Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: FzfSld7ZFEEUnnUdw9uBUfEt7l4pP4xDC/lIcd+6uvU=
Subject key identifier: 33:FE:CD:7F:7C:87:45:7F:F0:14:CD:96:A3:E2:88:62:14:78:5C:AB
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 019D27A8E2F884CE3941CF15D739BAE66642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 01:01:12 +0000
Manifest this update: Thu 26 Mar 2026 01:01:12 +0000
Manifest next update: Fri 27 Mar 2026 01:01:12 +0000
Files and hashes: 1: VEb6LUknY6TAB--bLPap2buV2rQ.roa (hash: VfylxmQnc3Muyj1Trwo1dEbBUHPDFWZL/o1oaD+MsA8=)
2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: 4A5ZUEfhm2zRzGg/+im5SBaeKBD+LFACepbdV8WTZSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e2:f8:84:ce:39:41:cf:15:d7:39:ba:e6:66:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Mar 26 01:01:12 2026 GMT
Not After : Mar 27 01:01:12 2026 GMT
Subject: CN=33fecd7f7c87457ff014cd96a3e2886214785cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:6f:8b:1d:b6:2f:ce:85:64:30:8e:97:62:
b0:f3:b4:8b:b0:c3:0a:2c:89:ba:86:e7:9f:ab:bc:
e4:f5:b0:4f:80:50:f5:d9:7e:ba:d4:4c:95:0a:0b:
c5:f7:d5:81:26:59:88:2a:db:b1:ce:77:57:7b:04:
ac:f9:6c:15:10:69:f9:ca:9f:08:e7:71:e1:57:7f:
21:1c:e0:a4:5c:89:e1:31:2e:98:f6:c4:44:d3:eb:
02:98:18:d0:cd:8c:e4:20:e3:fb:8d:4a:09:85:aa:
17:73:f3:d9:29:09:51:d0:b5:15:77:f5:61:30:df:
b4:19:81:ef:49:94:4c:33:50:8f:30:67:8a:bf:bb:
22:a7:68:4d:b2:d0:08:a3:b1:8d:95:8c:85:1c:87:
a7:a2:7d:4a:b6:05:d8:c8:3c:c5:3e:f1:c8:f0:c9:
57:36:6e:91:d2:60:ad:cf:f8:29:47:e4:fa:44:b3:
2d:2a:4b:82:4d:2e:1f:de:7c:36:c9:ed:85:e4:28:
df:ce:00:da:10:59:b6:32:d7:7d:23:73:2a:4f:f1:
2f:82:c5:e2:45:b0:99:48:93:b5:3f:7c:2f:3d:e7:
2d:88:f7:0c:d1:8e:23:1f:e4:0f:37:da:33:09:0d:
cd:32:10:59:fc:9b:85:66:ea:3b:dc:0a:20:d1:d0:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FE:CD:7F:7C:87:45:7F:F0:14:CD:96:A3:E2:88:62:14:78:5C:AB
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cc:f5:8e:e2:9c:b8:bf:d8:ba:8a:df:a3:fa:e9:38:a1:3f:
c2:db:af:36:b7:0b:ed:f4:d6:97:af:5e:20:f2:e0:68:70:b8:
43:1d:6d:29:34:be:79:49:79:0e:1b:15:26:21:10:8d:66:33:
3e:5b:ce:25:bb:1b:2d:a5:e6:7a:fc:0e:6d:b3:2d:39:1d:12:
1d:99:45:7d:57:6c:e2:01:cc:f1:05:ad:c1:7d:c3:1a:10:50:
bb:02:2c:a4:07:d8:64:46:7b:dd:ac:06:ed:0f:04:d8:8f:7c:
d8:f9:1b:2e:90:b3:34:b5:83:07:6e:0e:ee:c7:2a:96:b5:54:
7b:21:35:15:1f:80:2c:1d:d3:33:53:12:69:dd:36:bd:f9:ae:
62:51:1b:9b:7a:16:39:3e:44:66:0a:04:79:50:5d:63:a0:a8:
bd:90:f6:1f:7a:36:05:6e:fb:6a:0e:06:b1:0f:86:9e:76:b7:
e6:43:1e:67:27:6b:ae:60:f9:46:32:a3:89:0c:32:c7:ad:20:
4f:4a:42:de:22:55:ee:57:02:fe:6a:b1:2a:61:41:e1:b1:4f:
b2:39:c2:5a:2d:04:98:16:4f:d5:c2:10:bf:7b:20:ee:ab:cf:
ff:c8:86:8c:a2:27:42:bb:69:99:ff:e2:2f:97:10:90:4d:1e:
ed:52:49:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqOL4hM45Qc8V1zm65mZCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNzhlZmJlNjc4NmY5ZTIwMmM0Mjc4OGUxYmJmNzE3ODFj
YThjNDcwHhcNMjYwMzI2MDEwMTEyWhcNMjYwMzI3MDEwMTEyWjAzMTEwLwYDVQQD
EygzM2ZlY2Q3ZjdjODc0NTdmZjAxNGNkOTZhM2UyODg2MjE0Nzg1Y2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopdvix22L86FZDCOl2Kw87SLsMMK
LIm6huefq7zk9bBPgFD12X661EyVCgvF99WBJlmIKtuxzndXewSs+WwVEGn5yp8I
53HhV38hHOCkXInhMS6Y9sRE0+sCmBjQzYzkIOP7jUoJhaoXc/PZKQlR0LUVd/Vh
MN+0GYHvSZRMM1CPMGeKv7sip2hNstAIo7GNlYyFHIenon1KtgXYyDzFPvHI8MlX
Nm6R0mCtz/gpR+T6RLMtKkuCTS4f3nw2ye2F5CjfzgDaEFm2Mtd9I3MqT/EvgsXi
RbCZSJO1P3wvPectiPcM0Y4jH+QPN9ozCQ3NMhBZ/JuFZuo73Aog0dDYCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDP+zX98h0V/8BTNlqPiiGIUeFyrMB8GA1UdIwQY
MBaAFJx4775nhvniAsQniOG79xeByoxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80YzE2NDItODBmMy00NTIzLTk3NGQt
NGZjMWNhZDhhYjIyLzEvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80YzE2NDItODBmMy00NTIzLTk3NGQtNGZjMWNhZDhhYjIy
LzEvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8z1juKc
uL/Yuorfo/rpOKE/wtuvNrcL7fTWl69eIPLgaHC4Qx1tKTS+eUl5DhsVJiEQjWYz
PlvOJbsbLaXmevwObbMtOR0SHZlFfVds4gHM8QWtwX3DGhBQuwIspAfYZEZ73awG
7Q8E2I982PkbLpCzNLWDB24O7scqlrVUeyE1FR+ALB3TM1MSad02vfmuYlEbm3oW
OT5EZgoEeVBdY6CovZD2H3o2BW77ag4GsQ+Gnna35kMeZydrrmD5RjKjiQwyx60g
T0pC3iJV7lcC/mqxKmFB4bFPsjnCWi0EmBZP1cIQv3sg7qvP/8iGjKInQrtpmf/i
L5cQkE0e7VJJKw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:22:47 2026 by rpki-client