Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft
File: nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft (raw, json)
Hash identifier: yVee/0tRiJf/tDu1PhgUReh896P1aerKlW4+p5/Rm6o=
Subject key identifier: A0:5D:FD:1D:BF:B1:83:4A:06:C3:48:9D:3C:C2:5F:15:4C:6B:BB:6D
Authority key identifier: 9C:7D:0A:01:DD:BE:83:67:19:B0:00:14:1E:A4:7A:2F:71:3B:3E:0D
Certificate issuer: /CN=9c7d0a01ddbe836719b000141ea47a2f713b3e0d
Certificate serial: 01A14DD04514D1B67EC11EAC8EAC6782CB29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft
Manifest number: DD
Signing time: Sun 18 Oct 2026 07:00:56 +0000
Manifest this update: Sun 18 Oct 2026 07:00:56 +0000
Manifest next update: Mon 19 Oct 2026 07:00:56 +0000
Files and hashes: 1: DOzgdPzODjDX1Ql-hTykAK7psLs.roa (hash: mYengSshg8va1KT9JslIYiakS9Az+FP585Uc0+emJdk=)
2: nH0KAd2-g2cZsAAUHqR6L3E7Pg0.crl (hash: hpCAQemiy7RoEqLuyQV1NqMI481KBgs5o6jpcvx76+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:d0:45:14:d1:b6:7e:c1:1e:ac:8e:ac:67:82:cb:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7d0a01ddbe836719b000141ea47a2f713b3e0d
Validity
Not Before: Oct 18 07:00:56 2026 GMT
Not After : Oct 19 07:00:56 2026 GMT
Subject: CN=a05dfd1dbfb1834a06c3489d3cc25f154c6bbb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:c5:ab:af:b2:20:02:7f:84:cb:d4:fe:fc:
39:38:ec:e4:87:f6:54:6d:5f:5c:d5:44:d6:9f:c9:
2d:80:2d:c7:56:8d:45:70:d5:53:20:51:56:6e:f8:
91:1e:d0:25:be:1f:98:a1:ba:bd:ac:d9:61:ef:a4:
1c:45:be:d7:ef:48:15:6e:c1:56:0d:2b:61:a7:3f:
78:5b:ed:6f:0d:f7:e1:86:49:a2:15:fa:9d:d6:3e:
ea:9a:7c:64:a2:6f:19:3f:94:34:18:da:83:9c:ae:
60:16:3d:e7:76:22:99:8f:3c:e5:c4:56:ea:16:b1:
d0:ac:79:f9:af:bb:39:e3:b7:42:d5:98:95:97:4d:
5b:b4:a3:4f:15:35:e6:09:5f:5e:22:e6:68:24:a0:
97:30:d4:a0:53:49:bb:00:3c:fb:2c:32:35:7d:9c:
58:14:84:3b:3a:f1:be:af:68:9a:a2:ca:00:8b:42:
27:d1:b0:97:16:02:bd:1d:de:7f:88:80:e3:7e:ff:
75:3f:e1:aa:e6:47:75:e9:1b:c7:95:f8:39:6e:23:
43:b7:63:8d:4a:03:71:8c:c9:43:6c:06:bc:dc:55:
78:73:72:6c:be:28:1a:f7:5d:1e:2d:db:a7:16:bf:
b2:d9:6e:5d:5c:f4:a9:09:0c:89:6f:5c:0e:dc:ba:
d8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5D:FD:1D:BF:B1:83:4A:06:C3:48:9D:3C:C2:5F:15:4C:6B:BB:6D
X509v3 Authority Key Identifier:
keyid:9C:7D:0A:01:DD:BE:83:67:19:B0:00:14:1E:A4:7A:2F:71:3B:3E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72dac9-7216-4e76-904c-26e16a33a2af/1/nH0KAd2-g2cZsAAUHqR6L3E7Pg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:cd:c5:89:b5:08:34:5d:c6:0f:37:f7:c6:fe:95:f4:e0:50:
0a:c4:13:82:9a:d5:6c:02:ae:d1:3d:d9:48:f1:3c:6c:28:d1:
79:02:49:67:a6:82:fb:4a:f4:13:71:46:12:49:4c:0a:cf:f6:
f9:93:e4:9e:2e:e7:b9:ef:19:3c:01:39:b8:f6:8c:8d:32:d8:
18:ec:05:c6:a5:78:37:5c:2d:8a:3d:04:45:ae:01:a2:b0:3c:
88:aa:e4:80:a8:87:ea:c8:3b:1e:0a:e5:a8:10:e9:b5:2c:6b:
fa:4e:e3:af:3e:46:5c:31:bc:ae:97:f2:75:79:1f:a2:c7:65:
b1:fd:39:14:26:c2:68:dc:44:bc:c3:6a:97:5e:f7:22:4d:b6:
d0:d8:24:04:aa:8f:71:39:6c:db:d9:fb:96:7e:6e:1d:b1:e2:
55:d2:8f:2f:3b:a2:12:82:ef:1f:83:52:7e:00:79:fa:1f:23:
eb:f7:61:fd:66:c4:24:0c:d9:fa:1a:a3:20:c9:5f:1c:ee:72:
cc:d8:2d:68:c7:89:f8:fb:80:c2:ce:9c:e7:d7:4b:a1:a7:24:
b2:9b:d6:09:ed:af:cc:8e:ad:fe:dc:92:2c:34:69:e4:f7:27:
1e:c9:ae:f1:61:fd:e0:ec:44:4a:4e:9d:a2:c7:ef:89:f0:26:
e0:c1:66:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFN0EUU0bZ+wR6sjqxngsspMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljN2QwYTAxZGRiZTgzNjcxOWIwMDAxNDFlYTQ3YTJmNzEz
YjNlMGQwHhcNMjYxMDE4MDcwMDU2WhcNMjYxMDE5MDcwMDU2WjAzMTEwLwYDVQQD
EyhhMDVkZmQxZGJmYjE4MzRhMDZjMzQ4OWQzY2MyNWYxNTRjNmJiYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb3Fq6+yIAJ/hMvU/vw5OOzkh/ZU
bV9c1UTWn8ktgC3HVo1FcNVTIFFWbviRHtAlvh+Yobq9rNlh76QcRb7X70gVbsFW
DSthpz94W+1vDffhhkmiFfqd1j7qmnxkom8ZP5Q0GNqDnK5gFj3ndiKZjzzlxFbq
FrHQrHn5r7s547dC1ZiVl01btKNPFTXmCV9eIuZoJKCXMNSgU0m7ADz7LDI1fZxY
FIQ7OvG+r2iaosoAi0In0bCXFgK9Hd5/iIDjfv91P+Gq5kd16RvHlfg5biNDt2ON
SgNxjMlDbAa83FV4c3Jsviga910eLdunFr+y2W5dXPSpCQyJb1wO3LrYPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBd/R2/sYNKBsNInTzCXxVMa7ttMB8GA1UdIwQY
MBaAFJx9CgHdvoNnGbAAFB6kei9xOz4NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkgwS0FkMi1nMmNac0FBVUhxUjZMM0U3UGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83MmRhYzktNzIxNi00ZTc2LTkwNGMt
MjZlMTZhMzNhMmFmLzEvbkgwS0FkMi1nMmNac0FBVUhxUjZMM0U3UGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83MmRhYzktNzIxNi00ZTc2LTkwNGMtMjZlMTZhMzNhMmFm
LzEvbkgwS0FkMi1nMmNac0FBVUhxUjZMM0U3UGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj83FibUI
NF3GDzf3xv6V9OBQCsQTgprVbAKu0T3ZSPE8bCjReQJJZ6aC+0r0E3FGEklMCs/2
+ZPkni7nue8ZPAE5uPaMjTLYGOwFxqV4N1wtij0ERa4BorA8iKrkgKiH6sg7Hgrl
qBDptSxr+k7jrz5GXDG8rpfydXkfosdlsf05FCbCaNxEvMNql173Ik220NgkBKqP
cTls29n7ln5uHbHiVdKPLzuiEoLvH4NSfgB5+h8j6/dh/WbEJAzZ+hqjIMlfHO5y
zNgtaMeJ+PuAws6c59dLoackspvWCe2vzI6t/tySLDRp5PcnHsmu8WH94OxESk6d
osfvifAm4MFmUA==
-----END CERTIFICATE-----
Generated at Sun Oct 18 17:39:29 2026 by rpki-client