Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
File: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft (raw, json)
Hash identifier: CPCcALvZ00TfVoEbOhYSmynbkHnAnoyK2ZRmUVu3BVk=
Subject key identifier: 72:A5:F9:C6:C3:F9:6C:87:27:17:EC:CD:72:5A:AD:85:9E:30:89:91
Authority key identifier: 9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
Certificate issuer: /CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Certificate serial: 019D37F6F567F43FE51EF9B5C1BF53AF4B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
Manifest number: 118E
Signing time: Sun 29 Mar 2026 05:00:24 +0000
Manifest this update: Sun 29 Mar 2026 05:00:24 +0000
Manifest next update: Mon 30 Mar 2026 05:00:24 +0000
Files and hashes: 1: 9UL_7FkS2vsJIq4mulwmPO12qgU.roa (hash: PMgAFWeEqNxOYIt76P9bkFAoNa2Je/9TmNXR3UwPjvg=)
2: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl (hash: S9J1diBC01Skua7YJmgsAZCF3tGnqIYR3Wyfg7HTvkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f5:67:f4:3f:e5:1e:f9:b5:c1:bf:53:af:4b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Validity
Not Before: Mar 29 05:00:24 2026 GMT
Not After : Mar 30 05:00:24 2026 GMT
Subject: CN=72a5f9c6c3f96c872717eccd725aad859e308991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9e:1b:16:e2:51:24:64:f9:c6:1e:ae:34:4d:
c9:ae:5f:88:a0:ac:74:40:ca:36:c9:db:35:0c:82:
a0:85:ba:65:d0:21:fc:aa:b2:27:f1:20:eb:e3:c5:
85:ba:f8:44:21:a1:84:06:6d:99:2d:5a:d3:c4:21:
43:c1:22:2f:86:e1:ab:94:48:5a:e3:04:5f:f1:7d:
70:2f:14:e3:32:96:e2:fe:22:6f:c7:04:81:46:37:
66:d1:90:b4:96:e2:d7:0a:0f:e6:55:f8:39:45:4a:
15:7e:0b:1c:8c:19:c5:f7:01:15:ce:a7:dc:7c:11:
d1:65:7f:d8:5b:95:24:20:da:f2:d8:0c:8c:3e:08:
e7:ab:3f:34:f0:54:11:d7:ea:95:76:5c:7b:0c:92:
72:6a:fc:15:5b:27:0d:f7:48:b5:f5:de:e8:ae:03:
1e:cb:10:13:a0:19:d8:7d:9c:92:9d:ee:1f:a5:f0:
c7:20:3d:0c:4b:a5:69:a6:cf:5b:82:1a:b3:45:bb:
17:e3:99:07:c6:b2:f3:b9:d8:59:5c:4d:1f:b8:15:
1a:df:13:38:c8:1b:4e:e9:5e:3c:94:6b:79:91:c3:
33:56:96:87:e4:db:c4:c6:f0:c9:7a:c3:74:82:fe:
bc:4d:a6:39:13:88:d6:90:f2:82:d7:ba:6c:a9:c1:
b9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A5:F9:C6:C3:F9:6C:87:27:17:EC:CD:72:5A:AD:85:9E:30:89:91
X509v3 Authority Key Identifier:
keyid:9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9b:cc:8f:26:42:9f:92:bf:8f:ad:db:7d:bd:0f:92:79:67:
47:c3:6b:fa:5e:53:f7:79:ed:55:b4:6d:35:b6:42:fb:a2:87:
