Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: XmAR6+6lrKaPhSvcmKXFfsAO8/OsIMR5doORPottzOI=
Subject key identifier: 7D:EB:F3:3C:81:B6:09:60:80:5E:E6:7B:62:45:91:0C:6D:3F:85:A6
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 01A1803D5E093C9A13F8BC58F2EAB9D999B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 1A84
Signing time: Wed 28 Oct 2026 02:01:07 +0000
Manifest this update: Wed 28 Oct 2026 02:01:07 +0000
Manifest next update: Thu 29 Oct 2026 02:01:07 +0000
Files and hashes: 1: Kx2A4QHC9gQsEflStPjFwVjhvSA.roa (hash: FMGSXjNyUjkWfrbaK6kOA/2OaW9XrZEgBYS29pUlyug=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: G7PdVQ0hTnSaDZ/NfS0DI3wUWEBPLnrsD1dhPC+VdFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:5e:09:3c:9a:13:f8:bc:58:f2:ea:b9:d9:99:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Oct 28 02:01:07 2026 GMT
Not After : Oct 29 02:01:07 2026 GMT
Subject: CN=7debf33c81b60960805ee67b6245910c6d3f85a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:14:89:2c:10:30:c6:4f:c8:90:74:25:28:
a9:91:37:bf:55:88:a7:c6:2d:e7:d5:26:dc:6c:59:
17:59:bc:ab:a4:10:c4:23:99:84:ea:83:47:c5:ed:
b8:e9:7d:c3:28:58:fd:56:4a:19:23:4e:d0:82:d0:
0a:f1:bd:f0:ce:18:68:02:b2:27:0e:06:42:47:26:
83:7c:8f:f8:7b:7e:ea:fb:ce:39:ed:68:a3:69:b6:
fc:d2:e2:94:6d:5e:f7:0b:b2:21:9c:e9:dc:35:a4:
1e:3f:1a:e1:0b:35:e8:18:f9:6c:92:54:52:74:de:
ac:42:29:3a:59:19:49:48:4c:6c:88:7e:0b:9f:7b:
9b:ee:e4:24:83:f1:ff:c4:57:51:bd:85:9f:e0:89:
b7:8a:4c:1a:9e:56:3c:51:2a:2a:f1:3d:76:bc:a4:
e1:f9:96:3d:47:b5:b9:9f:38:23:8d:7a:7d:75:08:
e8:69:8b:19:18:e2:3e:37:5c:a4:71:ff:82:16:af:
7a:6a:4c:6e:1e:c8:70:cc:c6:c9:54:9f:29:6b:44:
ae:b2:58:0c:62:22:71:f6:9d:be:35:81:d5:f0:b9:
f0:61:0d:58:f4:18:1f:be:7f:f0:a8:90:b8:81:3a:
84:c6:c1:2c:96:2f:3c:57:d9:3c:1f:c1:5d:32:50:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EB:F3:3C:81:B6:09:60:80:5E:E6:7B:62:45:91:0C:6D:3F:85:A6
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7b:c4:ac:eb:51:80:11:c4:0a:06:7f:4d:c6:f8:24:46:8e:
9b:68:8f:ed:0b:29:5b:6c:08:d7:be:12:14:7d:b2:70:49:fd:
2d:18:cf:3f:cf:b3:15:d0:63:9a:25:8b:6e:23:13:55:4a:3c:
f0:0e:37:0b:fa:06:80:ec:fe:81:13:89:e9:81:1a:1f:2b:89:
00:27:55:b2:5a:12:37:e3:6a:b9:e7:b1:7b:dd:5c:60:df:11:
5f:4a:d6:7d:72:5a:2b:61:6a:22:05:0d:d3:bd:c6:d0:42:2e:
bc:54:ca:a8:2e:a2:c5:38:c0:20:35:bd:8e:98:00:e0:46:dd:
26:2d:70:10:0b:5f:35:b4:d1:bf:6f:f9:c5:6b:36:cf:90:ce:
e8:3b:be:63:c9:9b:44:26:71:d8:ce:2c:ff:1b:15:eb:31:11:
fe:86:76:c4:fc:13:59:71:35:c2:ae:7e:50:b2:b9:00:1b:82:
70:2e:d4:20:77:c1:18:9a:16:0c:38:d5:be:fc:e7:c8:25:b3:
c0:d9:26:3c:c0:77:05:67:ac:e5:25:1d:71:ae:d6:69:e9:3c:
08:ae:d0:d6:d0:22:d7:cb:f7:93:28:a1:14:99:ba:4e:4e:ab:
9e:6c:47:a1:5f:46:9f:80:e2:2b:4a:b8:df:8f:be:73:40:e6:
28:4c:a3:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAPV4JPJoT+LxY8uq52Zm5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzM2NmFmNmNlMGIxYTlmNjAxNzNiMTRiNWZkZGQ3ZTBi
OTYzMDYwHhcNMjYxMDI4MDIwMTA3WhcNMjYxMDI5MDIwMTA3WjAzMTEwLwYDVQQD
Eyg3ZGViZjMzYzgxYjYwOTYwODA1ZWU2N2I2MjQ1OTEwYzZkM2Y4NWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pIUiSwQMMZPyJB0JSipkTe/VYin
xi3n1SbcbFkXWbyrpBDEI5mE6oNHxe246X3DKFj9VkoZI07QgtAK8b3wzhhoArIn
DgZCRyaDfI/4e37q+8457Wijabb80uKUbV73C7IhnOncNaQePxrhCzXoGPlsklRS
dN6sQik6WRlJSExsiH4Ln3ub7uQkg/H/xFdRvYWf4Im3ikwanlY8USoq8T12vKTh
+ZY9R7W5nzgjjXp9dQjoaYsZGOI+N1ykcf+CFq96akxuHshwzMbJVJ8pa0SuslgM
YiJx9p2+NYHV8LnwYQ1Y9Bgfvn/wqJC4gTqExsEsli88V9k8H8FdMlBzBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3r8zyBtglggF7me2JFkQxtP4WmMB8GA1UdIwQY
MBaAFJ3DZq9s4LGp9gFzsUtf3dfguWMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgt
ODJmNDc2YjVjZmRiLzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgtODJmNDc2YjVjZmRi
LzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3vErOtR
gBHECgZ/Tcb4JEaOm2iP7QspW2wI174SFH2ycEn9LRjPP8+zFdBjmiWLbiMTVUo8
8A43C/oGgOz+gROJ6YEaHyuJACdVsloSN+Nqueexe91cYN8RX0rWfXJaK2FqIgUN
073G0EIuvFTKqC6ixTjAIDW9jpgA4EbdJi1wEAtfNbTRv2/5xWs2z5DO6Du+Y8mb
RCZx2M4s/xsV6zER/oZ2xPwTWXE1wq5+ULK5ABuCcC7UIHfBGJoWDDjVvvznyCWz
wNkmPMB3BWes5SUdca7Waek8CK7Q1tAi18v3kyihFJm6Tk6rnmxHoV9Gn4DiK0q4
34++c0DmKEyjCQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 06:16:19 2026 by rpki-client