Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
File: nSAoCNH5FFVeG9WcFncof_mztZA.mft (raw, json)
Hash identifier: tp1T2k4rtlCxw28Um0TamTZjTuBkOcP2126ALTVgj3U=
Subject key identifier: 42:36:8E:E4:A0:6B:E3:C8:E5:CE:4D:3B:44:C0:93:F7:DF:98:C4:66
Authority key identifier: 9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
Certificate issuer: /CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Certificate serial: 01A0DA960ECD5EF367CCCB945D993DC3C717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
Manifest number: 147B
Signing time: Fri 25 Sep 2026 22:01:02 +0000
Manifest this update: Fri 25 Sep 2026 22:01:02 +0000
Manifest next update: Sat 26 Sep 2026 22:01:02 +0000
Files and hashes: 1: 8hQk0KTYs3g5ZR66-EC5Vv0X6G8.roa (hash: xP2My60JlMvvPw+zYTcbdyBWhfmdlTseIN2HIlpIMRY=)
2: nSAoCNH5FFVeG9WcFncof_mztZA.crl (hash: kIxfQs/MIlhQOSK7DKF4LhS3kwhfa+/qrHq5NtUhjww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:0e:cd:5e:f3:67:cc:cb:94:5d:99:3d:c3:c7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Validity
Not Before: Sep 25 22:01:02 2026 GMT
Not After : Sep 26 22:01:02 2026 GMT
Subject: CN=42368ee4a06be3c8e5ce4d3b44c093f7df98c466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:93:1f:12:98:1b:95:a2:b4:cb:5d:65:2e:47:
25:05:44:ed:09:89:ea:6f:d1:16:f1:b5:f8:11:5e:
69:23:4f:b0:79:bb:f5:5d:2d:29:47:8e:34:53:98:
7a:ad:d5:e1:c2:18:e8:4b:9d:29:0d:ee:a2:55:00:
ec:de:34:b7:cf:28:6a:38:dd:86:96:0b:bb:e6:8f:
d5:47:be:5d:60:0e:50:1f:18:41:da:32:d1:cf:42:
8a:fd:c1:c7:37:3d:e1:bb:7f:7d:78:2a:17:ea:68:
f0:0f:f3:13:de:f5:6a:a8:03:2d:3d:83:d6:b0:2d:
32:73:19:62:fe:df:2a:cc:0b:2b:ff:2a:c9:29:79:
c3:16:cc:5a:15:4a:bf:e7:9a:00:0b:d5:9f:20:61:
e6:51:c9:08:ab:0c:e5:7d:77:18:d2:1f:95:bc:87:
b0:d5:d2:d6:85:82:14:e6:76:e5:47:75:dd:d7:f8:
d3:7d:45:27:84:7e:30:97:ae:bd:23:ad:b8:70:16:
03:eb:4c:80:cd:da:60:b5:d8:7a:29:86:cc:e7:2c:
79:c6:a9:bf:d7:5a:9f:5f:2c:c1:bf:4a:ce:e3:62:
7f:88:95:f9:87:45:49:86:fb:7f:72:80:71:86:54:
2c:cf:0c:64:60:fc:ea:bb:ff:55:59:16:08:58:ec:
f3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:36:8E:E4:A0:6B:E3:C8:E5:CE:4D:3B:44:C0:93:F7:DF:98:C4:66
X509v3 Authority Key Identifier:
keyid:9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:06:5a:4f:ff:6c:f6:34:8f:41:75:8a:41:db:7f:eb:6e:e4:
cc:f5:61:19:6d:6e:33:d0:70:94:75:5f:47:db:ab:f7:af:6c:
