Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
File: nVK4OxL6igcTLMgIM6ED4J2L0E8.mft (raw, json)
Hash identifier: dHHVyi/Nko9B/NwJYs+EqkBe5Jrz7EaA7KDFwiN0xkk=
Subject key identifier: D1:D4:8C:E9:73:D7:F6:51:34:43:AB:07:E2:A5:6A:C9:68:58:F6:48
Authority key identifier: 9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
Certificate issuer: /CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Certificate serial: 019D25839469FF0BB750B081C9EA8090388B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
Manifest number: 057E
Signing time: Wed 25 Mar 2026 15:01:13 +0000
Manifest this update: Wed 25 Mar 2026 15:01:13 +0000
Manifest next update: Thu 26 Mar 2026 15:01:13 +0000
Files and hashes: 1: EidzJCWNUyQpfWwfT7scfsDvqbQ.roa (hash: DXl1W2a36eg89T47v1wHSMBi3fnkBbmg5I1x8xEjCCU=)
2: nVK4OxL6igcTLMgIM6ED4J2L0E8.crl (hash: 5hgkWABX4FOddFW2QkUMt83u9pfZWz4nE8Xmu1dMWaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:94:69:ff:0b:b7:50:b0:81:c9:ea:80:90:38:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Validity
Not Before: Mar 25 15:01:13 2026 GMT
Not After : Mar 26 15:01:13 2026 GMT
Subject: CN=d1d48ce973d7f6513443ab07e2a56ac96858f648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:0b:dc:52:02:d0:03:33:a4:a5:d3:d6:8d:
9a:3c:bf:bd:90:f2:f6:dc:26:ac:3d:f7:76:fe:a6:
f8:92:43:d2:5d:8c:84:83:f4:0c:7f:3a:91:44:59:
fc:33:48:6e:70:a8:45:1a:52:11:49:57:9b:60:24:
14:e4:48:b7:78:cd:93:ac:42:15:78:8c:25:21:a8:
e3:ca:64:fe:1e:ef:53:24:2d:0d:9a:94:6d:14:ae:
0a:52:ad:32:72:05:eb:e2:3f:d4:8c:9b:f5:fd:86:
5d:77:5f:ae:98:79:3f:14:16:e3:0a:c3:05:e1:e9:
2d:af:82:a7:af:38:14:f1:be:1c:c1:eb:5b:f0:0c:
9a:a4:f5:7f:88:78:0b:3b:4f:a6:3d:ae:d5:88:dd:
0d:ee:21:1b:66:89:10:1c:7a:c5:81:14:e3:b8:0e:
05:75:5d:4f:92:70:b3:bb:0f:f3:cc:43:fe:96:d1:
33:e0:5a:b3:21:6f:33:20:f3:f3:3c:b5:95:d3:5c:
24:3f:bd:46:33:fa:45:ee:46:79:95:5d:58:05:fa:
d5:90:21:ec:8a:17:d4:db:95:b6:0d:76:5f:2b:2c:
72:3f:53:86:ba:28:bb:3c:fa:d5:5a:93:eb:c7:2f:
05:d5:e0:a7:38:ce:c0:e3:8e:1e:bd:43:00:bc:2b:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D4:8C:E9:73:D7:F6:51:34:43:AB:07:E2:A5:6A:C9:68:58:F6:48
X509v3 Authority Key Identifier:
keyid:9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fa:71:e4:3c:6c:ef:ff:0c:23:ab:91:62:1e:e5:92:9c:60:
ff:0c:6c:83:34:01:c7:04:99:50:35:b9:ad:78:23:20:c9:ee:
12:a0:3c:50:86:68:3e:22:fd:87:bf:ce:4d:84:59:2f:d4:11:
44:0c:ae:86:cc:58:94:fd:2e:7e:73:a3:78:9d:14:7c:34:29:
68:d2:b9:20:4b:35:a1:e8:a8:88:6a:d0:c3:f6:67:f3:c6:97:
33:ff:7f:8a:f9:86:02:5c:c7:17:e1:45:a5:4f:70:fe:f4:ff:
2d:b8:0a:31:a2:d6:45:09:65:10:7b:b2:07:29:8a:9f:f1:5b:
79:79:66:04:ce:da:b4:0d:df:1f:6e:05:7f:72:86:b6:68:ea:
57:fe:fb:3b:67:01:34:6d:42:06:6b:5a:58:0e:3f:bb:cc:21:
71:a3:fc:1b:fe:5e:7e:97:ef:f4:ec:aa:d8:d0:5a:e1:c3:6c:
91:84:3b:54:39:3b:a2:2d:34:3d:d4:ed:08:9f:7a:2e:b8:68:
80:4f:e6:29:46:d2:44:75:94:1c:db:fd:ab:8f:90:c4:bb:c9:
7c:8d:4a:00:84:55:1c:32:ea:69:ca:48:ac:5f:86:cd:ec:e5:
9c:7a:54:7e:17:e4:d2:1a:9a:d9:18:10:f6:2c:3e:1e:fc:77:
ac:e5:1a:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg5Rp/wu3ULCByeqAkDiLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNTJiODNiMTJmYThhMDcxMzJjYzgwODMzYTEwM2UwOWQ4
YmQwNGYwHhcNMjYwMzI1MTUwMTEzWhcNMjYwMzI2MTUwMTEzWjAzMTEwLwYDVQQD
EyhkMWQ0OGNlOTczZDdmNjUxMzQ0M2FiMDdlMmE1NmFjOTY4NThmNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL4L3FIC0AMzpKXT1o2aPL+9kPL2
3CasPfd2/qb4kkPSXYyEg/QMfzqRRFn8M0hucKhFGlIRSVebYCQU5Ei3eM2TrEIV
eIwlIajjymT+Hu9TJC0NmpRtFK4KUq0ycgXr4j/UjJv1/YZdd1+umHk/FBbjCsMF
4ektr4KnrzgU8b4cwetb8AyapPV/iHgLO0+mPa7ViN0N7iEbZokQHHrFgRTjuA4F
dV1PknCzuw/zzEP+ltEz4FqzIW8zIPPzPLWV01wkP71GM/pF7kZ5lV1YBfrVkCHs
ihfU25W2DXZfKyxyP1OGuii7PPrVWpPrxy8F1eCnOM7A444evUMAvCswoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHUjOlz1/ZRNEOrB+KlasloWPZIMB8GA1UdIwQY
MBaAFJ1SuDsS+ooHEyzICDOhA+Cdi9BPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YmEyMzItODkyOS00MTBkLWJkZGQt
ZTRiNmE5ZGY5YTM0LzEvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83YmEyMzItODkyOS00MTBkLWJkZGQtZTRiNmE5ZGY5YTM0
LzEvblZLNE94TDZpZ2NUTE1nSU02RUQ0SjJMMEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/px5Dxs
7/8MI6uRYh7lkpxg/wxsgzQBxwSZUDW5rXgjIMnuEqA8UIZoPiL9h7/OTYRZL9QR
RAyuhsxYlP0ufnOjeJ0UfDQpaNK5IEs1oeioiGrQw/Zn88aXM/9/ivmGAlzHF+FF
pU9w/vT/LbgKMaLWRQllEHuyBymKn/FbeXlmBM7atA3fH24Ff3KGtmjqV/77O2cB
NG1CBmtaWA4/u8whcaP8G/5efpfv9Oyq2NBa4cNskYQ7VDk7oi00PdTtCJ96Lrho
gE/mKUbSRHWUHNv9q4+QxLvJfI1KAIRVHDLqacpIrF+GzezlnHpUfhfk0hqa2RgQ
9iw+Hvx3rOUaRw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:38 2026 by rpki-client