Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/f51972-ab03-460a-9a74-cf1d224185bd/1/nXkeE9wEYAP1t-JhT84opb3qOgI.mft
File: nXkeE9wEYAP1t-JhT84opb3qOgI.mft (raw, json)
Hash identifier: 98fPNB1MldnqkPrDvePi1SV/xfVTF+gdYYSdCbuSyvc=
Subject key identifier: D1:4E:C5:FA:27:23:08:3B:6C:E5:4A:63:EE:68:3B:AC:16:4E:BC:FC
Authority key identifier: 9D:79:1E:13:DC:04:60:03:F5:B7:E2:61:4F:CE:28:A5:BD:EA:3A:02
Certificate issuer: /CN=9d791e13dc046003f5b7e2614fce28a5bdea3a02
Certificate serial: 01A17770E5927B0B2481596E185836B39B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXkeE9wEYAP1t-JhT84opb3qOgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f51972-ab03-460a-9a74-cf1d224185bd/1/nXkeE9wEYAP1t-JhT84opb3qOgI.mft
Manifest number: FC
Signing time: Mon 26 Oct 2026 09:00:49 +0000
Manifest this update: Mon 26 Oct 2026 09:00:49 +0000
Manifest next update: Tue 27 Oct 2026 09:00:49 +0000
Files and hashes: 1: nXkeE9wEYAP1t-JhT84opb3qOgI.crl (hash: l28xsjUiYKFOzLpvmWs8eBPZxVqg1pEGc2qjv44ZtUc=)
2: z28nNIIRJ-I33jkHuAcL9epzObs.roa (hash: uoiQ0ENy0WWHs/rpsks+l1eZR/y5bsE8FwsAwqAEXbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f51972-ab03-460a-9a74-cf1d224185bd/1/nXkeE9wEYAP1t-JhT84opb3qOgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f51972-ab03-460a-9a74-cf1d224185bd/1/nXkeE9wEYAP1t-JhT84opb3qOgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXkeE9wEYAP1t-JhT84opb3qOgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:70:e5:92:7b:0b:24:81:59:6e:18:58:36:b3:9b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d791e13dc046003f5b7e2614fce28a5bdea3a02
Validity
Not Before: Oct 26 09:00:49 2026 GMT
Not After : Oct 27 09:00:49 2026 GMT
Subject: CN=d14ec5fa2723083b6ce54a63ee683bac164ebcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:c0:e1:82:6d:d8:56:95:42:d4:b1:5b:00:
13:e5:30:0f:8c:e6:2f:43:7e:cd:97:78:0f:df:41:
67:ea:51:6d:54:d0:80:f3:54:74:a5:1e:11:be:4a:
42:43:76:5e:b2:e9:be:8c:74:e8:b7:6b:ff:fa:af:
14:53:5c:2e:2c:a5:a9:72:c6:b7:88:9f:04:1e:f1:
36:c5:b9:c1:21:38:9e:1f:97:96:89:3c:58:8e:54:
aa:73:87:bd:61:8c:79:ef:5c:7b:ac:c4:db:79:da:
d1:99:5e:b3:fe:44:0d:dd:ad:3e:4b:61:16:4c:9c:
65:4f:be:ae:4f:88:65:83:60:96:e4:91:61:ef:18:
6b:14:21:22:ae:71:0a:95:ba:d5:4e:31:90:52:d5:
9d:77:31:e4:bb:f7:39:dd:2d:70:fe:97:05:a7:93:
9a:04:11:a4:d1:94:21:82:a6:68:a9:d3:19:6a:4f:
09:f6:61:fb:3a:64:81:c3:88:2e:63:ee:8d:f5:ea:
46:06:52:13:4b:c9:19:08:d5:9c:2e:04:eb:ca:d6:
51:62:8e:e9:11:14:cd:00:d2:29:4a:b5:3c:6e:81:
aa:be:87:1a:29:11:14:0a:74:cd:4b:aa:f8:00:28:
dc:01:c9:ce:3b:c7:21:ff:f4:c9:26:31:da:a8:1b:
95:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4E:C5:FA:27:23:08:3B:6C:E5:4A:63:EE:68:3B:AC:16:4E:BC:FC
X509v3 Authority Key Identifier:
keyid:9D:79:1E:13:DC:04:60:03:F5:B7:E2:61:4F:CE:28:A5:BD:EA:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXkeE9wEYAP1t-JhT84opb3qOgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f51972-ab03-460a-9a74-cf1d224185bd/1/nXkeE9wEYAP1t-JhT84opb3qOgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f51972-ab03-460a-9a74-cf1d224185bd/1/nXkeE9wEYAP1t-JhT84opb3qOgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c4:28:eb:13:a0:96:b0:7c:60:3d:c0:ff:87:72:0b:e1:54:
6b:68:ed:dd:5b:99:77:d2:77:24:9a:cb:4f:16:7c:79:3b:45:
d3:59:b0:4a:08:ee:f0:4e:e4:83:1f:1f:d2:7d:39:9d:a3:27:
aa:67:c2:0f:ff:5d:28:2b:19:f3:e3:ec:ac:5e:27:45:9b:70:
15:98:29:12:73:01:e1:d0:a3:ea:63:36:96:92:89:24:5f:45:
2b:81:70:81:2c:d2:95:46:2c:52:97:35:6d:ba:6d:c5:9f:03:
2a:93:e4:18:3b:f4:17:71:3b:00:77:7b:b1:11:54:46:61:fe:
5b:f3:7c:91:8f:62:fc:ed:35:93:f1:13:20:5c:ef:20:75:b8:
56:ca:57:23:99:25:3d:72:fa:bd:6f:b8:1b:55:c8:a7:f7:69:
a7:22:4f:6f:62:7a:c3:1d:4e:0f:14:e9:5e:03:86:80:5c:5b:
77:f7:4d:e0:f5:39:eb:51:59:26:ba:46:50:cd:36:e5:82:ed:
34:76:9f:7d:d0:01:7d:fd:e9:ba:81:a1:12:f2:3a:e9:ff:f7:
88:12:43:ec:46:09:5a:27:6e:72:45:31:f8:48:d4:f8:d1:fa:
15:9d:dc:61:07:10:ca:78:24:84:33:6e:5f:7a:ec:d0:5c:b1:
86:38:6c:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3cOWSewskgVluGFg2s5sdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNzkxZTEzZGMwNDYwMDNmNWI3ZTI2MTRmY2UyOGE1YmRl
YTNhMDIwHhcNMjYxMDI2MDkwMDQ5WhcNMjYxMDI3MDkwMDQ5WjAzMTEwLwYDVQQD
EyhkMTRlYzVmYTI3MjMwODNiNmNlNTRhNjNlZTY4M2JhYzE2NGViY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfrA4YJt2FaVQtSxWwAT5TAPjOYv
Q37Nl3gP30Fn6lFtVNCA81R0pR4RvkpCQ3Zesum+jHTot2v/+q8UU1wuLKWpcsa3
iJ8EHvE2xbnBITieH5eWiTxYjlSqc4e9YYx571x7rMTbedrRmV6z/kQN3a0+S2EW
TJxlT76uT4hlg2CW5JFh7xhrFCEirnEKlbrVTjGQUtWddzHku/c53S1w/pcFp5Oa
BBGk0ZQhgqZoqdMZak8J9mH7OmSBw4guY+6N9epGBlITS8kZCNWcLgTrytZRYo7p
ERTNANIpSrU8boGqvocaKREUCnTNS6r4ACjcAcnOO8ch//TJJjHaqBuV+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFOxfonIwg7bOVKY+5oO6wWTrz8MB8GA1UdIwQY
MBaAFJ15HhPcBGAD9bfiYU/OKKW96joCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblhrZUU5d0VZQVAxdC1KaFQ4NG9wYjNxT2dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mNTE5NzItYWIwMy00NjBhLTlhNzQt
Y2YxZDIyNDE4NWJkLzEvblhrZUU5d0VZQVAxdC1KaFQ4NG9wYjNxT2dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mNTE5NzItYWIwMy00NjBhLTlhNzQtY2YxZDIyNDE4NWJk
LzEvblhrZUU5d0VZQVAxdC1KaFQ4NG9wYjNxT2dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisQo6xOg
lrB8YD3A/4dyC+FUa2jt3VuZd9J3JJrLTxZ8eTtF01mwSgju8E7kgx8f0n05naMn
qmfCD/9dKCsZ8+PsrF4nRZtwFZgpEnMB4dCj6mM2lpKJJF9FK4FwgSzSlUYsUpc1
bbptxZ8DKpPkGDv0F3E7AHd7sRFURmH+W/N8kY9i/O01k/ETIFzvIHW4VspXI5kl
PXL6vW+4G1XIp/dppyJPb2J6wx1ODxTpXgOGgFxbd/dN4PU561FZJrpGUM025YLt
NHaffdABff3puoGhEvI66f/3iBJD7EYJWiduckUx+EjU+NH6FZ3cYQcQyngkhDNu
X3rs0Fyxhjhs4Q==
-----END CERTIFICATE-----
Generated at Mon Oct 26 19:45:06 2026 by rpki-client