Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: U+VCAkhMeYaLb3adwj6+QLOvWpUbgTYrlMt7yvImw30=
Subject key identifier: B7:29:E7:27:0A:D6:B8:8F:C6:83:F3:BA:38:39:0A:8A:F0:67:B2:55
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 01A1DCF09021507AD81A7C6181C85CC3A124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0E2A
Signing time: Sun 15 Nov 2026 02:01:55 +0000
Manifest this update: Sun 15 Nov 2026 02:01:55 +0000
Manifest next update: Mon 16 Nov 2026 02:01:55 +0000
Files and hashes: 1: MErwd1Mq4UEFUDPDVrQybXm2CvY.roa (hash: uVVbYrkENvX/85rsAwj7JFO62uhL0Fv5S9tclaCyMho=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: G0zuZ/UhyjpxMiO26o/pkdtV07M48121Lc7XjDvH2ag=)
3: tl1f86llPD22KqYkoRY9Jm1PXyE.roa (hash: ul9AiFBUfTck4Svk3QXKlfp7mOg49JnGIM3eiu8rsOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:90:21:50:7a:d8:1a:7c:61:81:c8:5c:c3:a1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Nov 15 02:01:55 2026 GMT
Not After : Nov 16 02:01:55 2026 GMT
Subject: CN=b729e7270ad6b88fc683f3ba38390a8af067b255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:50:e0:d2:98:1b:8e:63:e4:a7:67:29:4a:87:
55:93:43:9e:70:80:90:e4:66:cd:93:df:1a:b9:e0:
cd:87:da:64:15:32:9e:74:82:5c:df:95:99:43:b3:
8a:43:93:51:8a:33:3e:04:43:c1:8e:ff:be:88:a2:
f7:b4:e8:3d:23:65:eb:d6:a0:36:db:ac:c9:95:c5:
20:71:6b:bc:1d:5e:03:b7:2f:2e:83:86:23:4f:1c:
4a:bb:86:1e:ad:e0:41:1d:4e:3d:79:df:c5:eb:e7:
9e:16:1e:63:a2:79:65:b8:b2:50:1f:92:27:c7:13:
2d:33:f8:7b:2c:03:96:cd:1e:a3:83:8c:7a:3e:95:
49:dc:c9:73:a0:81:95:16:e6:16:0d:e9:16:97:0f:
7c:64:47:ca:96:9f:df:3b:f5:c1:98:ef:26:22:74:
d5:41:45:d8:c7:8c:aa:87:f1:d5:89:10:83:42:46:
38:10:90:1e:e7:cf:a3:ef:13:19:7a:46:bf:2d:97:
f6:1b:7d:45:8a:0d:e2:25:78:d7:cd:19:93:81:8c:
c9:25:c1:d6:c1:9e:b5:a3:57:d9:92:5b:2d:cc:cc:
52:3d:aa:6b:aa:4e:4a:1d:b1:9c:b0:3f:90:56:1c:
72:ed:04:95:3f:7b:22:9a:a9:95:4d:4e:80:9d:4e:
b6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:29:E7:27:0A:D6:B8:8F:C6:83:F3:BA:38:39:0A:8A:F0:67:B2:55
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3e:02:71:e7:cf:ae:33:5a:cb:42:b3:8f:d2:5b:63:11:2c:
2e:3b:7b:e5:cf:75:33:d3:aa:fc:7e:3b:57:a0:23:b8:2f:4f:
f6:9c:50:b5:a4:4d:3c:8c:39:5a:86:e4:12:37:2e:54:4b:89:
28:d1:25:52:99:87:8a:de:33:05:71:c9:0e:17:02:8f:93:0e:
59:28:f9:08:9c:75:23:49:6c:17:43:3a:59:43:92:cc:e3:f1:
e7:6f:55:0e:1b:4e:15:5a:f3:ee:88:6d:1a:18:b7:27:0e:a5:
87:b9:5b:97:5a:bf:d9:77:65:90:dd:f1:1d:99:c6:61:43:7c:
e3:a1:68:6a:d9:73:4b:ad:27:12:b9:d5:ab:27:da:57:c9:63:
70:76:6f:61:08:29:eb:0b:64:32:e5:98:79:dd:57:db:33:e4:
af:b2:92:6c:98:83:f4:4a:93:2b:5c:6e:74:45:0f:30:31:40:
94:d6:fd:fc:72:fe:c0:28:37:68:8c:9f:0e:5f:9c:87:1b:bd:
08:52:62:61:e6:6d:cc:08:f7:44:0e:6b:91:64:43:25:43:cf:
f5:13:24:3d:2a:ce:a9:25:7d:36:df:f4:15:00:2d:d5:3b:45:
4b:64:1d:c1:65:83:4d:72:f5:6b:6e:c6:1c:14:bf:5c:dd:ec:
df:ab:1b:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHc8JAhUHrYGnxhgchcw6EkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMjFhNWU0Y2Y2ZTllMmU3MDMzOGFlZWJmYTBkMTU4OGQ3
M2I2ZWYwHhcNMjYxMTE1MDIwMTU1WhcNMjYxMTE2MDIwMTU1WjAzMTEwLwYDVQQD
EyhiNzI5ZTcyNzBhZDZiODhmYzY4M2YzYmEzODM5MGE4YWYwNjdiMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVDg0pgbjmPkp2cpSodVk0OecICQ
5GbNk98aueDNh9pkFTKedIJc35WZQ7OKQ5NRijM+BEPBjv++iKL3tOg9I2Xr1qA2
26zJlcUgcWu8HV4Dty8ug4YjTxxKu4YereBBHU49ed/F6+eeFh5jonlluLJQH5In
xxMtM/h7LAOWzR6jg4x6PpVJ3MlzoIGVFuYWDekWlw98ZEfKlp/fO/XBmO8mInTV
QUXYx4yqh/HViRCDQkY4EJAe58+j7xMZeka/LZf2G31Fig3iJXjXzRmTgYzJJcHW
wZ61o1fZklstzMxSPaprqk5KHbGcsD+QVhxy7QSVP3simqmVTU6AnU62XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcp5ycK1riPxoPzujg5CorwZ7JVMB8GA1UdIwQY
MBaAFJwhpeTPbp4ucDOK7r+g0ViNc7bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi84Y2NlODYtYjBhZS00MTY2LTkwNDIt
NTI4ZWZmNTJmZWJkLzEvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi84Y2NlODYtYjBhZS00MTY2LTkwNDItNTI4ZWZmNTJmZWJk
LzEvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARj4CcefP
rjNay0Kzj9JbYxEsLjt75c91M9Oq/H47V6AjuC9P9pxQtaRNPIw5WobkEjcuVEuJ
KNElUpmHit4zBXHJDhcCj5MOWSj5CJx1I0lsF0M6WUOSzOPx529VDhtOFVrz7oht
Ghi3Jw6lh7lbl1q/2XdlkN3xHZnGYUN846FoatlzS60nErnVqyfaV8ljcHZvYQgp
6wtkMuWYed1X2zPkr7KSbJiD9EqTK1xudEUPMDFAlNb9/HL+wCg3aIyfDl+chxu9
CFJiYeZtzAj3RA5rkWRDJUPP9RMkPSrOqSV9Nt/0FQAt1TtFS2QdwWWDTXL1a27G
HBS/XN3s36sbyQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 09:28:09 2026 by rpki-client