Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
File: nrsWvFz7nr7DQthaRqotzsdZnHQ.mft (raw, json)
Hash identifier: dIUuMJ7IOTCkXlQY8eZ1BSmoMhJiyu3D8sPIT7LjszE=
Subject key identifier: FB:F6:DF:BA:5C:1D:A8:B2:39:A3:42:70:E5:FD:36:B6:45:0F:78:BC
Authority key identifier: 9E:BB:16:BC:5C:FB:9E:BE:C3:42:D8:5A:46:AA:2D:CE:C7:59:9C:74
Certificate issuer: /CN=9ebb16bc5cfb9ebec342d85a46aa2dcec7599c74
Certificate serial: 01A17DE1BD42055907A7A4DB1767E60F38C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
Manifest number: 013F
Signing time: Tue 27 Oct 2026 15:01:48 +0000
Manifest this update: Tue 27 Oct 2026 15:01:48 +0000
Manifest next update: Wed 28 Oct 2026 15:01:48 +0000
Files and hashes: 1: H27MD2CieLZp0Gd96y24V6eN1uk.roa (hash: v0jt11oYg3Kn2bNdyfMBSWovTVFN50C6d1JZmMFdqoQ=)
2: nrsWvFz7nr7DQthaRqotzsdZnHQ.crl (hash: ByXWpsmk1D46MthzdMXcBUwSmPyjNV/eXKdawa1A3TE=)
3: sc2FhAecUe53TLCvtBXPAlXJXIM.roa (hash: E7Uzf+BTtrQ4zwZ86xm4BEd5CWBMA2VIf5T230VCzkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 15:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:bd:42:05:59:07:a7:a4:db:17:67:e6:0f:38:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebb16bc5cfb9ebec342d85a46aa2dcec7599c74
Validity
Not Before: Oct 27 15:01:48 2026 GMT
Not After : Oct 28 15:01:48 2026 GMT
Subject: CN=fbf6dfba5c1da8b239a34270e5fd36b6450f78bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:ea:10:26:29:7d:79:ee:09:23:cd:e5:01:
31:13:ac:32:2f:df:34:dc:e2:6c:e6:d9:72:be:39:
a7:f3:ef:c7:98:3b:31:da:f4:26:98:e1:fc:1c:ce:
3f:31:73:00:43:bb:5a:2f:2d:b5:7e:1a:d3:52:a4:
ac:3d:9b:45:57:dd:84:b7:6b:00:c1:71:e7:e5:df:
ef:8c:7e:81:27:c8:9b:c1:9d:d4:ed:9f:04:63:50:
56:18:78:d3:1a:3e:9a:c3:e3:9f:36:61:d7:5c:25:
53:56:be:34:ff:b0:aa:71:39:4e:f3:c4:52:a0:af:
3c:c4:89:be:01:4a:ea:5b:5d:b0:06:45:2b:78:32:
1e:26:c4:06:b8:77:f2:01:98:b3:b8:63:02:3d:25:
3c:74:41:90:42:0a:79:5b:17:33:66:d9:a0:da:46:
63:31:b9:c4:57:74:30:ef:f9:2e:b5:7f:61:eb:4c:
7b:bf:de:54:d7:8f:92:9a:14:f7:37:bb:16:a0:94:
7c:4a:19:25:6e:11:b2:9e:09:72:48:02:a9:58:d2:
10:46:e0:bc:47:90:e6:d1:70:3b:f8:aa:6c:00:74:
ad:66:8e:3d:20:d2:4f:8e:2e:9c:31:aa:f1:17:45:
aa:eb:35:0e:4c:81:49:8a:93:2c:c5:9c:9f:58:27:
b7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F6:DF:BA:5C:1D:A8:B2:39:A3:42:70:E5:FD:36:B6:45:0F:78:BC
X509v3 Authority Key Identifier:
keyid:9E:BB:16:BC:5C:FB:9E:BE:C3:42:D8:5A:46:AA:2D:CE:C7:59:9C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrsWvFz7nr7DQthaRqotzsdZnHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/nrsWvFz7nr7DQthaRqotzsdZnHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0f:b2:3a:71:dd:0f:7e:53:3f:40:c4:63:c5:71:38:1e:0a:
c7:62:a8:e9:a1:c5:f0:4b:04:84:93:0e:1c:6c:1a:88:63:99:
82:9b:94:e6:9f:a6:44:cf:54:f1:de:5d:82:a1:f8:8f:db:77:
e3:8e:23:9e:d8:52:e3:96:b8:5c:b8:35:e7:7c:3e:0d:a2:43:
df:05:0b:58:2f:ca:d6:6b:f1:a8:22:ac:0a:91:28:ab:a1:ba:
69:0e:74:72:84:90:ec:2f:f0:8a:0c:ac:4e:14:0c:0d:ac:e1:
db:7e:bb:55:20:c7:71:55:4e:dc:84:5a:f1:29:58:06:57:2a:
4f:bb:d0:3d:70:8f:1b:42:6f:01:7b:4d:f9:a1:ae:a2:57:99:
09:c2:7c:0f:f9:13:fa:a6:86:19:98:d2:82:86:1f:25:be:1a:
8e:e2:0e:55:53:76:94:27:e3:cd:4b:2c:50:c2:fd:9d:81:59:
0f:23:b6:e0:4a:5b:0f:f6:92:38:7c:a9:b8:40:da:36:87:0c:
d8:54:30:88:65:e4:d7:09:15:62:99:db:e2:10:83:7d:1b:af:
40:f8:a7:78:f0:e6:3e:bb:65:f5:be:96:8a:da:5f:48:0b:83:
99:df:75:7b:03:de:b4:3c:1f:29:40:ed:94:07:2f:94:40:af:
3a:e4:e5:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF94b1CBVkHp6TbF2fmDzjDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYmIxNmJjNWNmYjllYmVjMzQyZDg1YTQ2YWEyZGNlYzc1
OTljNzQwHhcNMjYxMDI3MTUwMTQ4WhcNMjYxMDI4MTUwMTQ4WjAzMTEwLwYDVQQD
EyhmYmY2ZGZiYTVjMWRhOGIyMzlhMzQyNzBlNWZkMzZiNjQ1MGY3OGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaHqECYpfXnuCSPN5QExE6wyL980
3OJs5tlyvjmn8+/HmDsx2vQmmOH8HM4/MXMAQ7taLy21fhrTUqSsPZtFV92Et2sA
wXHn5d/vjH6BJ8ibwZ3U7Z8EY1BWGHjTGj6aw+OfNmHXXCVTVr40/7CqcTlO88RS
oK88xIm+AUrqW12wBkUreDIeJsQGuHfyAZizuGMCPSU8dEGQQgp5WxczZtmg2kZj
MbnEV3Qw7/kutX9h60x7v95U14+SmhT3N7sWoJR8ShklbhGynglySAKpWNIQRuC8
R5Dm0XA7+KpsAHStZo49INJPji6cMarxF0Wq6zUOTIFJipMsxZyfWCe3kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPv237pcHaiyOaNCcOX9NrZFD3i8MB8GA1UdIwQY
MBaAFJ67Frxc+56+w0LYWkaqLc7HWZx0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJzV3ZGejducjdEUXRoYVJxb3R6c2RabkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMt
NGNlNDc3ZGJiNDA3LzEvbnJzV3ZGejducjdEUXRoYVJxb3R6c2RabkhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMtNGNlNDc3ZGJiNDA3
LzEvbnJzV3ZGejducjdEUXRoYVJxb3R6c2RabkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsw+yOnHd
D35TP0DEY8VxOB4Kx2Ko6aHF8EsEhJMOHGwaiGOZgpuU5p+mRM9U8d5dgqH4j9t3
444jnthS45a4XLg153w+DaJD3wULWC/K1mvxqCKsCpEoq6G6aQ50coSQ7C/wigys
ThQMDazh2367VSDHcVVO3IRa8SlYBlcqT7vQPXCPG0JvAXtN+aGuoleZCcJ8D/kT
+qaGGZjSgoYfJb4ajuIOVVN2lCfjzUssUML9nYFZDyO24EpbD/aSOHypuEDaNocM
2FQwiGXk1wkVYpnb4hCDfRuvQPinePDmPrtl9b6WitpfSAuDmd91ewPetDwfKUDt
lAcvlECvOuTlxg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:49:47 2026 by rpki-client