Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
File: NOFy8gusVmf_hcr_gLRTZ1jm2po.mft (raw, json)
Hash identifier: i/SINsnpK6OyMT3b1/z3vgBLDa3dZgkMhX4swAxeIIQ=
Subject key identifier: DB:8A:83:05:1C:8C:CC:61:B9:DA:E3:C7:2A:40:F0:F9:B4:AF:E1:C2
Authority key identifier: 34:E1:72:F2:0B:AC:56:67:FF:85:CA:FF:80:B4:53:67:58:E6:DA:9A
Certificate issuer: /CN=34e172f20bac5667ff85caff80b4536758e6da9a
Certificate serial: 01A0D011F2390241DEDE1CEEF0D0CF6AE370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOFy8gusVmf_hcr_gLRTZ1jm2po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:00:32 +0000
Manifest this update: Wed 23 Sep 2026 21:00:32 +0000
Manifest next update: Thu 24 Sep 2026 21:00:32 +0000
Files and hashes: 1: ESRoyyzD6nuIbg2v7a5fFcPEEtM.roa (hash: 6CkIgU30ZTpBXP27tZUxeNY4xYkwYzV9C1Gfa7vFkz4=)
2: NOFy8gusVmf_hcr_gLRTZ1jm2po.crl (hash: gZbKDXIGCvpJjsInJp5dvDLIvXIXOuZL59YRDc1Q8To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOFy8gusVmf_hcr_gLRTZ1jm2po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:f2:39:02:41:de:de:1c:ee:f0:d0:cf:6a:e3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e172f20bac5667ff85caff80b4536758e6da9a
Validity
Not Before: Sep 23 21:00:32 2026 GMT
Not After : Sep 24 21:00:32 2026 GMT
Subject: CN=db8a83051c8ccc61b9dae3c72a40f0f9b4afe1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d3:4c:44:1c:9a:bb:0b:c8:20:c9:0a:e3:20:
68:c5:35:97:29:44:9d:0b:8c:7e:3b:e8:16:a5:f3:
38:ef:9b:80:a6:6e:5d:9a:13:ee:a0:ee:e6:34:7f:
a1:4a:b0:10:d5:5b:0e:0e:e9:a1:de:0b:e3:78:57:
98:e6:ea:75:c5:71:db:74:cf:15:e9:2f:86:0a:95:
e5:74:2a:af:e4:c4:7f:b3:89:99:ab:cb:67:5c:2e:
10:f4:7b:75:05:03:dc:34:49:f0:ad:30:be:98:47:
74:c0:24:4d:a0:55:18:e7:78:62:1c:47:07:bc:40:
c9:8b:08:c9:89:0b:a0:d6:4e:5d:f2:4d:55:de:4d:
2e:b9:db:24:ae:fc:ac:4f:03:ce:96:09:ac:49:04:
06:97:50:de:ad:cc:ea:c1:aa:23:d1:aa:56:34:2d:
af:28:3b:7c:16:a6:f5:fb:e3:86:60:ac:53:26:fb:
e6:3a:d6:d6:88:bb:5a:6e:87:6a:ea:c5:79:f7:27:
70:b4:2f:e2:6b:48:62:6e:b6:fa:c0:ee:b6:25:9d:
c5:d7:38:d4:3e:eb:b0:b8:ef:6e:d8:61:ae:a1:d2:
55:eb:56:1a:a9:a8:26:07:c2:46:c5:ea:43:0a:79:
be:4a:47:fa:84:23:37:03:e7:34:14:9b:a2:d2:91:
ab:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8A:83:05:1C:8C:CC:61:B9:DA:E3:C7:2A:40:F0:F9:B4:AF:E1:C2
X509v3 Authority Key Identifier:
keyid:34:E1:72:F2:0B:AC:56:67:FF:85:CA:FF:80:B4:53:67:58:E6:DA:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOFy8gusVmf_hcr_gLRTZ1jm2po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:70:8b:3c:38:14:f1:46:30:9a:cb:93:04:8a:a8:d9:13:2c:
26:29:5a:ba:55:c0:74:46:bc:26:8a:54:87:d6:f7:fb:2f:05:
ab:02:d8:22:6c:fe:bd:13:cf:40:a4:38:48:7b:1c:73:02:22:
57:a3:22:54:7b:c9:c6:df:fe:d4:fd:33:3f:86:cb:41:07:fe:
55:ac:9f:10:5e:d6:39:0c:0e:90:b9:f5:4a:c8:5c:8a:d5:12:
3e:d6:1a:4f:c7:b0:79:a3:e3:68:68:72:77:2c:a2:0a:b8:b8:
5f:5b:4d:52:42:51:d8:83:72:0a:1c:88:27:db:6f:af:9b:db:
5e:63:89:2a:28:92:c5:c4:88:79:1c:4c:0f:8b:42:68:2b:ed:
9f:f3:d7:94:b5:7d:be:f8:22:6f:42:f3:21:d8:8d:f6:bb:40:
42:bd:e8:a3:ab:fb:05:ba:c7:15:4f:e1:7a:4f:dd:a1:fc:cc:
0d:89:7b:1d:4a:82:61:7d:37:ad:56:04:d3:a6:2b:11:27:15:
9f:f8:d3:23:65:85:36:95:66:87:18:3a:ad:e9:e1:cb:e4:2a:
04:26:e7:5f:d8:de:f5:ee:68:be:98:cc:9d:e4:dd:8b:fe:87:
75:a0:93:0c:71:36:de:62:d4:42:a2:25:1c:01:14:66:bd:ca:
a9:b2:d0:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEfI5AkHe3hzu8NDPauNwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZTE3MmYyMGJhYzU2NjdmZjg1Y2FmZjgwYjQ1MzY3NThl
NmRhOWEwHhcNMjYwOTIzMjEwMDMyWhcNMjYwOTI0MjEwMDMyWjAzMTEwLwYDVQQD
EyhkYjhhODMwNTFjOGNjYzYxYjlkYWUzYzcyYTQwZjBmOWI0YWZlMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NNMRByauwvIIMkK4yBoxTWXKUSd
C4x+O+gWpfM475uApm5dmhPuoO7mNH+hSrAQ1VsODumh3gvjeFeY5up1xXHbdM8V
6S+GCpXldCqv5MR/s4mZq8tnXC4Q9Ht1BQPcNEnwrTC+mEd0wCRNoFUY53hiHEcH
vEDJiwjJiQug1k5d8k1V3k0uudskrvysTwPOlgmsSQQGl1Derczqwaoj0apWNC2v
KDt8Fqb1++OGYKxTJvvmOtbWiLtabodq6sV59ydwtC/ia0hibrb6wO62JZ3F1zjU
PuuwuO9u2GGuodJV61YaqagmB8JGxepDCnm+Skf6hCM3A+c0FJui0pGrXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuKgwUcjMxhudrjxypA8Pm0r+HCMB8GA1UdIwQY
MBaAFDThcvILrFZn/4XK/4C0U2dY5tqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk9GeThndXNWbWZfaGNyX2dMUlRaMWptMnBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZjM2YjYtZDcwMS00MzM1LWFmMzAt
NDhmZTYzM2IxYjNmLzEvTk9GeThndXNWbWZfaGNyX2dMUlRaMWptMnBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yZjM2YjYtZDcwMS00MzM1LWFmMzAtNDhmZTYzM2IxYjNm
LzEvTk9GeThndXNWbWZfaGNyX2dMUlRaMWptMnBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnCLPDgU
8UYwmsuTBIqo2RMsJilaulXAdEa8JopUh9b3+y8FqwLYImz+vRPPQKQ4SHsccwIi
V6MiVHvJxt/+1P0zP4bLQQf+VayfEF7WOQwOkLn1SshcitUSPtYaT8eweaPjaGhy
dyyiCri4X1tNUkJR2INyChyIJ9tvr5vbXmOJKiiSxcSIeRxMD4tCaCvtn/PXlLV9
vvgib0LzIdiN9rtAQr3oo6v7BbrHFU/hek/dofzMDYl7HUqCYX03rVYE06YrEScV
n/jTI2WFNpVmhxg6renhy+QqBCbnX9je9e5ovpjMneTdi/6HdaCTDHE23mLUQqIl
HAEUZr3KqbLQLQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:04:35 2026 by rpki-client