Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
File: n-lNLu3NgkrB3nSt42wfnWnUlso.mft (raw, json)
Hash identifier: KRE4/aZ/l5ORDa/uUwT3Me8+BVs0rGO8ub/1DdgDLK8=
Subject key identifier: C9:3A:9C:08:28:5D:7A:1A:87:55:B0:84:BC:CE:32:F7:19:9D:B5:CC
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial: 01A0DD97D086C5BD26507A9BBD9B26B791C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
Manifest number: 095E
Signing time: Sat 26 Sep 2026 12:01:48 +0000
Manifest this update: Sat 26 Sep 2026 12:01:48 +0000
Manifest next update: Sun 27 Sep 2026 12:01:48 +0000
Files and hashes: 1: IxSOqG3VKiGzkrHVsxe1NDwRPlQ.roa (hash: COV4hg+LgsDZn9oz3/oU/egGJ+3yB4BuGfUdkH+oFDI=)
2: n-lNLu3NgkrB3nSt42wfnWnUlso.crl (hash: vliLCKb17En7BxuHDJYWoSOLXchE9cMR+cyrw0faheU=)
3: p9sadlQLRMoFQLA1QXaKKY23LjQ.roa (hash: HShX7yQDvzKtFJFjK3t2BxQA1/vBYI4tq5fNWg1k4xY=)
4: ugyXshHr8wuLJhM8Vr2WcFZCUG4.roa (hash: yVgEXEDLqTUHDzrLVVJTJnKbB6aMI3zrlCtjybaz+8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:d0:86:c5:bd:26:50:7a:9b:bd:9b:26:b7:91:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Validity
Not Before: Sep 26 12:01:48 2026 GMT
Not After : Sep 27 12:01:48 2026 GMT
Subject: CN=c93a9c08285d7a1a8755b084bcce32f7199db5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:04:a2:e9:bb:6b:5b:1c:a4:cc:90:56:ff:
a4:2a:b0:9d:21:83:67:9b:02:23:28:ee:a9:46:2e:
7a:12:9b:4d:94:29:f2:92:b4:0c:d9:1b:eb:99:b3:
3b:e7:11:cc:30:2a:04:e3:f0:e3:48:80:93:79:f8:
9b:ac:da:2e:28:95:1a:84:94:b3:60:5f:33:e9:0c:
c5:43:c1:d2:4e:34:8c:ce:e7:49:0d:4d:8c:bf:37:
6c:8e:ee:62:14:a0:7c:0e:80:22:39:9a:10:aa:2a:
dd:d0:75:7f:d3:6a:49:42:fb:c2:e1:63:fa:11:36:
50:3f:3e:57:b3:39:de:90:b8:3b:bb:cf:35:d5:1e:
a2:0e:13:d5:dd:3b:dc:a8:61:7b:2e:e5:42:19:59:
d7:68:c0:7b:cc:86:0a:5f:59:9b:1a:46:94:a1:2a:
f2:16:c0:20:e8:0c:51:8c:99:bd:1f:8d:8d:34:64:
a4:38:13:ce:ad:44:72:31:71:81:23:ce:9c:cf:d5:
47:05:d5:57:1f:d3:ca:37:a5:aa:51:13:96:88:13:
8e:33:3c:cc:d5:ae:8d:52:28:00:f1:d7:60:99:f9:
03:1e:bb:3a:65:07:2a:e3:6d:25:57:87:c2:84:67:
49:66:fa:62:d9:cf:7b:c4:ae:28:bf:21:2f:d9:a7:
e0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3A:9C:08:28:5D:7A:1A:87:55:B0:84:BC:CE:32:F7:19:9D:B5:CC
X509v3 Authority Key Identifier:
keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2e:e0:65:ca:7d:c3:61:4f:dc:9f:6b:f9:98:fb:61:12:a3:
cd:41:c6:01:45:1e:09:48:b3:fd:78:a7:70:9e:94:ae:2d:57:
73:72:e7:0f:57:af:e6:32:b3:f7:f8:12:75:6f:ef:71:ac:a9:
ed:8c:59:db:6f:89:99:68:74:d8:c1:cc:cf:29:a8:98:7c:c9:
24:d2:e1:45:d4:e6:a3:02:9c:e4:e2:dd:77:fc:70:77:38:98:
0f:f6:7b:9f:57:f0:96:61:c3:07:af:f3:63:86:e3:1f:bf:b3:
6f:c8:5e:f8:cc:ac:d2:ce:8a:5d:bb:a7:18:84:f5:13:7b:7b:
f2:1f:49:15:7e:47:ca:59:bb:f6:20:f4:44:03:3a:62:18:f4:
ac:e1:2f:5e:79:23:18:65:31:d0:d4:5a:52:df:ac:14:de:bf:
5c:62:e9:70:42:f7:92:c9:53:c1:9c:b9:92:cf:2c:20:87:48:
1d:34:d5:05:d4:e0:bb:94:ef:8f:f7:ea:d4:80:23:8a:49:db:
df:6e:c0:b2:bc:7e:06:37:fe:c7:ca:18:37:e6:f9:89:3e:ad:
ad:86:6d:f7:33:43:66:c8:42:be:a4:11:4b:6f:d6:b7:ca:af:
74:3e:91:5f:dd:8c:26:94:30:c3:d4:6c:2e:a0:ff:38:49:24:
a0:b6:4f:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdl9CGxb0mUHqbvZsmt5HGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTk0ZDJlZWRjZDgyNGFjMWRlNzRhZGUzNmMxZjlkNjlk
NDk2Y2EwHhcNMjYwOTI2MTIwMTQ4WhcNMjYwOTI3MTIwMTQ4WjAzMTEwLwYDVQQD
EyhjOTNhOWMwODI4NWQ3YTFhODc1NWIwODRiY2NlMzJmNzE5OWRiNWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVcEoum7a1scpMyQVv+kKrCdIYNn
mwIjKO6pRi56EptNlCnykrQM2RvrmbM75xHMMCoE4/DjSICTefibrNouKJUahJSz
YF8z6QzFQ8HSTjSMzudJDU2Mvzdsju5iFKB8DoAiOZoQqird0HV/02pJQvvC4WP6
ETZQPz5XsznekLg7u8811R6iDhPV3TvcqGF7LuVCGVnXaMB7zIYKX1mbGkaUoSry
FsAg6AxRjJm9H42NNGSkOBPOrURyMXGBI86cz9VHBdVXH9PKN6WqUROWiBOOMzzM
1a6NUigA8ddgmfkDHrs6ZQcq420lV4fChGdJZvpi2c97xK4ovyEv2afgVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMk6nAgoXXoah1WwhLzOMvcZnbXMMB8GA1UdIwQY
MBaAFJ/pTS7tzYJKwd50reNsH51p1JbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NjBlNTQtNWM4NS00ZDI1LThlNjEt
N2NhMTFkYzNhZTgyLzEvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82NjBlNTQtNWM4NS00ZDI1LThlNjEtN2NhMTFkYzNhZTgy
LzEvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATS7gZcp9
w2FP3J9r+Zj7YRKjzUHGAUUeCUiz/XincJ6Uri1Xc3LnD1ev5jKz9/gSdW/vcayp
7YxZ22+JmWh02MHMzymomHzJJNLhRdTmowKc5OLdd/xwdziYD/Z7n1fwlmHDB6/z
Y4bjH7+zb8he+Mys0s6KXbunGIT1E3t78h9JFX5Hylm79iD0RAM6Yhj0rOEvXnkj
GGUx0NRaUt+sFN6/XGLpcEL3kslTwZy5ks8sIIdIHTTVBdTgu5Tvj/fq1IAjiknb
327Asrx+Bjf+x8oYN+b5iT6trYZt9zNDZshCvqQRS2/Wt8qvdD6RX92MJpQww9Rs
LqD/OEkkoLZP8w==
-----END CERTIFICATE-----
Generated at Sat Sep 26 20:37:41 2026 by rpki-client