Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: 2J8s1lBVdNGEBoIwOdT4uITcEMvZA5P4UA5x/Z79sB8=
Subject key identifier: 30:FE:4E:11:7A:D7:26:72:3F:D8:C0:28:80:0A:E6:5C:0F:0A:22:A5
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 01A0E81CA5E3836EC0FFEB24BB67419CEBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 069B
Signing time: Mon 28 Sep 2026 13:03:06 +0000
Manifest this update: Mon 28 Sep 2026 13:03:06 +0000
Manifest next update: Tue 29 Sep 2026 13:03:06 +0000
Files and hashes: 1: lhZip7UvzYKdzGiZ0tPsdJoF6UE.roa (hash: n78Qk1sKl/U25w9WagO90oIcVWTzYwbz5zXkkQhwHOI=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: dN+t0Ap3noB//O+KhlRC3Q/r8YDFGTjKtu8bAqGN0Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:a5:e3:83:6e:c0:ff:eb:24:bb:67:41:9c:eb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Sep 28 13:03:06 2026 GMT
Not After : Sep 29 13:03:06 2026 GMT
Subject: CN=30fe4e117ad726723fd8c028800ae65c0f0a22a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:ae:07:a3:6c:03:92:1b:a2:57:8f:7b:b3:
56:02:01:a9:af:dc:ff:d9:48:b0:dc:23:79:de:5c:
e1:e3:06:80:88:d8:da:e9:ef:be:7c:f9:cb:57:47:
d7:ad:cd:cf:78:e6:94:db:95:c6:9b:6c:d1:7a:0e:
7f:f8:e1:f9:98:5e:72:8d:2a:46:12:22:f1:8b:e2:
60:4d:d5:6b:3f:e3:6f:ec:2c:ac:39:75:14:ce:ab:
e6:c5:d3:fd:02:82:48:7f:14:4b:c4:0a:f2:44:ae:
27:70:54:01:ae:47:f0:b6:d1:ac:6a:34:9b:47:c3:
72:4d:5a:69:6c:2d:1a:17:ea:22:18:24:93:b9:9a:
0e:70:c0:dc:bc:d1:85:59:83:86:c7:4d:94:4c:89:
73:53:7d:e8:23:66:9f:cb:82:f5:34:a7:a4:a6:a2:
f1:83:24:2e:5e:c9:85:7e:c4:ae:fe:23:cd:ac:21:
81:36:0a:a6:de:72:30:83:e8:8a:74:ac:db:93:0c:
d1:25:64:59:17:09:02:1e:c0:b4:d7:99:73:02:fc:
45:ed:41:8b:c5:34:2b:03:24:cc:7e:ca:a6:2b:af:
dc:d8:ed:ad:71:c8:66:d5:ce:62:49:84:31:1d:9e:
a5:94:90:b6:c4:6b:d6:19:49:3a:3d:07:8a:aa:c2:
82:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FE:4E:11:7A:D7:26:72:3F:D8:C0:28:80:0A:E6:5C:0F:0A:22:A5
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:65:a9:4a:c2:15:b5:e8:c4:db:8d:e4:b0:70:c1:d6:49:43:
4a:16:a8:58:32:85:83:a7:e8:66:f1:b2:d0:c4:b6:9a:91:06:
1c:ef:ae:6f:fd:f8:61:75:cd:a6:fa:50:43:62:c9:7d:e2:d3:
51:a0:e2:d9:05:31:5b:9c:b7:14:51:a7:16:b2:97:73:d2:73:
83:91:2d:1c:60:4c:0f:cf:04:4c:34:c1:a0:46:c2:ea:1f:01:
b5:98:8a:fc:c6:d9:33:08:51:70:8f:b1:5c:50:af:a5:6f:cb:
b5:ac:7f:7a:41:05:f1:90:b0:dc:5c:c0:fd:27:a0:4e:9e:f8:
46:3f:af:9e:1c:9a:29:1f:15:a7:00:3b:c8:85:28:15:50:f9:
91:19:0a:1e:fe:7e:4e:33:7c:54:39:81:b6:55:4d:90:52:32:
20:ab:c9:0b:27:5e:1f:cd:75:2f:12:ce:95:2e:1d:50:bf:18:
ed:44:56:ed:e0:5c:f3:88:a9:65:4c:fe:c6:2d:94:00:6f:7e:
ae:cc:b2:c9:38:ea:bd:4c:0b:64:61:9a:94:12:b3:c5:9b:b7:
43:0f:de:69:c8:92:33:cf:b6:ca:ef:76:33:b9:07:da:73:68:
d3:53:7b:48:42:0a:fa:af:4e:a2:22:04:56:3d:d5:c2:3d:95:
65:61:d4:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoHKXjg27A/+sku2dBnOvjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzVjMzVkOTg2ODZmM2Q4YTM4NzQxNzFiMTQzMjg3ZjVl
M2U3MzMwHhcNMjYwOTI4MTMwMzA2WhcNMjYwOTI5MTMwMzA2WjAzMTEwLwYDVQQD
EygzMGZlNGUxMTdhZDcyNjcyM2ZkOGMwMjg4MDBhZTY1YzBmMGEyMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTOuB6NsA5IbolePe7NWAgGpr9z/
2Uiw3CN53lzh4waAiNja6e++fPnLV0fXrc3PeOaU25XGm2zReg5/+OH5mF5yjSpG
EiLxi+JgTdVrP+Nv7CysOXUUzqvmxdP9AoJIfxRLxAryRK4ncFQBrkfwttGsajSb
R8NyTVppbC0aF+oiGCSTuZoOcMDcvNGFWYOGx02UTIlzU33oI2afy4L1NKekpqLx
gyQuXsmFfsSu/iPNrCGBNgqm3nIwg+iKdKzbkwzRJWRZFwkCHsC015lzAvxF7UGL
xTQrAyTMfsqmK6/c2O2tcchm1c5iSYQxHZ6llJC2xGvWGUk6PQeKqsKCswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDD+ThF61yZyP9jAKIAK5lwPCiKlMB8GA1UdIwQY
MBaAFJzFw12YaG89ijh0FxsUMof14+czMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEt
ZTg3NTEwM2ZhZjEyLzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEtZTg3NTEwM2ZhZjEy
LzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2WpSsIV
tejE243ksHDB1klDShaoWDKFg6foZvGy0MS2mpEGHO+ub/34YXXNpvpQQ2LJfeLT
UaDi2QUxW5y3FFGnFrKXc9Jzg5EtHGBMD88ETDTBoEbC6h8BtZiK/MbZMwhRcI+x
XFCvpW/Ltax/ekEF8ZCw3FzA/SegTp74Rj+vnhyaKR8VpwA7yIUoFVD5kRkKHv5+
TjN8VDmBtlVNkFIyIKvJCydeH811LxLOlS4dUL8Y7URW7eBc84ipZUz+xi2UAG9+
rsyyyTjqvUwLZGGalBKzxZu3Qw/eaciSM8+2yu92M7kH2nNo01N7SEIK+q9OoiIE
Vj3Vwj2VZWHUuw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:49:19 2026 by rpki-client