Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
File: nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft (raw, json)
Hash identifier: NVJoQ1EZwetmNH0lT3oVm/lBCbWR/WzK/HhspwSpYKE=
Subject key identifier: EE:B4:20:79:ED:55:D5:47:D5:2D:9C:31:1E:F9:BA:D4:24:35:D8:CF
Authority key identifier: 9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
Certificate issuer: /CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Certificate serial: 019E1F47A7C169523EF3F105E5EF7A067B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
Manifest number: 0C23
Signing time: Wed 13 May 2026 03:00:50 +0000
Manifest this update: Wed 13 May 2026 03:00:50 +0000
Manifest next update: Thu 14 May 2026 03:00:50 +0000
Files and hashes: 1: dweYmfOa8TTIR4-iBHNV8XmJt9A.roa (hash: tN8Qt6nqsV9vwt70G/tNoeGlwkK0G3mWlGOVDNyRfzk=)
2: nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl (hash: 4Oc2nuN4SIKhwwdsUsBDumy1B0Lxgils6jJahNnZq40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:a7:c1:69:52:3e:f3:f1:05:e5:ef:7a:06:7b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e3080792cfa9f15f03eb3fd76ca68c8cde220
Validity
Not Before: May 13 03:00:50 2026 GMT
Not After : May 14 03:00:50 2026 GMT
Subject: CN=eeb42079ed55d547d52d9c311ef9bad42435d8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:90:d4:2f:4c:a9:0a:09:bf:cf:62:5c:58:
22:ab:17:31:4d:62:dc:91:27:8d:6d:34:c6:51:60:
34:5e:dc:b4:45:63:a1:1a:93:cb:f2:40:49:42:93:
08:e8:f6:a3:80:ba:54:ef:2b:70:dc:43:6c:89:bd:
39:11:3b:7c:2c:3f:2d:bc:ea:39:2a:9f:76:d5:0b:
01:e9:35:cc:da:dd:3e:be:f2:40:0f:d9:06:0c:54:
af:cf:56:86:2e:e9:61:31:1f:7b:b3:72:a1:9d:77:
d2:e7:8d:5e:bf:67:b6:8a:52:fc:5b:43:db:36:af:
9c:74:89:fa:be:43:b5:45:94:93:03:3c:0a:bd:86:
16:52:ae:16:32:f5:cd:a2:f3:9f:4f:2a:d8:93:41:
52:a2:86:0f:0b:25:23:6a:63:8d:98:db:34:7e:15:
26:57:d8:c3:13:65:20:67:d9:50:9c:d6:f8:8d:e6:
2d:40:01:d6:92:7b:cc:a6:28:ee:3a:84:e4:d0:b7:
ee:15:88:b9:5b:e6:ac:ef:de:5f:54:84:d7:90:ba:
8a:bf:21:7c:06:1d:cc:92:a4:84:62:f3:2f:62:46:
3a:77:48:e9:31:54:85:e4:88:48:02:4c:3e:6e:5b:
2f:15:d4:d5:fc:86:7f:60:65:93:70:36:40:46:ce:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B4:20:79:ED:55:D5:47:D5:2D:9C:31:1E:F9:BA:D4:24:35:D8:CF
X509v3 Authority Key Identifier:
keyid:9D:0E:30:80:79:2C:FA:9F:15:F0:3E:B3:FD:76:CA:68:C8:CD:E2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4wgHks-p8V8D6z_XbKaMjN4iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d8ac58-9a61-4852-9f2f-26f39384874f/1/nQ4wgHks-p8V8D6z_XbKaMjN4iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9c:e2:a3:3a:3c:85:d0:fd:ae:f1:b8:fe:39:13:6c:dd:d1:
ac:d9:97:13:2c:f2:36:f7:57:ea:93:c0:a7:73:84:66:f3:6e:
76:7b:4e:ae:ad:ff:af:ee:a5:85:ec:6d:ed:c7:10:10:7a:87:
9d:70:12:68:8c:aa:c5:99:d2:e2:4d:e4:ae:6f:e1:0a:63:b9:
75:f4:ef:62:01:12:31:38:21:f1:ba:ef:cc:6b:18:64:a1:24:
39:73:88:71:59:55:9a:fd:79:2e:84:48:48:d7:10:83:a8:d7:
12:2e:81:83:56:47:e0:b2:ec:15:90:c3:5b:31:f4:12:fd:96:
a3:48:dd:5b:2b:f0:e3:1d:fe:12:ad:4d:09:8e:62:6b:e4:29:
c7:7d:b0:07:f0:85:cb:12:f0:f7:56:33:7a:20:1a:f3:14:36:
4f:ef:39:c2:03:f2:41:9a:3b:6c:2f:cf:b7:cd:4f:26:22:40:
a8:af:4f:2b:ac:17:62:26:41:8d:20:1d:b6:c3:40:cd:6d:9c:
2b:95:ee:f0:88:35:80:94:89:5b:39:72:1f:19:31:4b:d0:be:
c0:c7:9f:57:ee:91:a2:bc:26:23:85:b8:52:78:7e:55:22:31:
17:56:69:20:2a:eb:82:a6:ed:58:91:e8:25:e7:6e:b2:c6:ae:
07:5a:23:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR6fBaVI+8/EF5e96BnuYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMGUzMDgwNzkyY2ZhOWYxNWYwM2ViM2ZkNzZjYTY4Yzhj
ZGUyMjAwHhcNMjYwNTEzMDMwMDUwWhcNMjYwNTE0MDMwMDUwWjAzMTEwLwYDVQQD
EyhlZWI0MjA3OWVkNTVkNTQ3ZDUyZDljMzExZWY5YmFkNDI0MzVkOGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3byQ1C9MqQoJv89iXFgiqxcxTWLc
kSeNbTTGUWA0Xty0RWOhGpPL8kBJQpMI6PajgLpU7ytw3ENsib05ETt8LD8tvOo5
Kp921QsB6TXM2t0+vvJAD9kGDFSvz1aGLulhMR97s3KhnXfS541ev2e2ilL8W0Pb
Nq+cdIn6vkO1RZSTAzwKvYYWUq4WMvXNovOfTyrYk0FSooYPCyUjamONmNs0fhUm
V9jDE2UgZ9lQnNb4jeYtQAHWknvMpijuOoTk0LfuFYi5W+as795fVITXkLqKvyF8
Bh3MkqSEYvMvYkY6d0jpMVSF5IhIAkw+blsvFdTV/IZ/YGWTcDZARs7ZpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO60IHntVdVH1S2cMR75utQkNdjPMB8GA1UdIwQY
MBaAFJ0OMIB5LPqfFfA+s/12ymjIzeIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblE0d2dIa3MtcDhWOEQ2el9YYkthTWpONGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kOGFjNTgtOWE2MS00ODUyLTlmMmYt
MjZmMzkzODQ4NzRmLzEvblE0d2dIa3MtcDhWOEQ2el9YYkthTWpONGlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9kOGFjNTgtOWE2MS00ODUyLTlmMmYtMjZmMzkzODQ4NzRm
LzEvblE0d2dIa3MtcDhWOEQ2el9YYkthTWpONGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZziozo8
hdD9rvG4/jkTbN3RrNmXEyzyNvdX6pPAp3OEZvNudntOrq3/r+6lhext7ccQEHqH
nXASaIyqxZnS4k3krm/hCmO5dfTvYgESMTgh8brvzGsYZKEkOXOIcVlVmv15LoRI
SNcQg6jXEi6Bg1ZH4LLsFZDDWzH0Ev2Wo0jdWyvw4x3+Eq1NCY5ia+Qpx32wB/CF
yxLw91YzeiAa8xQ2T+85wgPyQZo7bC/Pt81PJiJAqK9PK6wXYiZBjSAdtsNAzW2c
K5Xu8Ig1gJSJWzlyHxkxS9C+wMefV+6RorwmI4W4Unh+VSIxF1ZpICrrgqbtWJHo
JedussauB1ojog==
-----END CERTIFICATE-----
Generated at Wed May 13 14:01:26 2026 by rpki-client