Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
File: NADZSQmD598yx88Xyh6tTwX3lkY.mft (raw, json)
Hash identifier: /2tTSFvo0EoQo0BdNlVN6g0F4HbuixU8rQ9H7o3VaTw=
Subject key identifier: E4:6F:5F:44:11:8D:B7:34:2E:3E:04:EE:29:46:95:4F:38:A2:9A:42
Authority key identifier: 34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
Certificate issuer: /CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Certificate serial: 01A1788386AD94821F828FCE155403A8909C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
Manifest number: 0C35
Signing time: Mon 26 Oct 2026 14:00:47 +0000
Manifest this update: Mon 26 Oct 2026 14:00:47 +0000
Manifest next update: Tue 27 Oct 2026 14:00:47 +0000
Files and hashes: 1: NADZSQmD598yx88Xyh6tTwX3lkY.crl (hash: mqgS/xrgsqbcTj1fDc8F2BqXjI1s8e475lrxSQJrF+E=)
2: uaapElHUAVaZCvTQWY96RRO1BmE.roa (hash: YoDD+GqIi7yXJNJvp1uQ/eykR6jqDrzcDx3qks2vpKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:86:ad:94:82:1f:82:8f:ce:15:54:03:a8:90:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Validity
Not Before: Oct 26 14:00:47 2026 GMT
Not After : Oct 27 14:00:47 2026 GMT
Subject: CN=e46f5f44118db7342e3e04ee2946954f38a29a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:85:db:f7:1e:38:f2:fe:da:98:43:6e:6c:3f:
1e:ad:12:dc:29:e5:0a:0c:9f:aa:88:70:96:70:0b:
ab:5a:7f:95:17:3c:28:ec:a9:3b:30:41:9c:53:fa:
b2:c4:96:96:31:73:65:94:a5:69:cd:3a:22:a7:35:
22:73:db:c0:d6:08:e7:1a:f3:91:72:ca:e4:43:4c:
ef:97:ec:7a:b2:fc:8b:2b:52:b9:3d:ff:14:6f:4a:
63:91:a3:b7:2b:40:a4:94:18:3b:f1:27:5a:bf:07:
9f:f5:7f:48:30:09:c2:9a:f0:e3:6d:12:96:8c:fc:
9b:a6:86:35:95:af:e4:cf:43:89:da:a3:50:c7:4d:
6d:64:2f:4d:52:4b:de:68:35:a4:cc:ac:1f:85:18:
fd:7f:15:e8:58:22:5f:dd:bd:d2:f0:b1:ce:82:fb:
97:6e:55:19:cc:58:9a:c3:9a:7c:c5:e9:40:7a:0b:
88:6d:89:16:73:d7:b7:87:0d:83:3e:d6:7c:e4:86:
53:f3:71:2a:0c:59:33:14:72:ab:06:6c:71:d1:16:
70:96:6c:d2:ed:81:86:3e:52:c7:61:1e:ac:9f:86:
63:47:e6:d7:57:35:2c:77:d8:a1:a0:50:7a:a6:02:
08:2e:8c:ca:d1:1d:8f:8f:7d:2a:8e:43:c1:73:55:
46:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6F:5F:44:11:8D:B7:34:2E:3E:04:EE:29:46:95:4F:38:A2:9A:42
X509v3 Authority Key Identifier:
keyid:34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f3:11:32:c4:62:1e:ae:35:ee:ff:48:9b:3e:2a:20:3c:52:
2d:52:59:81:d3:64:4f:5b:26:07:32:15:3d:3b:84:2f:cc:17:
10:17:c9:ca:46:13:b1:3c:90:5d:7c:f7:c0:77:30:6b:8e:a3:
1d:f6:53:11:e4:3d:7f:bf:6e:18:2d:a8:5b:c0:a7:7e:dc:e0:
38:f3:d5:80:d9:d3:bc:43:74:6f:f3:87:fb:ac:e9:c8:40:f5:
a9:da:d4:2f:91:5c:6c:24:a3:ca:c5:ac:bb:28:08:db:11:23:
b0:a2:6a:3e:be:56:23:57:e3:a5:f1:20:6b:56:6f:6f:c4:9c:
27:0b:92:2c:b1:ad:ed:5a:0d:c3:c0:43:0a:8a:0c:5d:59:3d:
8b:bf:81:5d:02:30:ae:bf:59:2c:16:4f:db:b9:8e:ab:c2:20:
b9:c8:fb:82:68:c2:a6:64:48:aa:8b:e4:a5:0a:30:df:2c:b4:
95:e8:26:0f:f6:3d:de:53:97:38:50:14:fc:00:94:8e:dd:17:
c8:e6:1f:88:d7:74:3f:1d:3f:9c:ce:56:6c:8d:a4:d3:ac:ca:
d7:d9:75:36:f4:b9:6e:61:60:c1:71:6b:94:72:dc:b8:ff:d3:
22:92:15:90:86:c4:52:e4:dc:c0:22:31:3e:ad:ca:ea:a6:e9:
09:85:85:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF4g4atlIIfgo/OFVQDqJCcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MDBkOTQ5MDk4M2U3ZGYzMmM3Y2YxN2NhMWVhZDRmMDVm
Nzk2NDYwHhcNMjYxMDI2MTQwMDQ3WhcNMjYxMDI3MTQwMDQ3WjAzMTEwLwYDVQQD
EyhlNDZmNWY0NDExOGRiNzM0MmUzZTA0ZWUyOTQ2OTU0ZjM4YTI5YTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoXb9x448v7amENubD8erRLcKeUK
DJ+qiHCWcAurWn+VFzwo7Kk7MEGcU/qyxJaWMXNllKVpzToipzUic9vA1gjnGvOR
csrkQ0zvl+x6svyLK1K5Pf8Ub0pjkaO3K0CklBg78Sdavwef9X9IMAnCmvDjbRKW
jPybpoY1la/kz0OJ2qNQx01tZC9NUkveaDWkzKwfhRj9fxXoWCJf3b3S8LHOgvuX
blUZzFiaw5p8xelAeguIbYkWc9e3hw2DPtZ85IZT83EqDFkzFHKrBmxx0RZwlmzS
7YGGPlLHYR6sn4ZjR+bXVzUsd9ihoFB6pgIILozK0R2Pj30qjkPBc1VG7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORvX0QRjbc0Lj4E7ilGlU84oppCMB8GA1UdIwQY
MBaAFDQA2UkJg+ffMsfPF8oerU8F95ZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mZWZjMTItMmZjMi00MzBkLTk2MDYt
ZjQ5NDZmMDNmNTQyLzEvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9mZWZjMTItMmZjMi00MzBkLTk2MDYtZjQ5NDZmMDNmNTQy
LzEvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/MRMsRi
Hq417v9Imz4qIDxSLVJZgdNkT1smBzIVPTuEL8wXEBfJykYTsTyQXXz3wHcwa46j
HfZTEeQ9f79uGC2oW8CnftzgOPPVgNnTvEN0b/OH+6zpyED1qdrUL5FcbCSjysWs
uygI2xEjsKJqPr5WI1fjpfEga1Zvb8ScJwuSLLGt7VoNw8BDCooMXVk9i7+BXQIw
rr9ZLBZP27mOq8Igucj7gmjCpmRIqovkpQow3yy0legmD/Y93lOXOFAU/ACUjt0X
yOYfiNd0Px0/nM5WbI2k06zK19l1NvS5bmFgwXFrlHLcuP/TIpIVkIbEUuTcwCIx
Pq3K6qbpCYWF3g==
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:19:42 2026 by rpki-client