Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
File: NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json)
Hash identifier: /XeuIiSpzZZTxKy5rIwNVaxBIk2Ep98Kflly+J89z+o=
Subject key identifier: 9A:F6:4D:53:DC:AF:61:C1:88:01:5C:EE:B8:D4:02:E3:B1:E4:E9:63
Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Certificate serial: 019D2B4E93A2E6F213F6EA9438701F557CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
Manifest number: 11BF
Signing time: Thu 26 Mar 2026 18:01:02 +0000
Manifest this update: Thu 26 Mar 2026 18:01:02 +0000
Manifest next update: Fri 27 Mar 2026 18:01:02 +0000
Files and hashes: 1: GJLrnN9jbFArqwGuqjb_171b46A.roa (hash: d5vjSxzfWWDDhURSXFjGweH1v9cRHkRxXTKq0QW8dR4=)
2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: DuBegB2a+OEvu95Yw1wLmysnCDikOy65rrWnVG0sC7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:93:a2:e6:f2:13:f6:ea:94:38:70:1f:55:7c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Validity
Not Before: Mar 26 18:01:02 2026 GMT
Not After : Mar 27 18:01:02 2026 GMT
Subject: CN=9af64d53dcaf61c188015ceeb8d402e3b1e4e963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:0c:5a:14:1b:83:d6:44:20:64:ad:e0:68:
61:c9:98:42:ce:5a:8a:02:f7:d7:f6:3e:af:aa:58:
fe:24:dd:29:37:02:08:ac:5e:ac:f7:dd:00:16:e1:
35:03:c0:cd:57:b5:03:b1:eb:f1:51:42:e0:76:b9:
53:d7:8a:01:aa:6d:3b:0e:d7:e1:b1:78:6d:0c:3b:
69:12:60:16:04:d4:15:cb:21:0e:4f:e0:22:ec:a0:
c4:33:43:89:fe:95:12:1c:60:46:b8:5c:a1:59:b6:
d3:55:c4:65:cf:b1:11:0e:fb:92:0d:88:36:0b:46:
f1:10:05:94:b0:ca:bd:56:e8:40:2e:bc:2c:c6:bf:
db:3c:76:a7:c1:0c:a1:e4:01:0f:30:bd:f4:23:aa:
ca:98:8d:4d:58:20:62:ff:c8:1c:36:03:6c:8d:e9:
c1:c5:69:d5:dd:1f:dd:ca:c1:b4:13:ef:34:6a:c8:
f8:2d:98:45:bb:d0:39:fa:c7:05:98:29:96:7d:3c:
1a:99:40:4b:16:3d:fb:98:85:d5:84:f0:c9:50:2c:
de:b9:41:7d:e1:17:43:80:de:b4:a4:30:14:8b:30:
bc:6e:a6:7d:0d:86:3b:73:e7:74:ad:1d:51:85:4d:
28:96:2e:fb:f7:fb:51:7c:9e:7f:42:18:8e:65:71:
18:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F6:4D:53:DC:AF:61:C1:88:01:5C:EE:B8:D4:02:E3:B1:E4:E9:63
X509v3 Authority Key Identifier:
keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cf:8d:a7:f1:cf:1a:5d:08:26:4d:be:89:25:fa:04:02:70:
d2:0d:e0:53:35:23:78:ca:28:2c:ff:b4:52:e2:54:18:80:86:
62:b9:33:36:1f:ae:ae:0e:0b:31:bf:b2:a4:c5:75:3a:5a:7a:
e9:4a:ba:6c:0d:c6:f6:e7:0a:65:89:f2:2d:2a:99:18:a1:33:
9f:fb:b8:27:c7:c0:1a:e8:87:62:55:10:0a:5f:9a:a6:c6:59:
e6:af:1b:35:41:0c:d7:78:4f:bf:c8:e8:27:f8:16:10:7b:10:
d2:59:32:ae:4e:d6:50:f9:0e:89:56:36:b8:bf:5d:cd:59:de:
6a:a5:0d:85:41:97:e8:be:9e:e1:25:96:85:60:80:ab:fb:06:
c6:72:63:16:17:db:49:60:e3:02:65:8e:81:69:4b:a9:e2:95:
55:a2:d4:9f:6e:8f:2d:3b:29:84:a1:48:94:46:d0:75:4d:5c:
4e:86:a7:6f:d0:57:da:08:31:f7:b3:af:9d:4e:64:9f:0d:ae:
f6:4b:9b:b6:02:6c:20:25:69:05:70:8b:e4:d8:fb:8d:3d:a5:
f0:6f:55:01:9b:e1:e5:80:d6:91:e8:af:af:0e:5c:10:fd:16:
2b:3f:f1:a9:92:13:83:2f:5f:4f:4b:71:df:04:da:dc:8a:2c:
65:ff:73:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTpOi5vIT9uqUOHAfVXz8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YTYzZGM4NjEyMGU4N2Y0Y2ZmOGM1OWFmMzI2MWU2ZTEy
OTJmZDkwHhcNMjYwMzI2MTgwMTAyWhcNMjYwMzI3MTgwMTAyWjAzMTEwLwYDVQQD
Eyg5YWY2NGQ1M2RjYWY2MWMxODgwMTVjZWViOGQ0MDJlM2IxZTRlOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BwMWhQbg9ZEIGSt4GhhyZhCzlqK
AvfX9j6vqlj+JN0pNwIIrF6s990AFuE1A8DNV7UDsevxUULgdrlT14oBqm07Dtfh
sXhtDDtpEmAWBNQVyyEOT+Ai7KDEM0OJ/pUSHGBGuFyhWbbTVcRlz7ERDvuSDYg2
C0bxEAWUsMq9VuhALrwsxr/bPHanwQyh5AEPML30I6rKmI1NWCBi/8gcNgNsjenB
xWnV3R/dysG0E+80asj4LZhFu9A5+scFmCmWfTwamUBLFj37mIXVhPDJUCzeuUF9
4RdDgN60pDAUizC8bqZ9DYY7c+d0rR1RhU0oli779/tRfJ5/QhiOZXEY7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJr2TVPcr2HBiAFc7rjUAuOx5OljMB8GA1UdIwQY
MBaAFDSmPchhIOh/TP+MWa8yYebhKS/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEt
ZmM3YTBlYTZiMGUyLzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEtZmM3YTBlYTZiMGUy
LzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8+Np/HP
Gl0IJk2+iSX6BAJw0g3gUzUjeMooLP+0UuJUGICGYrkzNh+urg4LMb+ypMV1Olp6
6Uq6bA3G9ucKZYnyLSqZGKEzn/u4J8fAGuiHYlUQCl+apsZZ5q8bNUEM13hPv8jo
J/gWEHsQ0lkyrk7WUPkOiVY2uL9dzVneaqUNhUGX6L6e4SWWhWCAq/sGxnJjFhfb
SWDjAmWOgWlLqeKVVaLUn26PLTsphKFIlEbQdU1cToanb9BX2ggx97OvnU5knw2u
9kubtgJsICVpBXCL5Nj7jT2l8G9VAZvh5YDWkeivrw5cEP0WKz/xqZITgy9fT0tx
3wTa3IosZf9zRA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:10:26 2026 by rpki-client