Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
File: NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json)
Hash identifier: N+ZbuptR+66lmDT98p+ih9SQSn+XU9PKnQ26KBjcIRU=
Subject key identifier: 0C:0B:52:88:5D:DF:04:7D:C4:AE:50:3D:40:4F:9F:6F:77:66:AA:01
Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Certificate serial: 019D288425FCCD019B5B64CA400B7F00DDB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
Manifest number: 0C65
Signing time: Thu 26 Mar 2026 05:00:42 +0000
Manifest this update: Thu 26 Mar 2026 05:00:42 +0000
Manifest next update: Fri 27 Mar 2026 05:00:42 +0000
Files and hashes: 1: 8sd6i61fK2pFKRyKUFXIcecWNdA.roa (hash: 0lP2EukbQ7lxiIB/1dg6Wt6kXv3T/8YmxZYQdbkSyU4=)
2: LZcyPq5gcVmCZJNsmUPn5VwCWKQ.roa (hash: qXtKcLjBnYcfm5KPZ6PRmpU8Z0A5pTm8Psp+7+d29jQ=)
3: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: BrSXkwOgD9FhDs7muabHUR9vghiEAqjd11TnUeX2hvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:25:fc:cd:01:9b:5b:64:ca:40:0b:7f:00:dd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Validity
Not Before: Mar 26 05:00:42 2026 GMT
Not After : Mar 27 05:00:42 2026 GMT
Subject: CN=0c0b52885ddf047dc4ae503d404f9f6f7766aa01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ea:c6:92:7e:2a:a0:c4:d4:21:91:e2:6d:88:
c3:6b:63:b8:e6:a0:1f:b9:57:cb:ca:86:55:6e:f5:
a0:f8:76:8c:e1:cb:c6:49:5e:f1:77:ec:d1:2a:23:
4f:bb:70:3a:5b:9f:7a:23:75:c3:19:64:df:f5:25:
62:7b:93:09:65:1e:9e:b5:9d:d8:3a:2c:c9:1c:4e:
f4:23:69:5e:63:43:80:82:80:d5:59:ab:1c:78:ab:
c7:42:f4:6c:b6:d6:a8:4e:7f:09:d2:f6:e0:d6:43:
18:ab:c5:36:4f:d5:42:48:57:f1:d4:ab:a2:01:d9:
31:9d:62:29:85:e4:d8:a1:e3:92:44:ad:c1:18:8e:
cd:37:8a:e1:91:e3:82:b1:56:46:b5:35:c2:50:84:
f0:c6:ad:2f:86:d6:e0:e4:d2:4b:62:6e:bd:ee:d1:
d5:2d:60:0b:20:7e:64:f3:db:55:e1:35:91:23:6f:
4e:19:43:5e:86:40:cb:c3:1d:f6:76:4a:52:2f:cb:
6b:b4:15:a6:25:bc:d2:b7:81:ef:39:e2:98:75:1c:
b5:ac:fd:40:0b:fc:aa:96:bc:80:bb:31:bd:d9:d7:
97:80:85:0d:82:4d:1b:b5:86:20:4d:9f:52:8d:78:
66:34:1a:ab:49:4d:6c:97:55:bd:b3:69:5b:22:38:
63:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0B:52:88:5D:DF:04:7D:C4:AE:50:3D:40:4F:9F:6F:77:66:AA:01
X509v3 Authority Key Identifier:
keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ec:87:e5:97:f5:71:2f:a1:a3:9d:4e:6f:b8:6b:5e:b3:99:
3b:28:1e:9d:83:4d:64:17:ed:3b:a8:f1:d1:cd:65:77:b8:d3:
