Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft (raw, json)
Hash identifier: JPYfl9o+yic0RHlPnzeKq2yeGzf0kk9bQCIknMqg1C8=
Subject key identifier: B1:83:BE:C5:3F:A6:2E:67:45:9C:A1:F1:34:05:48:54:23:C3:79:63
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 01A0EBC0DE9D654948E3830058FF93FEB4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
Manifest number: 1600
Signing time: Tue 29 Sep 2026 06:01:20 +0000
Manifest this update: Tue 29 Sep 2026 06:01:20 +0000
Manifest next update: Wed 30 Sep 2026 06:01:20 +0000
Files and hashes: 1: dXqJHsXxR-aG7OFxfLVmTOQ0LlE.roa (hash: y6lcuFolmZ4jWJsuhnKkZ1m94mf4BMO+drqZeVWCJUI=)
2: nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl (hash: 3Jkrx5QXci6mdO+/0mIYQKlOZyDTwmQ+4VGKyZD94t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:c0:de:9d:65:49:48:e3:83:00:58:ff:93:fe:b4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: Sep 29 06:01:20 2026 GMT
Not After : Sep 30 06:01:20 2026 GMT
Subject: CN=b183bec53fa62e67459ca1f13405485423c37963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:af:e8:85:9d:a5:be:fb:ec:ae:e3:3f:50:
18:77:cc:e4:bf:28:a0:27:33:f4:74:2b:1b:93:c3:
c9:39:0b:f6:53:a1:93:7e:46:8a:fd:f9:ab:d3:72:
6e:a2:a6:1d:8e:df:d2:35:3a:c2:c6:07:80:61:f1:
60:4c:73:bd:d7:cf:0d:da:95:8f:a1:3f:67:e4:1d:
6d:ec:23:87:81:c3:46:10:26:ef:69:dc:7f:ea:45:
4c:bf:64:b2:67:ec:e4:ec:09:b4:51:9d:49:2d:a7:
d3:e1:64:ba:14:d2:87:92:b6:cc:1e:2b:64:ec:04:
7c:05:3d:3f:a8:98:73:5f:19:98:49:fe:99:86:58:
be:8f:17:81:36:fd:10:fd:89:48:bb:86:e7:60:a9:
81:70:63:03:b7:ea:a3:e3:25:79:35:73:1b:5e:90:
f0:61:e8:19:08:9b:de:ba:82:e8:ab:1c:62:02:6c:
3b:60:b8:fe:5b:2c:af:5c:55:6c:74:77:84:ea:3c:
9f:5b:f1:91:93:0e:56:01:51:b9:6b:f3:db:e0:2c:
bf:3d:c7:65:0b:22:bf:00:d9:1e:6c:bc:45:5c:20:
02:47:f8:28:c8:71:f4:a3:48:e3:60:1b:66:61:0e:
f3:10:d9:10:20:7d:78:c2:62:fa:92:e7:89:a8:72:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:83:BE:C5:3F:A6:2E:67:45:9C:A1:F1:34:05:48:54:23:C3:79:63
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3b:06:0b:6d:e6:4d:6f:4a:36:bb:9d:79:f7:ef:4f:07:78:
1f:20:29:5d:09:d8:be:74:4e:71:d3:cb:86:6a:ff:0f:e4:16:
21:5b:91:53:11:92:c1:fc:c9:2d:2c:f8:10:bf:df:d6:70:7b:
ea:25:72:f3:92:7e:17:ca:b1:1a:42:3f:1e:32:6e:b6:bf:95:
ad:a8:7e:40:86:30:18:e8:47:44:d7:5f:98:f6:09:de:52:97:
9e:b4:e4:dc:74:9e:a3:f1:23:e2:f6:23:15:9e:29:34:18:34:
43:4d:d2:cd:fc:5b:5e:72:fd:8f:9e:35:19:7c:7b:c6:9f:ea:
a6:d7:93:d7:17:a8:68:05:bb:b8:48:ad:c9:f7:6f:28:51:2e:
68:f0:d9:57:ff:25:03:22:ec:5d:4d:6a:63:21:18:2d:64:2d:
33:25:30:92:de:80:57:7c:5c:87:71:fb:eb:4b:fb:42:96:e6:
9a:8c:b4:fc:65:c6:0b:9e:e2:7b:ac:cf:0a:e0:f8:21:be:67:
16:03:40:1d:f1:d8:2e:7c:46:4b:63:89:48:9e:6e:cd:9e:5d:
f7:20:dd:3d:22:be:f0:e2:d9:56:76:cf:52:ca:88:53:50:65:
7c:79:e2:6e:eb:72:dc:a0:94:6f:e9:82:2a:53:37:8a:be:f5:
b3:3c:55:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrwN6dZUlI44MAWP+T/rTDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYTkwZTdkYWYxNWMxN2MxYjlhYmM1NzIxNTdiYzdkOTE3
YjM5OTEwHhcNMjYwOTI5MDYwMTIwWhcNMjYwOTMwMDYwMTIwWjAzMTEwLwYDVQQD
EyhiMTgzYmVjNTNmYTYyZTY3NDU5Y2ExZjEzNDA1NDg1NDIzYzM3OTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznqv6IWdpb777K7jP1AYd8zkvyig
JzP0dCsbk8PJOQv2U6GTfkaK/fmr03JuoqYdjt/SNTrCxgeAYfFgTHO9188N2pWP
oT9n5B1t7COHgcNGECbvadx/6kVMv2SyZ+zk7Am0UZ1JLafT4WS6FNKHkrbMHitk
7AR8BT0/qJhzXxmYSf6Zhli+jxeBNv0Q/YlIu4bnYKmBcGMDt+qj4yV5NXMbXpDw
YegZCJveuoLoqxxiAmw7YLj+WyyvXFVsdHeE6jyfW/GRkw5WAVG5a/Pb4Cy/Pcdl
CyK/ANkebLxFXCACR/goyHH0o0jjYBtmYQ7zENkQIH14wmL6kueJqHKxlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGDvsU/pi5nRZyh8TQFSFQjw3ljMB8GA1UdIwQY
MBaAFJypDn2vFcF8G5q8VyFXvH2RezmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNWYzNzUtMTQwZi00NmU5LTk2N2Ut
NmU0NTlhNThlMWQ2LzEvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8yNWYzNzUtMTQwZi00NmU5LTk2N2UtNmU0NTlhNThlMWQ2
LzEvbktrT2ZhOFZ3WHdibXJ4WElWZThmWkY3T1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzsGC23m
TW9KNrudeffvTwd4HyApXQnYvnROcdPLhmr/D+QWIVuRUxGSwfzJLSz4EL/f1nB7
6iVy85J+F8qxGkI/HjJutr+Vrah+QIYwGOhHRNdfmPYJ3lKXnrTk3HSeo/Ej4vYj
FZ4pNBg0Q03SzfxbXnL9j541GXx7xp/qpteT1xeoaAW7uEityfdvKFEuaPDZV/8l
AyLsXU1qYyEYLWQtMyUwkt6AV3xch3H760v7Qpbmmoy0/GXGC57ie6zPCuD4Ib5n
FgNAHfHYLnxGS2OJSJ5uzZ5d9yDdPSK+8OLZVnbPUsqIU1BlfHnibuty3KCUb+mC
KlM3ir71szxV9Q==
-----END CERTIFICATE-----
Generated at Tue Sep 29 13:20:09 2026 by rpki-client