Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
File: nRsJrQnDR1asNA3Y6hSRqMf8toc.mft (raw, json)
Hash identifier: lXgeVFNRdQpkuAV1nZ1nCaYDZG8vSqjk0h9s/QWqDH0=
Subject key identifier: 3A:08:C0:BD:77:EF:14:D1:BA:72:55:9B:2D:1A:17:D4:99:7A:F3:3E
Authority key identifier: 9D:1B:09:AD:09:C3:47:56:AC:34:0D:D8:EA:14:91:A8:C7:FC:B6:87
Certificate issuer: /CN=9d1b09ad09c34756ac340dd8ea1491a8c7fcb687
Certificate serial: 01A0DBAA03769AF218E5FA2C5268889B7742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRsJrQnDR1asNA3Y6hSRqMf8toc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
Manifest number: EB
Signing time: Sat 26 Sep 2026 03:02:27 +0000
Manifest this update: Sat 26 Sep 2026 03:02:27 +0000
Manifest next update: Sun 27 Sep 2026 03:02:27 +0000
Files and hashes: 1: nRsJrQnDR1asNA3Y6hSRqMf8toc.crl (hash: jsJM27sejB/A+v5SHtythSh4P0uj4QQ5N/wFOovt8e0=)
2: yR0dGVdEjAMjDpMr_9w6lM09S4Q.roa (hash: umwlZGJl591xCRTw6gLVt5FDOEtVDC3jktYmPDdcoaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRsJrQnDR1asNA3Y6hSRqMf8toc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:aa:03:76:9a:f2:18:e5:fa:2c:52:68:88:9b:77:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1b09ad09c34756ac340dd8ea1491a8c7fcb687
Validity
Not Before: Sep 26 03:02:27 2026 GMT
Not After : Sep 27 03:02:27 2026 GMT
Subject: CN=3a08c0bd77ef14d1ba72559b2d1a17d4997af33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:35:dc:ae:9e:7e:26:3f:90:e8:90:65:8b:
69:4e:a1:33:a4:d3:03:5e:4d:83:98:0a:04:9b:92:
49:59:51:12:8e:96:98:4c:1c:f5:a2:e0:e5:ee:9e:
6e:8a:b5:31:9a:ce:19:ce:83:24:e8:1d:df:08:9e:
19:40:dc:2c:d0:7a:2b:81:98:f0:ec:63:cc:1c:83:
44:1c:1c:40:21:a9:10:73:ab:20:aa:25:d0:4b:63:
aa:e5:66:32:80:dd:03:17:ed:8e:08:31:7f:3f:14:
26:b5:09:85:5c:6f:a2:c7:44:47:f9:05:c4:97:cc:
b0:6e:56:7a:98:05:52:6d:cf:42:29:73:b1:c8:a9:
a9:97:b1:b6:e0:8c:02:bf:98:a4:3c:b1:ad:5c:2d:
83:0e:3f:e2:e2:1f:3a:84:b5:b9:e3:86:4a:03:27:
a8:22:58:59:e7:40:4e:81:91:c6:5a:ba:44:b6:b4:
20:2a:7f:4f:37:23:4f:26:a2:49:57:78:3b:c9:5b:
77:f1:0f:69:aa:50:23:5d:68:7b:78:f1:6a:17:4c:
53:cc:38:c6:89:95:fe:db:d7:80:2d:cb:21:d5:2d:
38:09:62:46:6b:83:9d:50:09:f9:3b:63:00:51:1f:
7c:7c:f6:46:03:9e:ec:57:1f:b8:9b:a6:c5:89:c9:
68:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:08:C0:BD:77:EF:14:D1:BA:72:55:9B:2D:1A:17:D4:99:7A:F3:3E
X509v3 Authority Key Identifier:
keyid:9D:1B:09:AD:09:C3:47:56:AC:34:0D:D8:EA:14:91:A8:C7:FC:B6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRsJrQnDR1asNA3Y6hSRqMf8toc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/nRsJrQnDR1asNA3Y6hSRqMf8toc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ff:5b:46:e3:27:e4:f7:f6:4a:80:20:0a:37:ff:2c:d9:c2:
2a:e7:cc:4f:d4:a2:cc:27:16:52:29:b8:cc:85:b2:7f:c8:54:
1b:fc:4a:60:db:58:bf:47:e2:26:5d:c2:45:49:ac:cc:bb:9c:
52:1f:83:27:0c:56:c9:a5:94:24:36:56:6c:99:42:49:61:a0:
43:e3:27:2a:8b:16:26:8e:15:c9:9c:7c:c3:66:92:4a:d1:19:
61:31:ad:42:62:0e:fb:3b:b5:50:ac:ca:23:a3:c9:46:8a:e7:
69:db:ec:da:36:a6:d5:6e:b7:45:a7:46:9b:05:b6:a6:4f:62:
85:88:6b:b1:65:e5:c5:00:58:04:b2:cd:00:97:98:6d:18:58:
0d:f8:44:87:17:f6:9f:b8:a2:70:53:09:14:3e:35:73:e9:84:
4f:25:f7:0a:b5:06:3f:ba:cb:d9:31:bc:a4:37:a2:dd:34:9c:
ed:f5:1c:a4:92:3d:1d:6a:92:27:6a:0a:8b:80:b8:41:27:6d:
0f:5c:9d:c0:0a:93:03:bf:49:30:30:f9:cf:81:13:34:94:ca:
b2:ff:05:c2:a4:56:c2:9c:ca:af:02:d0:f8:2a:ef:78:9f:6b:
15:a9:21:94:71:ac:bf:37:59:36:97:db:40:45:85:3d:10:ed:
a8:8a:ed:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbqgN2mvIY5fosUmiIm3dCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMWIwOWFkMDljMzQ3NTZhYzM0MGRkOGVhMTQ5MWE4Yzdm
Y2I2ODcwHhcNMjYwOTI2MDMwMjI3WhcNMjYwOTI3MDMwMjI3WjAzMTEwLwYDVQQD
EygzYTA4YzBiZDc3ZWYxNGQxYmE3MjU1OWIyZDFhMTdkNDk5N2FmMzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu013K6efiY/kOiQZYtpTqEzpNMD
Xk2DmAoEm5JJWVESjpaYTBz1ouDl7p5uirUxms4ZzoMk6B3fCJ4ZQNws0HorgZjw
7GPMHINEHBxAIakQc6sgqiXQS2Oq5WYygN0DF+2OCDF/PxQmtQmFXG+ix0RH+QXE
l8ywblZ6mAVSbc9CKXOxyKmpl7G24IwCv5ikPLGtXC2DDj/i4h86hLW544ZKAyeo
IlhZ50BOgZHGWrpEtrQgKn9PNyNPJqJJV3g7yVt38Q9pqlAjXWh7ePFqF0xTzDjG
iZX+29eALcsh1S04CWJGa4OdUAn5O2MAUR98fPZGA57sVx+4m6bFicloMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoIwL137xTRunJVmy0aF9SZevM+MB8GA1UdIwQY
MBaAFJ0bCa0Jw0dWrDQN2OoUkajH/LaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblJzSnJRbkRSMWFzTkEzWTZoU1JxTWY4dG9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMDc3ODgtODUwMi00NTQxLTk0ODAt
OGY0OGEzNzAyZjkwLzEvblJzSnJRbkRSMWFzTkEzWTZoU1JxTWY4dG9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8xMDc3ODgtODUwMi00NTQxLTk0ODAtOGY0OGEzNzAyZjkw
LzEvblJzSnJRbkRSMWFzTkEzWTZoU1JxTWY4dG9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/9bRuMn
5Pf2SoAgCjf/LNnCKufMT9SizCcWUim4zIWyf8hUG/xKYNtYv0fiJl3CRUmszLuc
Uh+DJwxWyaWUJDZWbJlCSWGgQ+MnKosWJo4VyZx8w2aSStEZYTGtQmIO+zu1UKzK
I6PJRornadvs2jam1W63RadGmwW2pk9ihYhrsWXlxQBYBLLNAJeYbRhYDfhEhxf2
n7iicFMJFD41c+mETyX3CrUGP7rL2TG8pDei3TSc7fUcpJI9HWqSJ2oKi4C4QSdt
D1ydwAqTA79JMDD5z4ETNJTKsv8FwqRWwpzKrwLQ+CrveJ9rFakhlHGsvzdZNpfb
QEWFPRDtqIrtuA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:14:58 2026 by rpki-client