Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
File: nRfZOI52MabRmvsrJkJ5WiTIQIE.mft (raw, json)
Hash identifier: gusuiCVRGU4L92KtcflcP4TNhlCnP4wS9F6D2zNXuYs=
Subject key identifier: CD:C6:9F:68:EE:2C:76:5C:A8:B1:05:7A:C5:83:53:4B:30:BC:5F:12
Authority key identifier: 9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
Certificate issuer: /CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Certificate serial: 019D28BB1969F8D8E0E30F1D20F1B28C8DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 06:00:43 +0000
Manifest this update: Thu 26 Mar 2026 06:00:43 +0000
Manifest next update: Fri 27 Mar 2026 06:00:43 +0000
Files and hashes: 1: 3UvocN8YemmoOwL53sgwSszmnzc.roa (hash: RJjvrheXtGevJ6D0OMvxOIdvCPxuFznkOJ4LPhI3QMA=)
2: nRfZOI52MabRmvsrJkJ5WiTIQIE.crl (hash: tchxoo8x2HexmIVS1eTNTzrRBHbu+t2z5QgpjTIuPeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:19:69:f8:d8:e0:e3:0f:1d:20:f1:b2:8c:8d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d17d9388e7631a6d19afb2b2642795a24c84081
Validity
Not Before: Mar 26 06:00:43 2026 GMT
Not After : Mar 27 06:00:43 2026 GMT
Subject: CN=cdc69f68ee2c765ca8b1057ac583534b30bc5f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2d:27:43:6e:34:fd:cb:ee:ea:5a:f4:76:8a:
11:bd:6a:05:1a:42:83:4f:bb:e9:54:5d:c5:13:02:
44:27:6a:5e:65:b7:e1:4e:dc:97:ff:79:8f:15:ac:
77:7f:f0:62:21:2e:85:2c:44:02:35:62:4c:6a:4d:
04:1a:7a:ae:78:7a:e4:4c:2d:8c:aa:26:29:65:eb:
d6:db:6e:21:93:15:4b:2e:92:5e:78:40:a5:e3:4c:
12:cf:74:60:b7:1c:7f:c0:89:80:12:9d:8f:45:ac:
a5:41:d1:23:0a:f5:ae:58:c1:bf:7a:f1:68:9d:24:
ba:30:4e:bb:33:29:bc:59:91:9f:f6:ec:18:72:e2:
d2:d9:e0:e6:ff:da:67:26:5c:a5:32:11:ef:6d:58:
38:1c:9c:5d:8a:c0:a2:5b:74:df:b6:83:70:0f:b7:
b8:91:4c:0d:ec:0f:1c:d2:2f:c7:b1:2f:87:19:e9:
73:62:eb:ec:69:a7:1e:0b:54:ff:03:af:df:2d:27:
9e:66:c4:87:9a:a2:77:9d:1b:d9:2e:79:e9:49:c9:
36:b1:2e:32:c8:9e:66:6c:f2:90:f1:9d:4b:8c:b3:
d5:3e:67:19:ad:3b:c0:57:43:c5:74:9d:04:23:e5:
46:09:9a:7d:fd:4e:bc:37:b5:4f:91:79:2b:a4:ed:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C6:9F:68:EE:2C:76:5C:A8:B1:05:7A:C5:83:53:4B:30:BC:5F:12
X509v3 Authority Key Identifier:
keyid:9D:17:D9:38:8E:76:31:A6:D1:9A:FB:2B:26:42:79:5A:24:C8:40:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRfZOI52MabRmvsrJkJ5WiTIQIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e8444-8da5-466b-8400-7bd96d9c6286/1/nRfZOI52MabRmvsrJkJ5WiTIQIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:54:ab:69:df:3f:af:24:41:65:43:f4:5d:45:fd:c5:da:7f:
b9:bb:d2:0f:66:fc:7e:63:0d:4f:22:dc:4d:b4:ff:26:8d:6d:
c5:d8:ce:b7:81:19:1a:0f:fc:56:d5:3a:ac:73:1c:75:e9:e1:
e7:9d:74:03:df:7b:1e:68:b7:bb:af:f5:76:fe:8f:7a:74:ad:
90:04:5d:3e:f3:96:fc:1b:b6:26:9c:a4:fc:8d:a4:b9:94:b8:
56:7d:e5:95:43:6f:83:ec:29:fb:19:76:f1:7b:36:8c:23:91:
5b:b2:71:30:3c:59:ea:82:56:23:8c:d7:3d:81:29:9d:5c:13:
41:dd:41:02:b8:b1:e6:a3:3c:e8:4f:c2:a6:61:7b:e9:06:bd:
ab:6d:ab:e2:a4:3f:6e:21:80:e1:67:ec:cf:ee:fe:31:0e:27:
5a:53:95:5e:89:c1:8a:1c:36:7b:d0:7e:99:16:01:91:20:7a:
3f:f6:de:bc:df:a5:5d:e1:de:8b:92:b2:4f:b4:de:a6:4f:b2:
57:5c:85:56:de:ac:3d:7e:e4:68:c9:ef:c5:13:e7:ea:55:96:
f1:88:eb:03:27:e5:3e:59:bc:4c:fe:e1:dc:1d:02:a2:d7:25:
0f:db:8c:fc:e6:19:bc:a6:1a:cf:ac:2a:6b:c1:21:72:80:b7:
dd:61:76:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouxlp+Njg4w8dIPGyjI3+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMTdkOTM4OGU3NjMxYTZkMTlhZmIyYjI2NDI3OTVhMjRj
ODQwODEwHhcNMjYwMzI2MDYwMDQzWhcNMjYwMzI3MDYwMDQzWjAzMTEwLwYDVQQD
EyhjZGM2OWY2OGVlMmM3NjVjYThiMTA1N2FjNTgzNTM0YjMwYmM1ZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C0nQ240/cvu6lr0dooRvWoFGkKD
T7vpVF3FEwJEJ2peZbfhTtyX/3mPFax3f/BiIS6FLEQCNWJMak0EGnqueHrkTC2M
qiYpZevW224hkxVLLpJeeECl40wSz3Rgtxx/wImAEp2PRaylQdEjCvWuWMG/evFo
nSS6ME67Mym8WZGf9uwYcuLS2eDm/9pnJlylMhHvbVg4HJxdisCiW3TftoNwD7e4
kUwN7A8c0i/HsS+HGelzYuvsaaceC1T/A6/fLSeeZsSHmqJ3nRvZLnnpSck2sS4y
yJ5mbPKQ8Z1LjLPVPmcZrTvAV0PFdJ0EI+VGCZp9/U68N7VPkXkrpO347wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3Gn2juLHZcqLEFesWDU0swvF8SMB8GA1UdIwQY
MBaAFJ0X2TiOdjGm0Zr7KyZCeVokyECBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblJmWk9JNTJNYWJSbXZzckprSjVXaVRJUUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82ZTg0NDQtOGRhNS00NjZiLTg0MDAt
N2JkOTZkOWM2Mjg2LzEvblJmWk9JNTJNYWJSbXZzckprSjVXaVRJUUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82ZTg0NDQtOGRhNS00NjZiLTg0MDAtN2JkOTZkOWM2Mjg2
LzEvblJmWk9JNTJNYWJSbXZzckprSjVXaVRJUUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFSrad8/
ryRBZUP0XUX9xdp/ubvSD2b8fmMNTyLcTbT/Jo1txdjOt4EZGg/8VtU6rHMcdenh
5510A997Hmi3u6/1dv6PenStkARdPvOW/Bu2Jpyk/I2kuZS4Vn3llUNvg+wp+xl2
8Xs2jCORW7JxMDxZ6oJWI4zXPYEpnVwTQd1BArix5qM86E/CpmF76Qa9q22r4qQ/
biGA4Wfsz+7+MQ4nWlOVXonBihw2e9B+mRYBkSB6P/bevN+lXeHei5KyT7Tepk+y
V1yFVt6sPX7kaMnvxRPn6lWW8YjrAyflPlm8TP7h3B0CotclD9uM/OYZvKYaz6wq
a8EhcoC33WF2NQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:35 2026 by rpki-client