Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
File: nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json)
Hash identifier: y5UAp9fF5dgAhYNAvxrQLhJcA15KPE5AMPXPKN0o/Bk=
Subject key identifier: B3:75:A0:EF:51:45:7C:B3:B2:36:02:24:FB:4F:B0:2C:85:73:5B:97
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial: 019E4FC63D1B2E717A96D2419732DE2389C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
Manifest number: 16A1
Signing time: Fri 22 May 2026 13:00:52 +0000
Manifest this update: Fri 22 May 2026 13:00:52 +0000
Manifest next update: Sat 23 May 2026 13:00:52 +0000
Files and hashes: 1: 7CJ50Z4jSScacH7m-JbxhQfRAT8.roa (hash: DeZQIphwpcBhptFjXao8KHzyokPEFqwFhAKphJ/giEM=)
2: JOjsmVlflGoiSPZ3EdXzNHqwPxQ.roa (hash: x1TQNb6OLI+ULwCdM0E8bCboywBE0qslaF9HtDCN484=)
3: YWzwe319rfYXpYuP3IvXqCx8tZo.roa (hash: 1w3/nvkpGpApD4pL14BdnheXsuPZSDSH4dgaXoYHNHo=)
4: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: fiWZvceVzSBdGzk0QlQHDXRxIYFt4UqFn0P0OE/ZQZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:c6:3d:1b:2e:71:7a:96:d2:41:97:32:de:23:89:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Validity
Not Before: May 22 13:00:52 2026 GMT
Not After : May 23 13:00:52 2026 GMT
Subject: CN=b375a0ef51457cb3b2360224fb4fb02c85735b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:d4:c5:b1:73:bd:76:f4:c0:64:ad:6a:40:
6d:e5:01:dc:77:00:3d:7d:08:86:cc:46:8c:0b:c6:
e6:14:9b:61:ad:ed:ce:c5:ef:68:73:df:f8:8b:9b:
e5:41:15:6c:b7:ca:34:17:c8:73:90:83:71:e8:77:
eb:22:f6:03:57:25:e5:6a:20:b6:e3:f0:fd:f8:ae:
ff:cc:64:72:12:4a:47:e5:b4:3e:ec:9f:65:b6:d8:
fe:5e:9c:11:38:25:c3:a7:08:75:af:fb:86:a0:44:
16:35:83:ac:dd:17:3b:7a:fd:35:e9:e6:55:54:5f:
20:fc:18:72:8a:3b:34:57:68:1e:56:56:c4:8f:f6:
65:0c:9e:0b:71:cb:70:92:7b:b2:bc:df:a1:f7:ae:
8f:0b:c8:0c:bd:a8:9e:1a:83:9d:02:48:eb:36:71:
24:76:b8:38:b7:0e:0f:62:f5:c6:11:14:14:43:38:
c3:5c:51:77:e5:83:66:58:9f:c4:e0:c3:80:a3:17:
84:ce:32:04:a9:f2:84:18:af:5e:b3:31:bf:80:f2:
de:b7:74:2d:d9:ae:55:77:93:58:12:79:4f:d6:62:
66:97:07:cb:5c:c2:54:9c:b0:3b:3f:24:7c:07:b4:
5b:5b:fc:7a:b7:e6:a5:04:64:8b:97:5f:25:2d:5f:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:75:A0:EF:51:45:7C:B3:B2:36:02:24:FB:4F:B0:2C:85:73:5B:97
X509v3 Authority Key Identifier:
keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:34:17:4e:e8:e9:6c:99:ed:31:29:5c:0a:22:75:48:51:2a:
