Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: ymYQhuD5zo08X1yYHIs/q6pY38Si/2Wv9Jbac8x0jU0=
Subject key identifier: 13:C2:9C:CF:1B:7E:08:1C:92:96:38:C9:5D:7B:EB:C2:4D:83:60:6D
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 01A1DB01411D1FC0B4C4CD8AED91B12B3505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 1A44
Signing time: Sat 14 Nov 2026 17:00:54 +0000
Manifest this update: Sat 14 Nov 2026 17:00:54 +0000
Manifest next update: Sun 15 Nov 2026 17:00:54 +0000
Files and hashes: 1: _uU5ssxCIcQAM3SMyMjxB94UIdI.roa (hash: tSyW1+iSOIbLDd34f8vgQPxMHckfLQ3hITt8+wBJJ/8=)
2: hKnH4_PBXV3UF-XGZ7oON7TpqG0.roa (hash: 5fNEwIWTM8f5kPudjLWMTnzG5MVAJgnQ7t3OXyoc4xg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: LG+qtrs9URYsHj1oB6rlDUVINzgUNXflmLeniH+f5Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:01:41:1d:1f:c0:b4:c4:cd:8a:ed:91:b1:2b:35:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Nov 14 17:00:54 2026 GMT
Not After : Nov 15 17:00:54 2026 GMT
Subject: CN=13c29ccf1b7e081c929638c95d7bebc24d83606d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:48:48:71:21:e7:25:6f:fa:9b:7b:24:fa:
6d:8f:17:de:3c:44:b0:26:c4:85:07:49:bf:81:13:
63:5a:ec:46:d3:81:b9:05:be:b4:0d:36:a5:af:79:
5e:04:50:2d:c3:71:33:93:88:69:b5:ad:2c:41:6e:
9a:34:56:ed:02:aa:af:0c:a4:e3:d5:60:0e:35:b3:
30:2b:fa:34:32:59:c6:c7:5d:45:4b:7e:37:2f:87:
9d:16:2c:2d:88:dc:d7:a2:fd:c9:f8:f8:8a:93:ce:
4d:91:16:19:9d:51:fc:83:ae:69:7e:2d:9d:39:90:
fd:df:f4:84:0d:56:a8:e4:e4:55:23:9e:bc:a9:f2:
03:ab:8e:02:df:9d:6e:fd:9e:b6:5c:cb:82:a0:87:
15:9d:35:9f:af:73:27:0a:c9:85:e0:29:9c:39:5b:
81:2d:3d:50:55:1d:3f:fc:cf:07:11:a3:44:e6:87:
b6:15:e7:00:09:49:aa:71:63:49:b0:26:09:7d:3a:
5b:bf:2b:cf:dc:bf:f5:7f:e8:ad:c6:b9:70:2f:99:
6c:b9:e8:bd:0c:28:79:94:f8:94:4b:df:62:55:52:
ca:e5:32:35:c2:44:67:71:c0:59:9f:16:43:7b:8e:
79:68:12:a6:35:05:8d:89:9f:13:00:bf:8f:15:14:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C2:9C:CF:1B:7E:08:1C:92:96:38:C9:5D:7B:EB:C2:4D:83:60:6D
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:81:06:90:9b:4a:c2:6b:f8:9f:41:bd:e9:a3:08:82:a3:27:
b1:5c:d7:e7:71:44:44:a5:31:a2:fe:d1:8e:a6:ee:59:05:b6:
13:78:a7:4f:cc:71:84:34:34:2d:6b:0e:82:3a:ab:8f:4c:ac:
aa:34:de:ce:b1:8d:11:08:4a:61:4d:d0:66:38:2f:98:92:3e:
0b:bb:0c:71:34:27:6a:07:7f:f8:57:64:31:ed:40:e2:47:ba:
c8:be:62:53:fe:cd:8f:e3:74:27:99:47:ab:ff:1a:6f:69:92:
37:f9:3f:94:f9:41:08:98:33:11:f7:8c:e4:9a:eb:73:70:55:
5e:2c:1d:df:c6:1c:c5:9c:81:d7:fd:23:3a:6e:76:b9:fd:84:
d6:97:bd:3a:59:14:13:8b:90:be:5c:86:9e:35:d5:b9:ce:1e:
1a:41:ac:4c:02:9c:08:a3:ee:f5:bd:ed:06:af:dc:ae:f1:19:
19:34:8c:58:e6:a9:5b:b9:14:48:2e:35:3d:31:68:63:57:8e:
62:cc:00:6c:b3:08:8e:7c:41:81:41:62:33:fb:e0:e5:3d:41:
54:86:9d:0c:3c:a3:09:41:77:fe:34:fe:56:7c:de:49:ae:04:
13:55:21:04:9d:46:52:14:e5:3f:bf:f8:81:10:6c:9e:5b:85:
97:b6:06:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbAUEdH8C0xM2K7ZGxKzUFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZDA3NTg4MjVkZDg5Y2ZlZTVmZGVjYzdkY2I2NTFmMGE1
ZDEwMTgwHhcNMjYxMTE0MTcwMDU0WhcNMjYxMTE1MTcwMDU0WjAzMTEwLwYDVQQD
EygxM2MyOWNjZjFiN2UwODFjOTI5NjM4Yzk1ZDdiZWJjMjRkODM2MDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry9ISHEh5yVv+pt7JPptjxfePESw
JsSFB0m/gRNjWuxG04G5Bb60DTalr3leBFAtw3Ezk4hpta0sQW6aNFbtAqqvDKTj
1WAONbMwK/o0MlnGx11FS343L4edFiwtiNzXov3J+PiKk85NkRYZnVH8g65pfi2d
OZD93/SEDVao5ORVI568qfIDq44C351u/Z62XMuCoIcVnTWfr3MnCsmF4CmcOVuB
LT1QVR0//M8HEaNE5oe2FecACUmqcWNJsCYJfTpbvyvP3L/1f+itxrlwL5lsuei9
DCh5lPiUS99iVVLK5TI1wkRnccBZnxZDe455aBKmNQWNiZ8TAL+PFRQcWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPCnM8bfggckpY4yV1768JNg2BtMB8GA1UdIwQY
MBaAFJzQdYgl3YnP7l/ezH3LZR8KXRAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk5CMWlDWGRpY191WDk3TWZjdGxId3BkRUJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wZTY1MWUtOTBjNy00YWNkLTk3Yjkt
YTU0ZjhlNDgxM2U3LzEvbk5CMWlDWGRpY191WDk3TWZjdGxId3BkRUJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wZTY1MWUtOTBjNy00YWNkLTk3YjktYTU0ZjhlNDgxM2U3
LzEvbk5CMWlDWGRpY191WDk3TWZjdGxId3BkRUJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIEGkJtK
wmv4n0G96aMIgqMnsVzX53FERKUxov7RjqbuWQW2E3inT8xxhDQ0LWsOgjqrj0ys
qjTezrGNEQhKYU3QZjgvmJI+C7sMcTQnagd/+FdkMe1A4ke6yL5iU/7Nj+N0J5lH
q/8ab2mSN/k/lPlBCJgzEfeM5Jrrc3BVXiwd38YcxZyB1/0jOm52uf2E1pe9OlkU
E4uQvlyGnjXVuc4eGkGsTAKcCKPu9b3tBq/crvEZGTSMWOapW7kUSC41PTFoY1eO
YswAbLMIjnxBgUFiM/vg5T1BVIadDDyjCUF3/jT+VnzeSa4EE1UhBJ1GUhTlP7/4
gRBsnluFl7YGjA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:41:23 2026 by rpki-client