
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.mft
File: _NWPqid85i17RmD_FIja0mxSR8s.mft (raw, json)
Hash identifier: xNysgXd6sOWasCc3oprqbdeZUAHIvvdr5nLcXWvg8PY=
Subject key identifier: C4:B6:10:B4:A2:18:E0:85:5D:72:CF:B1:0C:09:C1:43:A2:34:92:36
Authority key identifier: FC:D5:8F:AA:27:7C:E6:2D:7B:46:60:FF:14:88:DA:D2:6C:52:47:CB
Certificate issuer: /CN=fcd58faa277ce62d7b4660ff1488dad26c5247cb
Certificate serial: 01A18563D0CF4F4BC8D73610D3A344F8524E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NWPqid85i17RmD_FIja0mxSR8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.mft
Manifest number: 81
Signing time: Thu 29 Oct 2026 02:01:13 +0000
Manifest this update: Thu 29 Oct 2026 02:01:13 +0000
Manifest next update: Fri 30 Oct 2026 02:01:13 +0000
Files and hashes: 1: WxxM6MgRQuQCHwZfkRvOLW-3RUM.roa (hash: U6Td7uAG7reeHiTfQxI1PpECAeu9USD7DlfHvDW3/Ds=)
2: _NWPqid85i17RmD_FIja0mxSR8s.crl (hash: bKCYBpDg9IG4VPPk7da8SENWUunYDMpYSnDpOtGrN00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NWPqid85i17RmD_FIja0mxSR8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:63:d0:cf:4f:4b:c8:d7:36:10:d3:a3:44:f8:52:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd58faa277ce62d7b4660ff1488dad26c5247cb
Validity
Not Before: Oct 29 02:01:13 2026 GMT
Not After : Oct 30 02:01:13 2026 GMT
Subject: CN=c4b610b4a218e0855d72cfb10c09c143a2349236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:a9:f3:f9:20:43:ef:f3:e4:3b:9a:3b:3d:
4e:0e:fb:69:55:0b:22:ca:d4:b0:f1:75:e3:1a:9d:
06:d4:ea:2f:2e:ff:3b:36:c9:62:51:6d:84:a9:a9:
4d:c7:83:ed:e7:f7:96:f4:e6:22:6d:f4:1c:eb:e6:
4c:b1:f0:f4:ee:7d:03:07:f8:da:35:ed:ec:da:cb:
96:7d:8b:60:9c:73:65:d7:9b:5b:f6:90:e0:71:d8:
35:ad:7b:4b:fe:22:aa:60:05:96:45:a5:2d:64:a5:
5d:78:64:ce:ae:d1:e2:a8:bd:6a:16:cb:20:97:e2:
cb:19:dd:75:00:92:74:63:3f:ba:20:56:00:79:3f:
a1:36:e4:25:25:78:9d:a3:5e:c6:29:4c:9f:84:08:
72:6e:ff:01:a9:91:47:78:11:61:18:6c:f3:d0:34:
0f:b0:96:ca:12:12:fe:60:17:16:6c:63:22:2c:70:
9a:b7:36:47:aa:7b:fd:bb:38:73:9e:69:e1:83:c3:
cb:47:a8:41:01:db:66:2b:fa:8d:b7:e4:5d:9d:5e:
28:1f:68:76:c4:d3:f5:6a:d8:61:b4:41:d3:9a:4d:
e3:9c:c0:2f:ca:9a:8e:19:ed:f8:61:69:d6:5e:04:
c8:af:f7:51:74:3c:27:29:76:81:78:27:da:07:b4:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B6:10:B4:A2:18:E0:85:5D:72:CF:B1:0C:09:C1:43:A2:34:92:36
X509v3 Authority Key Identifier:
keyid:FC:D5:8F:AA:27:7C:E6:2D:7B:46:60:FF:14:88:DA:D2:6C:52:47:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NWPqid85i17RmD_FIja0mxSR8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/633c72-fd44-41bd-95b7-31c234bd9700/1/_NWPqid85i17RmD_FIja0mxSR8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:5d:a2:76:b4:55:67:50:4c:f8:b3:43:d2:74:83:4e:6a:86:
13:11:54:61:0c:b8:2b:b5:77:74:09:f7:a5:0a:53:73:c0:3c:
25:8b:e7:d8:b7:90:58:51:b3:5f:99:e9:a9:48:00:db:cb:45:
0c:6a:83:f7:25:c9:a2:94:df:27:1d:69:e3:46:53:41:11:3c:
2e:b5:c1:d4:7a:20:7f:3e:e1:1f:67:8c:fc:4b:db:69:9c:e0:
00:d6:93:ea:c2:c2:a0:9d:ae:1d:d8:11:4b:9d:6c:b1:b2:c8:
86:c8:9e:5a:56:e8:8f:39:38:f6:73:1f:f6:2b:78:e8:ff:a9:
9c:ac:81:95:a5:e9:d4:6b:95:fa:f3:da:98:03:2e:b9:b9:21:
f1:58:91:c0:2d:fa:09:18:21:eb:cf:80:65:a4:79:6e:5f:a1:
29:8b:7b:50:97:63:cd:86:d0:4a:fd:11:6f:4b:78:30:9b:9b:
dc:97:71:40:2b:3e:30:0a:86:82:fc:c5:37:fd:95:d7:f9:c7:
d0:e7:ba:3d:2c:27:84:e8:2d:ca:13:f3:b4:7d:78:4b:74:c3:
53:5b:ec:15:4d:df:e2:df:f1:fc:8e:cf:90:da:ee:b5:cc:22:
f5:5a:27:c9:de:23:32:ae:f3:2d:62:ef:8b:53:a8:b1:80:56:
87:68:69:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGFY9DPT0vI1zYQ06NE+FJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZDU4ZmFhMjc3Y2U2MmQ3YjQ2NjBmZjE0ODhkYWQyNmM1
MjQ3Y2IwHhcNMjYxMDI5MDIwMTEzWhcNMjYxMDMwMDIwMTEzWjAzMTEwLwYDVQQD
EyhjNGI2MTBiNGEyMThlMDg1NWQ3MmNmYjEwYzA5YzE0M2EyMzQ5MjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV+p8/kgQ+/z5DuaOz1ODvtpVQsi
ytSw8XXjGp0G1OovLv87NsliUW2EqalNx4Pt5/eW9OYibfQc6+ZMsfD07n0DB/ja
Ne3s2suWfYtgnHNl15tb9pDgcdg1rXtL/iKqYAWWRaUtZKVdeGTOrtHiqL1qFssg
l+LLGd11AJJ0Yz+6IFYAeT+hNuQlJXido17GKUyfhAhybv8BqZFHeBFhGGzz0DQP
sJbKEhL+YBcWbGMiLHCatzZHqnv9uzhznmnhg8PLR6hBAdtmK/qNt+RdnV4oH2h2
xNP1athhtEHTmk3jnMAvypqOGe34YWnWXgTIr/dRdDwnKXaBeCfaB7TFPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMS2ELSiGOCFXXLPsQwJwUOiNJI2MB8GA1UdIwQY
MBaAFPzVj6onfOYte0Zg/xSI2tJsUkfLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX05XUHFpZDg1aTE3Um1EX0ZJamEwbXhTUjhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82MzNjNzItZmQ0NC00MWJkLTk1Yjct
MzFjMjM0YmQ5NzAwLzEvX05XUHFpZDg1aTE3Um1EX0ZJamEwbXhTUjhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC82MzNjNzItZmQ0NC00MWJkLTk1YjctMzFjMjM0YmQ5NzAw
LzEvX05XUHFpZDg1aTE3Um1EX0ZJamEwbXhTUjhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsF2idrRV
Z1BM+LND0nSDTmqGExFUYQy4K7V3dAn3pQpTc8A8JYvn2LeQWFGzX5npqUgA28tF
DGqD9yXJopTfJx1p40ZTQRE8LrXB1Hogfz7hH2eM/EvbaZzgANaT6sLCoJ2uHdgR
S51ssbLIhsieWlbojzk49nMf9it46P+pnKyBlaXp1GuV+vPamAMuubkh8ViRwC36
CRgh68+AZaR5bl+hKYt7UJdjzYbQSv0Rb0t4MJub3JdxQCs+MAqGgvzFN/2V1/nH
0Oe6PSwnhOgtyhPztH14S3TDU1vsFU3f4t/x/I7PkNrutcwi9Vonyd4jMq7zLWLv
i1OosYBWh2hpnQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 07:56:50 2026 by rpki-client