Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier: 9R+L9PYxPwoDv1AIjJQQPnPm9CGATKDS6LpzzNNTgpg=
Subject key identifier: DE:5A:42:FB:41:8F:83:07:27:1C:BE:BF:83:5E:69:A5:0D:5B:5B:52
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 01A0D382BE46ADC7F0C428E421B3095DC449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number: 1A7B
Signing time: Thu 24 Sep 2026 13:02:35 +0000
Manifest this update: Thu 24 Sep 2026 13:02:35 +0000
Manifest next update: Fri 25 Sep 2026 13:02:35 +0000
Files and hashes: 1: NP6D_AjoQrizgQpLPTRZ8K6eWkA.roa (hash: 60B8Z6NMx31io1/yt+mCoe3AOI225aq1Qj6yflpDE9M=)
2: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: G6n49JlYLv4p3Jbu+cvaa/x7qEeeupp12hV03qdLc2g=)
3: OK_s7EBfpgZbjIrvUoVqzpWaoEw.roa (hash: zZg+oBq+g5DuaneD38ld2ueNobqmEDE+dyirbFmQtoM=)
4: t1vkmCK8KzwYpdaOj2Z8K8WRkuE.roa (hash: cQGDZLaCNeANHuWk60qBEto7tZ5K0Q991hBY/3JdECg=)
5: x62fdnQHTG86kc8QeNrs-Fg3oVE.roa (hash: Q5HR/EB53DA3xDXZeryGNxJzH4ahXtlYt7caGd1WQn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:82:be:46:ad:c7:f0:c4:28:e4:21:b3:09:5d:c4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Sep 24 13:02:35 2026 GMT
Not After : Sep 25 13:02:35 2026 GMT
Subject: CN=de5a42fb418f8307271cbebf835e69a50d5b5b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:af:8b:2f:36:b7:56:88:83:ba:28:6f:da:
db:31:dc:ec:06:6d:73:44:d9:de:99:d4:35:67:6d:
fb:54:17:9f:10:09:20:17:60:23:f4:79:42:65:bb:
1e:ae:a0:60:51:fc:c5:c7:6b:6f:ca:6a:63:85:86:
8c:2a:5e:5a:f7:28:d8:87:48:9f:70:be:21:35:0b:
aa:98:9b:16:f8:ea:8d:39:4d:df:cc:92:b3:18:7d:
da:43:02:64:0a:3c:58:a0:f4:eb:73:5e:b8:33:09:
dc:7f:b7:2e:bd:f6:88:f7:ef:1d:c3:56:5a:47:89:
68:07:0d:51:cd:d0:8f:01:2a:36:6e:17:9b:dc:49:
45:b6:76:1d:0d:91:86:2b:9f:49:08:1c:37:50:a0:
0b:de:f7:f0:a2:72:55:7b:18:88:c7:03:4f:2a:8b:
5e:27:fd:2b:52:fd:3f:5b:4a:3b:5e:8a:13:db:7c:
ab:f6:1f:bf:ad:f5:c5:2e:61:fd:d5:25:28:7c:13:
48:ba:60:c6:75:95:65:57:35:dc:bf:21:44:3c:27:
15:d5:9a:05:d3:1a:30:55:67:0d:c3:c4:f3:e8:9f:
7f:65:91:9e:18:6d:2e:90:0c:3f:5c:8a:15:b6:7b:
af:c4:05:c0:e7:44:43:0b:9d:bb:92:2a:cf:44:6c:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5A:42:FB:41:8F:83:07:27:1C:BE:BF:83:5E:69:A5:0D:5B:5B:52
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c7:6b:e0:50:3f:97:b2:8b:7b:c2:2a:29:09:11:bc:ed:e2:
5a:6a:ea:f8:d5:c7:30:dc:44:64:98:21:e4:bc:4f:b9:be:2e:
0a:04:78:90:37:54:75:c0:d3:e3:b5:d7:27:af:46:40:91:33:
24:ac:11:dd:f7:11:7d:70:a1:74:ef:fb:9b:00:a2:24:03:aa:
c6:cb:0e:2f:f0:e1:74:b0:e6:7c:bf:4c:99:4b:8f:dd:d6:db:
04:c2:e8:fa:8a:4b:a7:51:b6:e7:1c:30:00:13:35:f8:1f:3a:
1f:0c:09:d3:50:79:39:a4:0b:98:de:17:d7:2c:1b:45:29:1a:
25:31:36:fa:5c:59:c7:22:21:bd:01:e3:95:97:87:ab:73:ec:
9a:6c:17:1d:d6:43:d3:b2:ef:67:02:d5:5c:a9:bd:f9:b9:d7:
27:a5:18:3c:2c:f9:8d:bf:ca:6f:68:10:c2:20:86:a7:30:db:
c2:ac:ee:a3:8f:ea:ec:68:04:3b:06:8e:79:df:60:e8:7b:95:
f7:5c:38:bc:0a:48:91:dc:c5:f0:ed:e3:d1:0b:1b:a7:76:2e:
a3:26:bc:c6:8e:bd:d9:d1:9d:19:13:17:06:a0:8b:62:d0:cb:
4c:d1:33:7f:b9:a7:d5:b2:f4:f8:04:6c:cd:63:89:5c:22:83:
9e:f1:23:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTgr5GrcfwxCjkIbMJXcRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDVhNzIwMDE2NDkxMjA0MWJiOTMxZWZiMWZlYWMxMjNi
NDNhMTgwHhcNMjYwOTI0MTMwMjM1WhcNMjYwOTI1MTMwMjM1WjAzMTEwLwYDVQQD
EyhkZTVhNDJmYjQxOGY4MzA3MjcxY2JlYmY4MzVlNjlhNTBkNWI1YjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTmviy82t1aIg7oob9rbMdzsBm1z
RNnemdQ1Z237VBefEAkgF2Aj9HlCZbserqBgUfzFx2tvympjhYaMKl5a9yjYh0if
cL4hNQuqmJsW+OqNOU3fzJKzGH3aQwJkCjxYoPTrc164Mwncf7cuvfaI9+8dw1Za
R4loBw1RzdCPASo2bheb3ElFtnYdDZGGK59JCBw3UKAL3vfwonJVexiIxwNPKote
J/0rUv0/W0o7XooT23yr9h+/rfXFLmH91SUofBNIumDGdZVlVzXcvyFEPCcV1ZoF
0xowVWcNw8Tz6J9/ZZGeGG0ukAw/XIoVtnuvxAXA50RDC527kirPRGxfDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5aQvtBj4MHJxy+v4NeaaUNW1tSMB8GA1UdIwQY
MBaAFDVFpyABZJEgQbuTHvsf6sEjtDoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDkt
YWFiYjA2MmU0MGRiLzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81OWM0YjgtODdmNC00ZjJmLWE0NDktYWFiYjA2MmU0MGRi
LzEvTlVXbklBRmtrU0JCdTVNZS14X3F3U08wT2hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8dr4FA/
l7KLe8IqKQkRvO3iWmrq+NXHMNxEZJgh5LxPub4uCgR4kDdUdcDT47XXJ69GQJEz
JKwR3fcRfXChdO/7mwCiJAOqxssOL/DhdLDmfL9MmUuP3dbbBMLo+opLp1G25xww
ABM1+B86HwwJ01B5OaQLmN4X1ywbRSkaJTE2+lxZxyIhvQHjlZeHq3PsmmwXHdZD
07LvZwLVXKm9+bnXJ6UYPCz5jb/Kb2gQwiCGpzDbwqzuo4/q7GgEOwaOed9g6HuV
91w4vApIkdzF8O3j0Qsbp3Yuoya8xo692dGdGRMXBqCLYtDLTNEzf7mn1bL0+ARs
zWOJXCKDnvEjCw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:33:28 2026 by rpki-client