Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
File: N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft (raw, json)
Hash identifier: TzICzWzo1LqsKojm1Nsi4If97UryFH6KNh2+YgMyA4o=
Subject key identifier: 62:4E:4E:6D:88:9B:CB:2A:BF:81:DF:83:E5:87:DD:B9:BE:00:AC:A8
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Certificate issuer: /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial: 01A11FADD10755952FC527A8E06D894583C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
Manifest number: 1A99
Signing time: Fri 09 Oct 2026 08:00:47 +0000
Manifest this update: Fri 09 Oct 2026 08:00:47 +0000
Manifest next update: Sat 10 Oct 2026 08:00:47 +0000
Files and hashes: 1: 2a6CDxxUrQGBmDt9bRl1JF_nyvc.roa (hash: ZSsnNRN6qb6nlLwR6tJUMByyx0s8BQTn0qVgNGvcWZc=)
2: N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl (hash: cU6jzyDQAJDsxHNah2MhCtnVKAY/NcLtEPrlF9opNNs=)
3: Ol3Cdb1XyRY6urO3sw4yVDwme94.roa (hash: tfUvfQzgGXJJiO1C8x+8AL672Tfl8NCYZs94wHKASfw=)
4: fJoKECLKUeD5DLyAzQSfUcqojno.roa (hash: 3zNqg/msTStClL6VJhx0R8PHg/rjNiAgrUFnWqVj+Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:ad:d1:07:55:95:2f:c5:27:a8:e0:6d:89:45:83:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Validity
Not Before: Oct 9 08:00:47 2026 GMT
Not After : Oct 10 08:00:47 2026 GMT
Subject: CN=624e4e6d889bcb2abf81df83e587ddb9be00aca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:67:ef:f0:c8:2a:5a:cc:b7:b9:9c:b8:df:d3:
5d:71:11:51:79:68:47:fe:5f:b6:91:2c:2d:b3:04:
09:9a:20:31:25:1a:16:91:e5:ff:53:cf:96:40:f1:
c3:e8:57:50:bc:d4:21:71:17:06:59:46:c3:5d:79:
df:f3:85:f0:dd:45:26:a6:5b:29:ca:b2:46:f0:61:
a4:7f:58:f6:b1:96:c4:c2:6f:4f:a9:95:c8:50:44:
7a:84:4e:ac:86:04:e8:b0:1b:0f:09:0b:0e:b1:bc:
48:2f:ff:bf:bc:a7:6c:ae:bc:fb:3b:14:90:0b:61:
21:ec:65:8a:20:77:ff:61:ef:dd:ea:a2:47:bc:70:
ad:ed:29:af:19:c6:0a:e3:1d:c9:6c:62:24:39:ce:
65:41:62:72:d8:51:59:c3:66:59:ea:b6:ae:d6:5b:
72:c4:83:f8:7f:be:79:71:07:c5:e5:66:22:31:e1:
37:99:2d:95:1d:35:bc:32:58:15:50:a0:85:73:6a:
a7:2a:21:d1:5c:41:74:f5:08:b3:85:31:44:93:81:
27:30:c0:78:05:4b:f5:19:96:39:7e:27:54:c7:74:
07:c1:26:14:c0:e3:6b:9a:3b:3e:3b:56:6f:34:d0:
93:2d:9c:03:b4:b4:6f:55:20:06:87:aa:a6:ab:c0:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4E:4E:6D:88:9B:CB:2A:BF:81:DF:83:E5:87:DD:B9:BE:00:AC:A8
