Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
File: nVgf-JVKiXizTYSRAVRszmHEr6M.mft (raw, json)
Hash identifier: guikeNy05/ldZ92RIM2S1twtRUDHMVCN5ZrszUrhY4Q=
Subject key identifier: 6B:5C:1B:01:13:A6:BB:FE:75:A6:9F:2D:E6:57:35:10:18:97:ED:6A
Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
Certificate issuer: /CN=9d581ff8954a8978b34d849101546cce61c4afa3
Certificate serial: 01A179CCD2D68B3FD6872A25ED3A460A1563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
Manifest number: 1AC7
Signing time: Mon 26 Oct 2026 20:00:28 +0000
Manifest this update: Mon 26 Oct 2026 20:00:28 +0000
Manifest next update: Tue 27 Oct 2026 20:00:28 +0000
Files and hashes: 1: QauSGlJ_V7eDjQwLtjrLDM7ifeE.roa (hash: pWnYTWGXtI/oxodZeq42dkklZsoJ2yK1DD9grTXZlOs=)
2: nVgf-JVKiXizTYSRAVRszmHEr6M.crl (hash: 0V3Qul1BNVxwvSnxb8D/a5NtQ+NgATBtms9TiB22eMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cc:d2:d6:8b:3f:d6:87:2a:25:ed:3a:46:0a:15:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3
Validity
Not Before: Oct 26 20:00:28 2026 GMT
Not After : Oct 27 20:00:28 2026 GMT
Subject: CN=6b5c1b0113a6bbfe75a69f2de65735101897ed6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:66:57:30:d3:79:e4:60:20:ce:c7:e5:af:
43:4d:94:0f:60:b3:34:31:67:05:43:3b:ef:e9:d8:
3d:9e:12:ab:01:38:56:a6:43:a2:0e:21:79:d5:eb:
fd:bb:00:c0:37:2d:df:55:a6:99:b4:d6:0e:e7:c7:
ac:cc:22:54:94:d6:4a:fa:9a:73:84:4b:d1:e8:53:
2f:8b:d1:15:26:1e:91:2a:f1:6c:9f:57:2b:94:d4:
dc:42:bb:d3:d7:3a:6f:2b:85:36:65:3d:25:ba:74:
64:75:db:5f:44:8a:61:16:76:46:45:64:bd:19:f4:
7e:5c:70:6d:91:58:5f:a7:ed:bf:21:21:93:09:46:
49:ea:d6:f5:d2:53:68:4b:42:7f:4c:92:4d:90:03:
79:75:17:11:48:a5:12:f0:f0:a0:16:b4:d4:14:50:
90:2c:a3:cf:ef:38:5d:51:e7:ce:c1:9f:87:4e:d4:
9c:29:ff:af:ef:d1:bd:b0:98:8b:4c:00:00:1e:19:
73:74:ca:c9:2a:cb:2e:a4:44:41:c2:3b:7e:53:57:
d0:37:ef:78:9e:20:d0:3a:4d:36:54:f3:40:d7:7a:
c5:d4:8c:6a:40:f0:ad:b9:61:e0:d4:9e:48:96:a8:
63:70:d6:04:29:1f:d2:ad:63:9a:84:f1:ea:f7:7d:
93:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5C:1B:01:13:A6:BB:FE:75:A6:9F:2D:E6:57:35:10:18:97:ED:6A
X509v3 Authority Key Identifier:
keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c8:b7:da:34:89:61:41:5c:80:5b:fe:ed:ea:43:6a:3d:f7:
bd:9f:57:4f:b3:9e:a4:dd:e6:06:9a:37:fd:9b:26:13:82:84:
7a:fc:77:1a:39:b5:7d:4f:14:9b:0b:f6:6d:84:17:7b:b3:a4:
78:92:ad:6a:dc:9b:85:18:c7:bc:96:91:90:de:05:b4:e5:f2:
6a:36:89:85:78:5e:10:18:c0:37:8d:47:ed:b0:c4:d6:7d:a4:
18:34:78:00:40:f8:cb:a0:2f:36:aa:05:ba:35:77:8d:53:db:
e3:d3:1d:9c:7d:7f:ec:9a:09:5b:91:85:b4:81:36:eb:ed:93:
63:df:53:ea:9c:f9:68:a6:19:38:23:f4:eb:49:9e:6c:10:e4:
82:97:60:1e:da:4d:b2:f4:e0:69:52:76:27:e9:83:fe:0f:b3:
e5:17:49:45:12:dd:d0:c9:30:b4:36:9f:17:30:c7:be:72:b5:
82:64:ec:f1:1a:a7:a4:29:a0:d1:93:98:15:59:c3:08:7a:67:
ea:47:73:0e:f8:44:7a:1f:d1:48:c4:b2:80:49:26:6e:d5:1c:
78:be:50:85:a7:89:a9:b7:77:4a:d7:80:b0:da:82:f7:c4:d6:
6e:66:b0:54:95:06:21:9e:0c:af:a4:dd:f9:b4:79:4d:76:7e:
28:b5:62:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF5zNLWiz/Whyol7TpGChVjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNTgxZmY4OTU0YTg5NzhiMzRkODQ5MTAxNTQ2Y2NlNjFj
NGFmYTMwHhcNMjYxMDI2MjAwMDI4WhcNMjYxMDI3MjAwMDI4WjAzMTEwLwYDVQQD
Eyg2YjVjMWIwMTEzYTZiYmZlNzVhNjlmMmRlNjU3MzUxMDE4OTdlZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC1mVzDTeeRgIM7H5a9DTZQPYLM0
MWcFQzvv6dg9nhKrAThWpkOiDiF51ev9uwDANy3fVaaZtNYO58eszCJUlNZK+ppz
hEvR6FMvi9EVJh6RKvFsn1crlNTcQrvT1zpvK4U2ZT0lunRkddtfRIphFnZGRWS9
GfR+XHBtkVhfp+2/ISGTCUZJ6tb10lNoS0J/TJJNkAN5dRcRSKUS8PCgFrTUFFCQ
LKPP7zhdUefOwZ+HTtScKf+v79G9sJiLTAAAHhlzdMrJKssupERBwjt+U1fQN+94
niDQOk02VPNA13rF1IxqQPCtuWHg1J5IlqhjcNYEKR/SrWOahPHq932T9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtcGwETprv+daafLeZXNRAYl+1qMB8GA1UdIwQY
MBaAFJ1YH/iVSol4s02EkQFUbM5hxK+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblZnZi1KVktpWGl6VFlTUkFWUnN6bUhFcjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYjNmMmYtMTRhZS00NjRiLTliN2Mt
Nzk4MGEyZTIzMDA3LzEvblZnZi1KVktpWGl6VFlTUkFWUnN6bUhFcjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yYjNmMmYtMTRhZS00NjRiLTliN2MtNzk4MGEyZTIzMDA3
LzEvblZnZi1KVktpWGl6VFlTUkFWUnN6bUhFcjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsi32jSJ
YUFcgFv+7epDaj33vZ9XT7OepN3mBpo3/ZsmE4KEevx3Gjm1fU8Umwv2bYQXe7Ok
eJKtatybhRjHvJaRkN4FtOXyajaJhXheEBjAN41H7bDE1n2kGDR4AED4y6AvNqoF
ujV3jVPb49MdnH1/7JoJW5GFtIE26+2TY99T6pz5aKYZOCP060mebBDkgpdgHtpN
svTgaVJ2J+mD/g+z5RdJRRLd0MkwtDafFzDHvnK1gmTs8RqnpCmg0ZOYFVnDCHpn
6kdzDvhEeh/RSMSygEkmbtUceL5QhaeJqbd3SteAsNqC98TWbmawVJUGIZ4Mr6Td
+bR5TXZ+KLViEQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:03:20 2026 by rpki-client