8f:5d:c3:6b:0d:7a:4c:ff:ab:29:3c:42:03:6c:c6:14:16:56:
89:81:f5:81:e4:d6:45:55:0c:fa:e2:c6:d0:d5:67:cd:6e:75:
a3:6b:7d:ee:9f:1b:a6:c8:65:2b:83:8e:73:dd:de:19:ce:69:
5b:1a:d5:36:4c:86:d0:d2:48:45:3e:44:78:ed:29:4c:03:8f:
fd:12:fb:5d:da:d5:5a:93:48:51:fc:35:5d:64:09:76:79:de:
6c:9c:59:fe:4d:5a:0c:d4:9a:71:13:db:79:11:4b:00:31:3e:
d8:f8:e2:fd:ba:4f:d0:05:d3:dc:16:5b:94:91:30:fe:ab:de:
0a:4c:f9:c6:3a:78:20:e6:0f:f4:6f:96:56:bd:61:4b:2f:43:
cd:08:3e:ed:21:5f:31:b8:cf:00:b4:3b:5d:c4:ea:68:b5:bd:
cf:02:8b:51:d3:07:b3:53:07:dc:cc:bc:0b:d8:77:93:13:23:
64:ea:41:76:82:24:01:05:c9:aa:65:65:65:8a:a8:61:2a:a3:
89:3c:bc:f7:d0:24:0b:3d:4d:70:91:79:b0:33:48:77:36:58:
02:b0:0c:12:f8:55:74:a8:59:0d:ed:70:8d:4f:54:2a:2f:a5:
5b:fc:1d:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5Pxj0bLnF6ltJBlzLeI4nEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMWJkOTczMmU2Y2RkNmU3NDk0ZDc5MTg3ZmNhODU1YjUx
OTk5MDkwHhcNMjYwNTIyMTMwMDUyWhcNMjYwNTIzMTMwMDUyWjAzMTEwLwYDVQQD
EyhiMzc1YTBlZjUxNDU3Y2IzYjIzNjAyMjRmYjRmYjAyYzg1NzM1Yjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9HUxbFzvXb0wGStakBt5QHcdwA9
fQiGzEaMC8bmFJthre3Oxe9oc9/4i5vlQRVst8o0F8hzkINx6HfrIvYDVyXlaiC2
4/D9+K7/zGRyEkpH5bQ+7J9lttj+XpwROCXDpwh1r/uGoEQWNYOs3Rc7ev016eZV
VF8g/Bhyijs0V2geVlbEj/ZlDJ4LcctwknuyvN+h966PC8gMvaieGoOdAkjrNnEk
drg4tw4PYvXGERQUQzjDXFF35YNmWJ/E4MOAoxeEzjIEqfKEGK9eszG/gPLet3Qt
2a5Vd5NYEnlP1mJmlwfLXMJUnLA7PyR8B7RbW/x6t+alBGSLl18lLV+nVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLN1oO9RRXyzsjYCJPtPsCyFc1uXMB8GA1UdIwQY
MBaAFJ8b2XMubN1udJTXkYf8qFW1GZkJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xNGVhZDktY2JiMS00NjM5LTgxYTct
ZDhiODIwMmQ3Nzg2LzEvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8xNGVhZDktY2JiMS00NjM5LTgxYTctZDhiODIwMmQ3Nzg2
LzEvbnh2WmN5NXMzVzUwbE5lUmhfeW9WYlVabVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtTQXTujp
bJntMSlcCiJ1SFEqj13Daw16TP+rKTxCA2zGFBZWiYH1geTWRVUM+uLG0NVnzW51
o2t97p8bpshlK4OOc93eGc5pWxrVNkyG0NJIRT5EeO0pTAOP/RL7XdrVWpNIUfw1
XWQJdnnebJxZ/k1aDNSacRPbeRFLADE+2Pji/bpP0AXT3BZblJEw/qveCkz5xjp4
IOYP9G+WVr1hSy9DzQg+7SFfMbjPALQ7XcTqaLW9zwKLUdMHs1MH3My8C9h3kxMj
ZOpBdoIkAQXJqmVlZYqoYSqjiTy899AkCz1NcJF5sDNIdzZYArAMEvhVdKhZDe1w
jU9UKi+lW/wdCw==
-----END CERTIFICATE-----
Generated at Fri May 22 15:11:19 2026 by rpki-client