X509v3 Authority Key Identifier:
keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:0b:94:f7:a7:04:0a:eb:02:11:e7:55:b3:93:8f:71:36:f9:
46:33:fe:82:e7:53:da:0a:9e:55:e7:74:1d:7f:42:7b:27:16:
dd:7c:5c:4e:58:e3:16:28:39:84:23:0a:4d:ea:f0:0d:2d:dd:
1a:37:7f:a0:48:74:2f:61:40:04:19:9e:f8:d5:d8:5c:c6:c8:
c1:b4:a1:39:6f:42:e1:18:97:8d:e3:ef:8f:bd:42:6e:c3:09:
97:ef:bd:1c:2a:0e:87:63:3b:ac:11:8f:5b:3e:14:87:59:e8:
54:66:b5:e5:18:a5:07:8d:42:76:6b:cf:f5:2d:e0:8a:b7:98:
af:61:17:ec:90:ce:fa:d1:20:9b:ee:7c:de:51:c8:fd:38:ef:
cc:91:9f:4d:bd:e7:63:f8:7a:a0:cd:48:4c:85:53:f3:b5:17:
fb:b1:5d:33:1c:ed:e3:c7:13:ce:3c:d5:3f:81:d9:71:65:af:
f6:71:6e:9b:df:a3:41:f7:95:36:8e:a5:8e:a4:64:2c:07:98:
2e:65:f0:17:d7:80:5d:08:52:c9:0a:52:10:0b:46:b1:7f:94:
85:be:75:07:5e:9e:a2:f5:c0:16:db:c4:f6:6f:41:1b:e3:1d:
b6:e4:c9:26:31:66:07:17:46:7f:c9:16:66:df:17:8d:1f:b5:
46:cd:dd:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEfrdEHVZUvxSeo4G2JRYPFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OGFhNmVkNGI2Y2FjNmIzYTUyOTYxYmNmYTIyOWNmZGEw
MDA4MGUwHhcNMjYxMDA5MDgwMDQ3WhcNMjYxMDEwMDgwMDQ3WjAzMTEwLwYDVQQD
Eyg2MjRlNGU2ZDg4OWJjYjJhYmY4MWRmODNlNTg3ZGRiOWJlMDBhY2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mfv8MgqWsy3uZy439NdcRFReWhH
/l+2kSwtswQJmiAxJRoWkeX/U8+WQPHD6FdQvNQhcRcGWUbDXXnf84Xw3UUmplsp
yrJG8GGkf1j2sZbEwm9PqZXIUER6hE6shgTosBsPCQsOsbxIL/+/vKdsrrz7OxSQ
C2Eh7GWKIHf/Ye/d6qJHvHCt7SmvGcYK4x3JbGIkOc5lQWJy2FFZw2ZZ6rau1lty
xIP4f755cQfF5WYiMeE3mS2VHTW8MlgVUKCFc2qnKiHRXEF09QizhTFEk4EnMMB4
BUv1GZY5fidUx3QHwSYUwONrmjs+O1ZvNNCTLZwDtLRvVSAGh6qmq8CkewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJOTm2Im8sqv4Hfg+WH3bm+AKyoMB8GA1UdIwQY
MBaAFDeKpu1LbKxrOlKWG8+iKc/aAAgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAt
ZjRiOWRhNDgwZWUyLzEvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAtZjRiOWRhNDgwZWUy
LzEvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0QuU96cE
CusCEedVs5OPcTb5RjP+gudT2gqeVed0HX9CeycW3XxcTljjFig5hCMKTerwDS3d
Gjd/oEh0L2FABBme+NXYXMbIwbShOW9C4RiXjePvj71CbsMJl++9HCoOh2M7rBGP
Wz4Uh1noVGa15RilB41CdmvP9S3gireYr2EX7JDO+tEgm+583lHI/TjvzJGfTb3n
Y/h6oM1ITIVT87UX+7FdMxzt48cTzjzVP4HZcWWv9nFum9+jQfeVNo6ljqRkLAeY
LmXwF9eAXQhSyQpSEAtGsX+Uhb51B16eovXAFtvE9m9BG+MdtuTJJjFmBxdGf8kW
Zt8XjR+1Rs3dDg==
-----END CERTIFICATE-----
Generated at Fri Oct 9 16:39:38 2026 by rpki-client