTi+qRpMbo7JPt97gm00kto
3gqlKeZ5SNwn/wQ9iHAv88g6KwlAhrHQRUK+dIpumrZZVYWWbaB7qUtbe7ckEXTb
gjToKD4nkRw6rVQFWjEO4xitLXHwm0tihR9M9mJy8cIopxljVfzrIFvJR9v7HPOU
JQ4AP/47UtEOX2o3HCZOA3uIxUVqH+ZFpLiL8UD5Bk8HjOH+Duuyn3Gwu/oYB1xb
RVhxrLCT1PYPnGAvYfwdv3x7KsbZwwXLxvdEEbbVoE2Clm8+JP88beNQudcNZU+3
aO+eTjLtlpmaiduO90x/N1TnC16wcbifQZt2FJbahkZ7qvh0IQ4+/qBEwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEv/0QBUQG3bgDFeg8vagmkQUFUUMB8GA1UdIwQY
MBaAFDUU/2fzuNT29r2iPsu8ew8J/mCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJUX1pfTzQxUGIydmFJLXk3eDdEd24tWUlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hODE1YjMtYzQ4Yy00ZmY5LTk4OWQt
ODg1NGM5MmQ0N2IxLzEvTlJUX1pfTzQxUGIydmFJLXk3eDdEd24tWUlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hODE1YjMtYzQ4Yy00ZmY5LTk4OWQtODg1NGM5MmQ0N2Ix
LzEvTlJUX1pfTzQxUGIydmFJLXk3eDdEd24tWUlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDVYinCq
5INbl3375ul3XNlsa9vNGsQUd4f2FoBS6zS99UpRsviT/eDujOUiVy05TL/b4Uqs
dQKHHgon2Tea1mHS8V9Ro/4qDyBu/dhQ7RcgCr0xsVmka5KilplGlB7I94+E8yG2
wkP+BeH97jSPXdP5+sL3zZ+ns+PJaIAie6vuUDwOhvDNhfs9ThO8DzoQpVLP9KWE
3Y4MCyFA1qTNfq4EfssGShDevwzneXzrWTt3cc1jFBk75Yuo9bOit6IQh34T2EDJ
D3ob3lcPVsCUs3X7fKZhhTZJZmF//z8ArwlEp9GNkJsFF/4srGZno3S0Cc2gTcXR
qqwJz2sAS/l9jA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 17:34:04 2026 by rpki-client