Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
File: nYnnxT6SR534EXHrqvI2CgN8Mkg.mft (raw, json)
Hash identifier: IC7DN++iMqLvd7/7HrOphzvzZcnHLU44zwIozIQUb1I=
Subject key identifier: 08:0C:12:05:34:A3:F2:F7:06:6B:F4:AA:F2:DC:A5:55:58:F4:A4:C3
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial: 01A106CA190D776DEED3B0D6231615E07258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
Manifest number: 1337
Signing time: Sun 04 Oct 2026 12:01:10 +0000
Manifest this update: Sun 04 Oct 2026 12:01:10 +0000
Manifest next update: Mon 05 Oct 2026 12:01:10 +0000
Files and hashes: 1: ercPbtahy3f9eM5GSzohbTGgqsw.roa (hash: 6i0HSVm0VOwA3Kxo8s7D20nC5SFv01ATtGPCU/ddYG0=)
2: nYnnxT6SR534EXHrqvI2CgN8Mkg.crl (hash: DqUACC2/mOzhtulIvVGSPBA1Ql0j5RMbYhnA3MncWlk=)
3: vmIjf2ea1b5ZbkV2jBRhH4g9FnA.asa (hash: 6b8Tpx55XUsVFkjanfbwXE/OmqC9SLGgWKXzepRWWCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:ca:19:0d:77:6d:ee:d3:b0:d6:23:16:15:e0:72:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Validity
Not Before: Oct 4 12:01:10 2026 GMT
Not After : Oct 5 12:01:10 2026 GMT
Subject: CN=080c120534a3f2f7066bf4aaf2dca55558f4a4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2f:fa:85:f1:63:c6:8d:0d:1d:b3:c3:ff:89:
d3:bd:64:b6:dc:34:ac:1d:c8:08:1a:fa:c9:da:55:
c0:ed:0c:55:94:da:e7:26:5a:89:9e:37:be:9f:e6:
4f:fd:ce:33:65:4c:09:99:51:5b:51:82:9d:dd:cf:
ec:2c:fb:94:42:8a:59:02:42:bf:14:36:83:d8:bb:
2d:71:60:9f:c4:3b:d7:c9:57:3e:6e:69:a2:e2:75:
f0:6c:64:62:fb:16:51:c0:0a:17:e8:76:d6:8d:f3:
b7:3e:71:a7:de:40:3a:50:f7:bf:58:5e:80:32:25:
86:11:2e:86:6e:f8:60:42:fb:cc:83:4c:ed:4f:d5:
6c:58:ba:d2:0b:70:3f:f8:c3:ba:aa:68:38:f8:d7:
ab:8d:5f:65:36:64:2b:96:9d:fb:23:53:0d:65:3b:
e0:75:8c:7c:6a:04:2b:bf:b7:e3:d8:97:28:cd:99:
64:0d:d5:dc:61:48:89:bd:88:dd:76:fe:f2:f7:a5:
47:6a:cc:07:89:8b:11:65:8e:40:55:b7:c2:17:67:
a0:c8:80:32:e5:f2:77:1c:2d:e3:7e:81:e2:43:99:
2a:cc:a6:4a:83:db:65:a4:64:d2:7b:cc:b2:bf:0b:
ab:d4:39:47:a8:26:f6:03:aa:29:be:c2:29:7b:3c:
66:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0C:12:05:34:A3:F2:F7:06:6B:F4:AA:F2:DC:A5:55:58:F4:A4:C3
X509v3 Authority Key Identifier:
keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e7:06:19:5f:74:3e:99:80:ac:16:c8:be:f9:4b:ad:a1:d9:
bf:21:b3:d6:f7:09:c2:cb:e2:6d:57:26:19:31:0d:d0:b8:5f:
2d:91:ed:fa:04:00:7c:20:a1:47:cc:1f:3e:e8:05:78:dd:7c:
cb:3e:2a:13:a8:e8:af:c8:7d:7e:60:88:df:c2:10:53:9d:0f:
49:5b:09:93:a8:ad:be:83:18:58:59:a4:d5:04:2d:81:1a:be:
5a:a2:f5:08:b1:02:eb:b1:d4:57:69:de:fd:7f:11:a1:ad:4a:
4d:01:a5:45:97:5d:2d:69:3e:57:4c:5a:62:53:a7:e3:8d:63:
c6:cf:83:30:e0:eb:ef:69:fa:60:0d:56:71:ac:5e:d9:32:b6:
f6:7a:ef:95:fb:0f:f0:54:a1:15:70:4b:e4:4c:f2:3b:5c:33:
e3:37:c8:7b:2a:cb:60:18:4a:e0:66:a0:bc:21:c8:78:22:9a:
0e:0b:99:69:e8:fa:3b:88:4a:fb:2c:f8:87:b9:89:e3:4a:41:
7a:52:32:a8:8c:12:0f:df:a8:66:56:72:01:5d:83:91:15:1e:
27:04:57:ac:cc:c2:6c:ac:7a:b1:00:f0:2d:1c:45:d8:3c:f5:
6c:23:d9:f0:62:0c:de:fa:0e:6d:b2:f7:2e:d0:7a:b8:c8:a4:
b6:ac:41:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGyhkNd23u07DWIxYV4HJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkODllN2M1M2U5MjQ3OWRmODExNzFlYmFhZjIzNjBhMDM3
YzMyNDgwHhcNMjYxMDA0MTIwMTEwWhcNMjYxMDA1MTIwMTEwWjAzMTEwLwYDVQQD
EygwODBjMTIwNTM0YTNmMmY3MDY2YmY0YWFmMmRjYTU1NTU4ZjRhNGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC/6hfFjxo0NHbPD/4nTvWS23DSs
HcgIGvrJ2lXA7QxVlNrnJlqJnje+n+ZP/c4zZUwJmVFbUYKd3c/sLPuUQopZAkK/
FDaD2LstcWCfxDvXyVc+bmmi4nXwbGRi+xZRwAoX6HbWjfO3PnGn3kA6UPe/WF6A
MiWGES6GbvhgQvvMg0ztT9VsWLrSC3A/+MO6qmg4+NerjV9lNmQrlp37I1MNZTvg
dYx8agQrv7fj2JcozZlkDdXcYUiJvYjddv7y96VHaswHiYsRZY5AVbfCF2egyIAy
5fJ3HC3jfoHiQ5kqzKZKg9tlpGTSe8yyvwur1DlHqCb2A6opvsIpezxmGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgMEgU0o/L3Bmv0qvLcpVVY9KTDMB8GA1UdIwQY
MBaAFJ2J58U+kked+BFx66ryNgoDfDJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMDRjNzYtOTk2MC00OTc5LTg2MGMt
ODlhNjhlNWEyMTEwLzEvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMDRjNzYtOTk2MC00OTc5LTg2MGMtODlhNjhlNWEyMTEw
LzEvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+cGGV90
PpmArBbIvvlLraHZvyGz1vcJwsvibVcmGTEN0LhfLZHt+gQAfCChR8wfPugFeN18
yz4qE6jor8h9fmCI38IQU50PSVsJk6itvoMYWFmk1QQtgRq+WqL1CLEC67HUV2ne
/X8Roa1KTQGlRZddLWk+V0xaYlOn441jxs+DMODr72n6YA1Wcaxe2TK29nrvlfsP
8FShFXBL5EzyO1wz4zfIeyrLYBhK4GagvCHIeCKaDguZaej6O4hK+yz4h7mJ40pB
elIyqIwSD9+oZlZyAV2DkRUeJwRXrMzCbKx6sQDwLRxF2Dz1bCPZ8GIM3voObbL3
LtB6uMiktqxBng==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:49:57 2026 by rpki-client