Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
File: 1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json)
Hash identifier: DodtSAyAU7lZivO+nxBHVm/HbCRz5d11uVV1Tr6UBnw=
Subject key identifier: BA:4E:A9:1A:C6:52:45:A2:80:0B:BF:95:CA:2A:6B:4E:C8:94:D6:A7
Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Certificate serial: 01A0D01281217DB959604E6DE6769C18583A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
Manifest number: 0A4C
Signing time: Wed 23 Sep 2026 21:01:08 +0000
Manifest this update: Wed 23 Sep 2026 21:01:08 +0000
Manifest next update: Thu 24 Sep 2026 21:01:08 +0000
Files and hashes: 1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: IKyYuE5/7+KpHsGEJw3FW36rOWHDgnd0kqZ2EMCmzbc=)
2: LM0uXmLYYhwnNp4EP1dldnXK3Nc.roa (hash: CkETkgnVG1yQmzjfyTKrIRsozHVlr4Sy6Z354+68ntk=)
3: Y6fe3CdonyzdE2-RERGO1YBIZAM.roa (hash: 6EsQe2HhEwnxGCKyAU4cRVhcGOhEfVyiH50MYbWVP/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:81:21:7d:b9:59:60:4e:6d:e6:76:9c:18:58:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Validity
Not Before: Sep 23 21:01:08 2026 GMT
Not After : Sep 24 21:01:08 2026 GMT
Subject: CN=ba4ea91ac65245a2800bbf95ca2a6b4ec894d6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:ab:a7:c0:db:64:3d:94:2a:0a:a6:e7:6b:
8b:2d:fa:ae:d3:8f:e1:10:9d:ef:86:e2:e9:3a:c7:
23:d0:d1:51:03:74:09:8f:49:cf:99:6a:ab:c2:ec:
bd:07:88:0a:75:83:18:98:fe:b8:7b:6f:7f:05:ce:
be:79:80:6b:3b:3e:34:3b:20:58:83:b1:b9:41:8f:
0a:09:5a:78:85:ab:c7:a9:e4:08:38:80:da:de:9a:
32:3d:20:4b:50:4a:a5:ef:7a:b2:a3:8d:2a:b1:20:
1b:c9:55:27:6b:0c:c6:51:60:6e:14:db:e3:3c:98:
7d:29:12:9b:90:d3:01:01:97:75:65:eb:1a:5a:e6:
7b:b3:66:a4:96:14:c0:a7:43:6b:7b:43:f2:4d:8c:
78:7f:cb:ff:22:69:66:69:e7:46:8b:a1:db:82:e9:
c2:37:4b:8c:9c:c3:f0:27:12:dc:21:fc:26:e6:ad:
1d:95:28:45:ef:0c:79:b7:a5:23:e4:00:22:4d:4f:
2d:6e:75:1b:41:ef:95:f1:24:27:d9:24:81:af:5a:
16:5b:c9:86:44:26:15:9c:ae:ed:39:15:44:dc:ba:
0f:89:c7:a2:df:d2:42:68:07:d3:c5:9a:d7:ec:ab:
af:5e:b7:d6:89:17:3c:6b:b4:83:4d:6d:ba:a6:29:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4E:A9:1A:C6:52:45:A2:80:0B:BF:95:CA:2A:6B:4E:C8:94:D6:A7
X509v3 Authority Key Identifier:
keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:83:f2:ef:23:6c:60:ae:fc:36:03:d7:76:f7:40:78:f5:d5:
73:8e:21:3d:08:15:f7:d3:7f:a5:5c:aa:b0:2f:cd:45:91:89:
0e:77:cb:b5:b3:e3:c0:22:d1:6e:b2:9e:c1:36:35:75:bc:04:
f8:22:f0:25:86:02:0d:cf:c9:4c:7b:c7:a9:16:91:80:90:b7:
12:97:b9:2e:4e:32:45:31:30:2d:90:29:7a:91:24:cb:b4:85:
19:49:6b:68:7d:98:c1:7c:52:f2:7e:03:3e:7e:18:62:0c:f3:
01:52:fa:85:5e:80:04:7e:a9:60:ef:d4:92:64:e0:49:3a:e2:
64:94:22:a9:32:4a:22:84:ea:bc:65:54:4a:39:36:7d:43:64:
35:11:aa:31:3b:10:2d:c0:f6:7b:5b:64:d7:2d:6e:24:ab:9c:
55:98:07:aa:ef:9c:ae:9a:8c:84:16:4c:7c:67:31:c6:e2:b8:
29:fe:a8:5e:1e:ad:8a:31:b2:57:c6:ef:55:90:06:f8:49:71:
1d:24:4e:de:9d:00:64:a7:a2:8e:3e:05:33:d5:4b:f2:66:1f:
be:fe:18:e0:87:07:3e:f6:49:ab:99:94:40:25:ba:c2:64:5b:
af:79:4c:bd:42:92:ab:2d:97:1c:b6:13:d0:76:8c:af:a1:57:
19:1b:bc:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEoEhfblZYE5t5nacGFg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZDY1Y2EzNGE5NjhiMGQ4NTYxYWI4Nzc2ZGJiMDJkZGI3
Yzc4MzMwHhcNMjYwOTIzMjEwMTA4WhcNMjYwOTI0MjEwMTA4WjAzMTEwLwYDVQQD
EyhiYTRlYTkxYWM2NTI0NWEyODAwYmJmOTVjYTJhNmI0ZWM4OTRkNmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL6rp8DbZD2UKgqm52uLLfqu04/h
EJ3vhuLpOscj0NFRA3QJj0nPmWqrwuy9B4gKdYMYmP64e29/Bc6+eYBrOz40OyBY
g7G5QY8KCVp4havHqeQIOIDa3poyPSBLUEql73qyo40qsSAbyVUnawzGUWBuFNvj
PJh9KRKbkNMBAZd1ZesaWuZ7s2aklhTAp0Nre0PyTYx4f8v/ImlmaedGi6HbgunC
N0uMnMPwJxLcIfwm5q0dlShF7wx5t6Uj5AAiTU8tbnUbQe+V8SQn2SSBr1oWW8mG
RCYVnK7tORVE3LoPicei39JCaAfTxZrX7KuvXrfWiRc8a7SDTW26pimKiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpOqRrGUkWigAu/lcoqa07IlNanMB8GA1UdIwQY
MBaAFNTWXKNKlosNhWGrh3bbsC3bfHgzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGIt
MzJlZmY5NWIzOWRjLzEvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGItMzJlZmY5NWIzOWRj
LzEvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4Py7yNs
YK78NgPXdvdAePXVc44hPQgV99N/pVyqsC/NRZGJDnfLtbPjwCLRbrKewTY1dbwE
+CLwJYYCDc/JTHvHqRaRgJC3Epe5Lk4yRTEwLZApepEky7SFGUlraH2YwXxS8n4D
Pn4YYgzzAVL6hV6ABH6pYO/UkmTgSTriZJQiqTJKIoTqvGVUSjk2fUNkNRGqMTsQ
LcD2e1tk1y1uJKucVZgHqu+crpqMhBZMfGcxxuK4Kf6oXh6tijGyV8bvVZAG+Elx
HSRO3p0AZKeijj4FM9VL8mYfvv4Y4IcHPvZJq5mUQCW6wmRbr3lMvUKSqy2XHLYT
0HaMr6FXGRu8Dw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:08:05 2026 by rpki-client