fc:80:96:fe:34:38:40:5d:f6:98:c7:6c:22:10:99:a0:99:92:
aa:38:e1:69:7e:84:5b:1d:e6:e7:12:5a:18:b3:62:11:a0:44:
f9:b2:8f:e9:8b:a9:84:87:33:5c:c1:8d:d4:44:2d:db:9c:57:
fc:f5:83:4e:50:c8:41:02:d4:9b:03:a5:ab:e3:da:dc:ad:fc:
d7:24:99:fd:e5:24:c1:55:6f:2c:51:3f:0f:42:57:19:2d:8f:
db:a3:79:bd:b5:c2:d9:f9:5f:cd:a6:df:e6:72:59:09:ae:d5:
c0:30:4c:1d:61:3b:75:72:4d:f0:83:c0:4f:ca:2d:41:ca:12:
6d:e9:29:9a:17:f3:95:f1:d7:e7:10:2f:0c:24:a1:e4:83:6b:
35:4e:08:6d:36:49:24:dc:2d:f5:88:2a:00:48:29:b9:23:29:
e9:5c:56:0a:bd:6c:52:ae:41:ec:fa:a7:40:70:c1:04:9b:75:
b3:b7:b4:99:b1:64:b4:5f:41:d5:a6:ab:55:03:9f:2d:ef:6b:
a4:7e:3d:63:38:75:ef:16:9d:38:b8:b3:33:c1:b1:d4:ea:57:
dd:6a:be:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039vVn9D/lHvm1wb9Tr0uJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllM2UwMGM2ZDJiMmY5OGQ1MTQ4MmU5NDNiOTc5M2Q0M2Jm
M2JjODYwHhcNMjYwMzI5MDUwMDI0WhcNMjYwMzMwMDUwMDI0WjAzMTEwLwYDVQQD
Eyg3MmE1ZjljNmMzZjk2Yzg3MjcxN2VjY2Q3MjVhYWQ4NTllMzA4OTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p4bFuJRJGT5xh6uNE3Jrl+IoKx0
QMo2yds1DIKghbpl0CH8qrIn8SDr48WFuvhEIaGEBm2ZLVrTxCFDwSIvhuGrlEha
4wRf8X1wLxTjMpbi/iJvxwSBRjdm0ZC0luLXCg/mVfg5RUoVfgscjBnF9wEVzqfc
fBHRZX/YW5UkINry2AyMPgjnqz808FQR1+qVdlx7DJJyavwVWycN90i19d7orgMe
yxAToBnYfZySne4fpfDHID0MS6Vpps9bghqzRbsX45kHxrLzudhZXE0fuBUa3xM4
yBtO6V48lGt5kcMzVpaH5NvExvDJesN0gv68TaY5E4jWkPKC17psqcG5pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKl+cbD+WyHJxfszXJarYWeMImRMB8GA1UdIwQY
MBaAFJ4+AMbSsvmNUUgulDuXk9Q787yGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmo0QXh0S3ktWTFSU0M2VU81ZVQxRHZ6dklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9mZmRiNjktNjgwYS00NjVjLWE0ODkt
NjZjMTQ0MjQ4MGRlLzEvbmo0QXh0S3ktWTFSU0M2VU81ZVQxRHZ6dklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9mZmRiNjktNjgwYS00NjVjLWE0ODktNjZjMTQ0MjQ4MGRl
LzEvbmo0QXh0S3ktWTFSU0M2VU81ZVQxRHZ6dklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZvMjyZC
n5K/j63bfb0PknlnR8Nr+l5T93ntVbRtNbZC+6KH/ICW/jQ4QF32mMdsIhCZoJmS
qjjhaX6EWx3m5xJaGLNiEaBE+bKP6YuphIczXMGN1EQt25xX/PWDTlDIQQLUmwOl
q+Pa3K381ySZ/eUkwVVvLFE/D0JXGS2P26N5vbXC2flfzabf5nJZCa7VwDBMHWE7
dXJN8IPAT8otQcoSbekpmhfzlfHX5xAvDCSh5INrNU4IbTZJJNwt9YgqAEgpuSMp
6VxWCr1sUq5B7PqnQHDBBJt1s7e0mbFktF9B1aarVQOfLe9rpH49Yzh17xadOLiz
M8Gx1OpX3Wq+IQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:05:00 2026 by rpki-client