70:e6:d0:47:bb:37:da:3a:11:ca:cc:9b:6f:2e:42:97:4b:4f:
f4:cd:be:ac:f9:e9:fd:ec:5b:a2:24:5b:0e:9c:eb:b4:b6:a0:
de:41:3c:e6:07:c2:8e:21:31:3a:5a:9e:af:f4:b2:a7:ea:f0:
d5:93:8c:38:ff:d7:46:7a:ed:5b:c5:cc:a3:1a:99:58:97:fb:
69:fe:ff:e3:20:7e:a0:b7:0a:af:b6:72:b3:8a:45:5a:06:63:
04:b1:d8:64:0b:7f:fc:9d:67:2a:15:62:81:da:17:a9:e1:65:
18:13:47:9f:f1:dd:26:0f:1e:75:07:ca:79:3d:81:92:3f:e5:
13:86:d8:c4:25:54:67:b0:9c:fd:31:cd:d7:a8:92:6a:f5:1b:
eb:74:9e:ef:cd:9c:7f:7a:91:7a:58:8d:5d:0d:26:41:64:93:
73:3b:e5:ae:e7:f1:65:be:07:6b:9e:2d:63:9e:c2:40:7b:da:
e7:c4:ba:43:f3:01:03:55:78:c7:8a:9d:ee:7b:5a:29:d7:5b:
cc:34:e8:11:0f:20:e1:ec:7c:a9:c6:33:e5:bd:cf:74:7c:e0:
b3:1c:f6:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDalg7NXvNnzMuUXZk9w8cXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjAyODA4ZDFmOTE0NTU1ZTFiZDU5YzE2NzcyODdmZjli
M2I1OTAwHhcNMjYwOTI1MjIwMTAyWhcNMjYwOTI2MjIwMTAyWjAzMTEwLwYDVQQD
Eyg0MjM2OGVlNGEwNmJlM2M4ZTVjZTRkM2I0NGMwOTNmN2RmOThjNDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpMfEpgblaK0y11lLkclBUTtCYnq
b9EW8bX4EV5pI0+webv1XS0pR440U5h6rdXhwhjoS50pDe6iVQDs3jS3zyhqON2G
lgu75o/VR75dYA5QHxhB2jLRz0KK/cHHNz3hu399eCoX6mjwD/MT3vVqqAMtPYPW
sC0ycxli/t8qzAsr/yrJKXnDFsxaFUq/55oAC9WfIGHmUckIqwzlfXcY0h+VvIew
1dLWhYIU5nblR3Xd1/jTfUUnhH4wl669I624cBYD60yAzdpgtdh6KYbM5yx5xqm/
11qfXyzBv0rO42J/iJX5h0VJhvt/coBxhlQszwxkYPzqu/9VWRYIWOzzUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEI2juSga+PI5c5NO0TAk/ffmMRmMB8GA1UdIwQY
MBaAFJ0gKAjR+RRVXhvVnBZ3KH/5s7WQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNBb0NOSDVGRlZlRzlXY0ZuY29mX216dFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9hNWMwNjktODA2MS00ZGVlLTk1Njgt
ODgwYjJkZjU3ZjI1LzEvblNBb0NOSDVGRlZlRzlXY0ZuY29mX216dFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9hNWMwNjktODA2MS00ZGVlLTk1NjgtODgwYjJkZjU3ZjI1
LzEvblNBb0NOSDVGRlZlRzlXY0ZuY29mX216dFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvAZaT/9s
9jSPQXWKQdt/627kzPVhGW1uM9BwlHVfR9ur969scObQR7s32joRysybby5Cl0tP
9M2+rPnp/exboiRbDpzrtLag3kE85gfCjiExOlqer/Syp+rw1ZOMOP/XRnrtW8XM
oxqZWJf7af7/4yB+oLcKr7Zys4pFWgZjBLHYZAt//J1nKhVigdoXqeFlGBNHn/Hd
Jg8edQfKeT2Bkj/lE4bYxCVUZ7Cc/THN16iSavUb63Se782cf3qReliNXQ0mQWST
czvlrufxZb4Ha54tY57CQHva58S6Q/MBA1V4x4qd7ntaKddbzDToEQ8g4ex8qcYz
5b3PdHzgsxz2bA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:55:42 2026 by rpki-client