Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
File: nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft (raw, json)
Hash identifier: /jaxjqYRioRtmI24o4gzbKI67xnEBKaAv7maTPHhk3Q=
Subject key identifier: 69:6B:12:AD:D3:DD:FE:9A:05:96:B0:A7:0C:AA:08:83:B9:2C:DB:66
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial: 01A08DFB7BDD771D48EFB87EC3A7C0577F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
Manifest number: 1A4C
Signing time: Fri 11 Sep 2026 01:01:03 +0000
Manifest this update: Fri 11 Sep 2026 01:01:03 +0000
Manifest next update: Sat 12 Sep 2026 01:01:03 +0000
Files and hashes: 1: 4SOYImJHyJqTwCMAGjKjr0oBLY8.roa (hash: QqjpUxrKkhwY2QSOOSplb9rBwA2D3pk3AGplsT4xaRc=)
2: cwpueJkAgwR--N1HcP66vBFBfHs.roa (hash: e4Ux6XpWYsR7DA/nLXViGlPPyLLw1PTyAUYLhKKvKpY=)
3: g8_04g_ZLptnhbFMWnALX7jI71Q.roa (hash: 70TJV8gzoaCntblmfItJ9c4lhtIDo3EwTvJjPUN694A=)
4: nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl (hash: GVes5T4hmXIhTie9GC3Vz7GWZ2xVqYUgbd51zMMO/io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:fb:7b:dd:77:1d:48:ef:b8:7e:c3:a7:c0:57:7f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Validity
Not Before: Sep 11 01:01:03 2026 GMT
Not After : Sep 12 01:01:03 2026 GMT
Subject: CN=696b12add3ddfe9a0596b0a70caa0883b92cdb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:54:18:95:90:69:95:26:84:10:92:2a:c3:
ca:72:11:7b:ac:da:8c:fe:6b:76:f9:3e:4d:6c:ad:
c8:32:cf:e0:65:83:f7:11:5d:64:6f:bc:b6:14:e9:
83:1a:f6:cc:ed:2f:df:dc:0f:ae:6a:0b:41:75:c7:
9c:f1:8e:eb:2b:a9:ef:93:97:74:61:77:79:03:46:
69:22:8d:20:92:b2:4b:18:8a:10:6d:65:01:68:13:
5b:5d:ff:b2:0b:eb:64:3a:a7:a4:7b:a0:a8:1c:0e:
90:fc:aa:07:75:32:8e:ab:89:6c:5b:4a:81:b1:eb:
70:2a:63:4d:b2:f7:59:13:64:49:67:42:f3:50:90:
65:c8:4d:cb:58:23:5a:e1:43:de:13:de:de:5d:68:
e4:1a:2b:b8:e2:1e:8f:66:4e:93:aa:2b:fb:cb:f0:
a5:6c:84:c9:f6:3f:aa:51:b5:d4:dd:fe:bb:d2:a8:
ad:cf:49:0a:75:43:29:69:ae:2a:71:23:58:3e:c8:
4a:ee:7d:a6:c7:1c:91:a3:30:0d:d9:58:14:c1:98:
87:06:89:15:f5:72:da:a5:bc:44:b6:f3:17:fb:2c:
f2:b8:27:97:d1:9b:fe:8d:d2:b8:53:a2:f3:7c:af:
4b:14:a0:f3:56:0e:3f:39:d3:17:5d:09:f3:83:ff:
1a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6B:12:AD:D3:DD:FE:9A:05:96:B0:A7:0C:AA:08:83:B9:2C:DB:66
X509v3 Authority Key Identifier:
keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e9:56:f6:7b:fc:82:68:7a:a7:49:2a:a9:c1:04:3a:58:9f:
61:d0:c5:78:1b:0f:bb:5f:c4:99:76:5f:7c:ca:3c:3f:27:84:
97:86:e6:58:fc:a7:09:08:dc:88:7c:18:f9:f1:c4:06:ce:d8:
3d:f0:8a:29:3a:d9:2b:78:f3:64:df:79:31:65:f6:b0:a7:4d:
4d:e8:03:1c:3c:4e:3f:77:35:18:f4:12:2d:b9:b8:f4:72:3e:
59:d2:e9:f5:56:4d:c9:54:f4:20:b6:54:1b:b1:2d:7a:b5:05:
0c:9d:71:a5:05:cd:ae:cb:80:f2:8e:fc:1d:30:d5:1c:89:bf:
3d:f2:ca:3c:94:98:6b:19:b5:f5:d7:59:07:d2:d5:8f:a7:76:
07:31:cc:08:18:0e:8d:7a:a6:42:75:a0:77:dd:59:36:b1:a0:
df:9f:3f:1f:25:66:41:03:be:17:f7:58:82:80:71:ed:3d:5f:
18:60:6e:a4:5c:1b:1b:ba:9c:79:fb:e8:5e:9a:af:6d:a4:c4:
bb:4a:73:2e:5a:3b:3b:a2:b7:1e:ac:1e:98:df:82:48:2e:88:
3f:08:ee:2a:ad:43:3b:f0:6d:f0:1c:cd:58:9c:a4:b3:f6:42:
d3:27:25:93:9e:c0:bd:15:92:a8:b6:3d:cc:f5:7e:b0:3e:3d:
97:ac:e9:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCN+3vddx1I77h+w6fAV38cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOWEwYzg0YjMwNzIwZjRkNGNlNGJkYmEwMWRkMDU0NGQw
MjhlY2QwHhcNMjYwOTExMDEwMTAzWhcNMjYwOTEyMDEwMTAzWjAzMTEwLwYDVQQD
Eyg2OTZiMTJhZGQzZGRmZTlhMDU5NmIwYTcwY2FhMDg4M2I5MmNkYjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+JUGJWQaZUmhBCSKsPKchF7rNqM
/mt2+T5NbK3IMs/gZYP3EV1kb7y2FOmDGvbM7S/f3A+uagtBdcec8Y7rK6nvk5d0
YXd5A0ZpIo0gkrJLGIoQbWUBaBNbXf+yC+tkOqeke6CoHA6Q/KoHdTKOq4lsW0qB
setwKmNNsvdZE2RJZ0LzUJBlyE3LWCNa4UPeE97eXWjkGiu44h6PZk6Tqiv7y/Cl
bITJ9j+qUbXU3f670qitz0kKdUMpaa4qcSNYPshK7n2mxxyRozAN2VgUwZiHBokV
9XLapbxEtvMX+yzyuCeX0Zv+jdK4U6LzfK9LFKDzVg4/OdMXXQnzg/8axwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlrEq3T3f6aBZawpwyqCIO5LNtmMB8GA1UdIwQY
MBaAFJ2aDISzByD01M5L26Ad0FRNAo7NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMt
NTJjYWQ2Njc1ZmM2LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMtNTJjYWQ2Njc1ZmM2
LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOlW9nv8
gmh6p0kqqcEEOlifYdDFeBsPu1/EmXZffMo8PyeEl4bmWPynCQjciHwY+fHEBs7Y
PfCKKTrZK3jzZN95MWX2sKdNTegDHDxOP3c1GPQSLbm49HI+WdLp9VZNyVT0ILZU
G7EterUFDJ1xpQXNrsuA8o78HTDVHIm/PfLKPJSYaxm19ddZB9LVj6d2BzHMCBgO
jXqmQnWgd91ZNrGg358/HyVmQQO+F/dYgoBx7T1fGGBupFwbG7qcefvoXpqvbaTE
u0pzLlo7O6K3HqwemN+CSC6IPwjuKq1DO/Bt8BzNWJyks/ZC0yclk57AvRWSqLY9
zPV+sD49l6zpFA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 08:23:10 2026 by rpki-client