ea:e2:85:93:fd:ca:fd:48:18:a1:2e:eb:a1:d4:24:e7:6e:29:
55:30:18:f1:2c:88:c8:79:c2:9d:27:0d:b9:46:5f:dd:c4:d0:
48:07:82:68:7e:a4:d2:9c:bb:c8:25:18:68:37:aa:f8:8d:a2:
90:ef:88:94:b6:28:62:40:70:a7:1f:e2:c1:cf:83:d7:a5:07:
c1:17:dd:d6:4e:06:eb:e7:3a:39:7f:c5:0c:d7:97:39:ad:da:
74:f9:b0:16:3a:29:75:fc:1f:ed:58:1a:52:27:6c:82:06:5b:
d4:8e:8d:90:8a:a5:84:ec:02:62:11:1c:b3:4f:09:43:fb:be:
73:6d:15:30:e4:ca:da:e9:18:68:b8:f3:af:5d:5d:44:c8:61:
cf:3b:16:51:11:ad:03:e4:7f:80:8a:cd:85:a2:ed:ef:38:3a:
fa:bc:9d:13:96:c2:3b:a9:7a:45:c3:3c:fa:66:d0:15:dd:f2:
27:92:51:63:7c:5c:5b:39:ef:41:75:f3:36:bc:ad:62:30:0e:
48:bf:a7:82:94:4b:a8:62:6b:df:a6:75:05:82:97:88:b5:3a:
a5:01:87:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohCX8zQGbW2TKQAt/AN2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NDYxNDJjZTMyOTBhYjY3ODZkM2QzMGYyNmI1ZTQxZmQ2
ODRkZGUwHhcNMjYwMzI2MDUwMDQyWhcNMjYwMzI3MDUwMDQyWjAzMTEwLwYDVQQD
EygwYzBiNTI4ODVkZGYwNDdkYzRhZTUwM2Q0MDRmOWY2Zjc3NjZhYTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhurGkn4qoMTUIZHibYjDa2O45qAf
uVfLyoZVbvWg+HaM4cvGSV7xd+zRKiNPu3A6W596I3XDGWTf9SVie5MJZR6etZ3Y
OizJHE70I2leY0OAgoDVWasceKvHQvRsttaoTn8J0vbg1kMYq8U2T9VCSFfx1Kui
AdkxnWIpheTYoeOSRK3BGI7NN4rhkeOCsVZGtTXCUITwxq0vhtbg5NJLYm697tHV
LWALIH5k89tV4TWRI29OGUNehkDLwx32dkpSL8trtBWmJbzSt4HvOeKYdRy1rP1A
C/yqlryAuzG92deXgIUNgk0btYYgTZ9SjXhmNBqrSU1sl1W9s2lbIjhjuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwLUohd3wR9xK5QPUBPn293ZqoBMB8GA1UdIwQY
MBaAFDZGFCzjKQq2eG09MPJrXkH9aE3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmtZVUxPTXBDclo0YlQwdzhtdGVRZjFvVGQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZDgyMDYtNzY0ZS00YTMxLWFjZTct
ZDMwODU0MmExZDg2LzEvTmtZVUxPTXBDclo0YlQwdzhtdGVRZjFvVGQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jZDgyMDYtNzY0ZS00YTMxLWFjZTctZDMwODU0MmExZDg2
LzEvTmtZVUxPTXBDclo0YlQwdzhtdGVRZjFvVGQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+yH5Zf1
cS+ho51Ob7hrXrOZOygenYNNZBftO6jx0c1ld7jT6uKFk/3K/UgYoS7rodQk524p
VTAY8SyIyHnCnScNuUZf3cTQSAeCaH6k0py7yCUYaDeq+I2ikO+IlLYoYkBwpx/i
wc+D16UHwRfd1k4G6+c6OX/FDNeXOa3adPmwFjopdfwf7VgaUidsggZb1I6NkIql
hOwCYhEcs08JQ/u+c20VMOTK2ukYaLjzr11dRMhhzzsWURGtA+R/gIrNhaLt7zg6
+rydE5bCO6l6RcM8+mbQFd3yJ5JRY3xcWznvQXXzNrytYjAOSL+ngpRLqGJr36Z1
BYKXiLU6pQGHsw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:00 2026 by rpki-client