Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
File: nNZ9EDPKRytbuA_VlruDbRLiImE.mft (raw, json)
Hash identifier: 4jtY/y3GPcsdGl/N9b7PHL46T8e3aNsjozq77DmUFzY=
Subject key identifier: D1:F1:84:D1:79:71:56:33:09:CC:E4:6B:57:37:15:04:1B:3F:8F:E5
Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
Certificate issuer: /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Certificate serial: 019D29295DEE3D62E27A130CFB9AB9ED4337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
Manifest number: 0E78
Signing time: Thu 26 Mar 2026 08:01:10 +0000
Manifest this update: Thu 26 Mar 2026 08:01:10 +0000
Manifest next update: Fri 27 Mar 2026 08:01:10 +0000
Files and hashes: 1: UyjG7mUKw_csY7SyBZFvUhkSaPc.roa (hash: n9HYRjqT7Yx/CpHx7zXXC15FE0G/joD1gI9dynyvC54=)
2: nNZ9EDPKRytbuA_VlruDbRLiImE.crl (hash: m1P1uFLWecAW3oYU6T5X062W4vnVoi77A+SkRCx0+MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:5d:ee:3d:62:e2:7a:13:0c:fb:9a:b9:ed:43:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Validity
Not Before: Mar 26 08:01:10 2026 GMT
Not After : Mar 27 08:01:10 2026 GMT
Subject: CN=d1f184d17971563309cce46b573715041b3f8fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:f1:57:17:c5:e5:ae:95:51:2a:7e:68:99:
7a:65:e8:a0:a5:e6:61:ae:c1:aa:0b:9a:e8:7c:6b:
31:26:5e:08:f0:ec:8f:69:26:4e:de:5d:99:b9:44:
2f:c2:32:4c:d1:ad:0d:42:66:7f:80:51:80:01:ad:
c9:ed:38:ac:c3:54:99:ad:3d:99:19:f7:dc:71:96:
84:d5:10:99:81:de:68:85:59:d9:18:d5:38:bd:8b:
83:45:24:d3:05:64:2d:fc:a5:ca:bb:91:bf:9c:09:
10:04:b2:6e:17:76:6a:7e:4f:d8:35:10:ba:32:f9:
5f:8a:14:5c:24:f5:13:34:56:91:f6:00:a7:c7:e4:
19:9e:40:69:b9:00:f1:01:cf:7c:b5:68:b8:a7:99:
b1:88:f4:01:ad:ec:cd:97:39:d1:94:20:c0:3a:1d:
70:de:6c:51:bf:6b:e2:e5:42:dd:0a:bc:bb:fd:82:
40:f7:a6:8b:93:e6:3d:88:de:2e:36:97:99:ab:d3:
b8:48:5a:af:0d:87:44:bb:c1:e9:3f:61:89:80:1e:
ba:5d:99:41:87:01:bc:43:e1:2d:64:7d:a0:03:ca:
ff:51:97:34:03:31:a2:90:de:b4:9f:1f:cf:50:c3:
d9:1e:9b:a3:bd:f2:d9:7a:9a:d4:1d:2d:9d:ad:b0:
e8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F1:84:D1:79:71:56:33:09:CC:E4:6B:57:37:15:04:1B:3F:8F:E5
X509v3 Authority Key Identifier:
keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ed:03:cf:d1:e0:09:85:57:47:60:01:2f:ce:fa:e1:93:e4:
03:f8:a6:e0:50:99:97:69:83:39:04:ab:b3:41:92:09:74:10:
af:45:c3:32:39:9b:84:89:fd:5d:5c:c8:30:77:77:4d:b4:a1:
50:dc:26:5f:5d:ab:3c:de:d5:24:7d:e6:3b:2b:40:58:50:9a:
3b:c4:8a:4a:75:fe:12:66:7f:56:bf:7f:30:b0:75:72:bd:ef:
f4:25:30:9c:9f:e3:0f:ba:33:a8:46:7a:9f:56:2d:db:08:ac:
67:55:8b:1f:1e:ac:03:81:82:50:07:4c:0d:22:44:bc:72:b5:
8c:14:1f:bb:21:11:3c:9c:0e:3e:9e:68:7c:59:32:07:67:03:
b8:59:20:0d:25:bd:8b:de:82:77:24:73:e9:e9:e1:4c:0c:d0:
0e:dd:17:49:a4:2f:2a:36:bd:88:f0:15:11:16:0c:4c:eb:f4:
f3:c2:17:b7:bb:e1:d7:9b:b7:2f:cc:8e:e3:d1:a5:c5:bc:fa:
1d:24:2d:03:e4:1f:9d:92:cc:2c:b1:c0:2f:61:f3:41:c3:d7:
be:1f:9d:24:2d:c0:be:d8:e0:5d:a2:96:c1:76:b4:f6:bc:45:
9d:51:d9:9b:95:b5:2f:0c:24:97:00:e5:f2:32:28:ed:9e:e2:
45:2e:54:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKV3uPWLiehMM+5q57UM3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZDY3ZDEwMzNjYTQ3MmI1YmI4MGZkNTk2YmI4MzZkMTJl
MjIyNjEwHhcNMjYwMzI2MDgwMTEwWhcNMjYwMzI3MDgwMTEwWjAzMTEwLwYDVQQD
EyhkMWYxODRkMTc5NzE1NjMzMDljY2U0NmI1NzM3MTUwNDFiM2Y4ZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z7xVxfF5a6VUSp+aJl6ZeigpeZh
rsGqC5rofGsxJl4I8OyPaSZO3l2ZuUQvwjJM0a0NQmZ/gFGAAa3J7Tisw1SZrT2Z
GffccZaE1RCZgd5ohVnZGNU4vYuDRSTTBWQt/KXKu5G/nAkQBLJuF3Zqfk/YNRC6
MvlfihRcJPUTNFaR9gCnx+QZnkBpuQDxAc98tWi4p5mxiPQBrezNlznRlCDAOh1w
3mxRv2vi5ULdCry7/YJA96aLk+Y9iN4uNpeZq9O4SFqvDYdEu8HpP2GJgB66XZlB
hwG8Q+EtZH2gA8r/UZc0AzGikN60nx/PUMPZHpujvfLZeprUHS2drbDoIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHxhNF5cVYzCczka1c3FQQbP4/lMB8GA1UdIwQY
MBaAFJzWfRAzykcrW7gP1Za7g20S4iJhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mMTc3MjItZTU4Yi00NDUyLTgxMzUt
ZWFhNWFjZjM1ZmQxLzEvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mMTc3MjItZTU4Yi00NDUyLTgxMzUtZWFhNWFjZjM1ZmQx
LzEvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+0Dz9Hg
CYVXR2ABL8764ZPkA/im4FCZl2mDOQSrs0GSCXQQr0XDMjmbhIn9XVzIMHd3TbSh
UNwmX12rPN7VJH3mOytAWFCaO8SKSnX+EmZ/Vr9/MLB1cr3v9CUwnJ/jD7ozqEZ6
n1Yt2wisZ1WLHx6sA4GCUAdMDSJEvHK1jBQfuyERPJwOPp5ofFkyB2cDuFkgDSW9
i96CdyRz6enhTAzQDt0XSaQvKja9iPAVERYMTOv088IXt7vh15u3L8yO49Glxbz6
HSQtA+QfnZLMLLHAL2HzQcPXvh+dJC3AvtjgXaKWwXa09rxFnVHZm5W1LwwklwDl
8jIo7Z7iRS5UTA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:09:59 2026 by rpki-client