Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
File: NADZSQmD598yx88Xyh6tTwX3lkY.mft (raw, json)
Hash identifier: YQ7THT96th28ItbL9EuTF3uTgB6QORVvMTP6r411e8c=
Subject key identifier: 7B:36:A1:F4:B2:76:5A:2C:F0:6F:27:B9:45:7D:BC:2D:FB:8F:45:AC
Authority key identifier: 34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
Certificate issuer: /CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Certificate serial: 01A08ED7914B8A88A39C5FE233ACEA0C9AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
Manifest number: 0BBC
Signing time: Fri 11 Sep 2026 05:01:27 +0000
Manifest this update: Fri 11 Sep 2026 05:01:27 +0000
Manifest next update: Sat 12 Sep 2026 05:01:27 +0000
Files and hashes: 1: NADZSQmD598yx88Xyh6tTwX3lkY.crl (hash: kOsjZmIYZRbN2JyS5E53bKzO0/r8uHaY9aFSiA571vM=)
2: uaapElHUAVaZCvTQWY96RRO1BmE.roa (hash: YoDD+GqIi7yXJNJvp1uQ/eykR6jqDrzcDx3qks2vpKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:d7:91:4b:8a:88:a3:9c:5f:e2:33:ac:ea:0c:9a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Validity
Not Before: Sep 11 05:01:27 2026 GMT
Not After : Sep 12 05:01:27 2026 GMT
Subject: CN=7b36a1f4b2765a2cf06f27b9457dbc2dfb8f45ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:d3:be:e4:2d:cc:9a:c9:ce:72:c5:5a:7c:
40:28:07:68:5c:1d:91:14:84:8e:7a:a2:c4:76:60:
b6:0b:d1:29:cb:f4:2f:05:a9:49:1a:cd:75:c9:4d:
63:45:e9:ef:4f:bf:18:81:2c:d4:41:68:a4:5a:3d:
d4:89:a8:31:c4:d2:6c:fd:74:3d:3f:c8:68:a1:0e:
2a:4d:33:b4:f6:3b:cc:03:8b:e9:36:ec:63:30:92:
ba:c7:47:69:46:c3:25:77:a5:bd:21:53:59:60:79:
cc:72:2d:29:89:b7:1c:25:90:85:cc:e8:76:bd:8c:
9c:42:a6:93:43:94:cc:17:42:d4:8b:d2:40:1f:3d:
fc:16:2f:30:b2:0d:59:47:35:aa:0c:95:2d:0b:7d:
94:15:02:43:12:29:60:3d:fe:45:dd:e7:a9:6f:52:
56:ec:e9:33:e6:ed:bb:e2:cb:49:ef:ac:a7:27:61:
12:9d:c7:c3:af:90:da:5a:1d:de:65:8f:72:bc:e2:
8d:fb:2b:7b:f8:dd:41:a7:4e:dd:1b:01:6a:4e:e8:
a4:b8:03:2c:e3:d9:01:54:6a:41:99:f8:bc:a5:1f:
f4:ea:7a:1c:b9:0c:53:05:4e:1e:de:93:be:42:27:
b0:a0:22:f7:59:b5:72:4f:14:80:7b:64:91:42:88:
ad:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:36:A1:F4:B2:76:5A:2C:F0:6F:27:B9:45:7D:BC:2D:FB:8F:45:AC
X509v3 Authority Key Identifier:
keyid:34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4d:2d:84:e4:f1:bb:14:8f:68:8d:90:69:d8:ae:e3:7f:a3:
83:6c:ae:f4:c5:aa:b9:d1:d3:1e:f5:14:2a:0c:99:3c:bc:e9:
1f:8d:d9:6e:7b:6b:c1:e7:d3:f8:5b:62:bf:b0:27:a4:d3:94:
bd:8f:ff:ca:1e:41:64:68:74:10:8c:9c:48:8e:39:30:5a:4d:
31:a9:4c:04:44:9c:b9:da:8f:00:cc:96:d8:c3:82:5a:14:77:
bb:0a:f6:f9:cf:fa:56:d5:26:b8:78:36:f4:5d:99:ce:c8:52:
fc:05:95:35:02:77:03:80:a4:33:bd:89:dc:9c:bc:22:83:b6:
5c:46:ca:11:c3:8b:45:3a:db:f1:2a:06:2d:fe:a6:ca:bd:7d:
df:4d:cb:64:26:14:df:8b:ab:13:73:fa:10:bf:55:de:fe:84:
00:bb:ae:f9:be:cc:5e:c8:d6:b2:1d:cd:9c:19:b3:16:5b:1f:
fa:9a:8b:12:9b:92:1d:9a:5e:d2:a4:eb:7b:6e:2c:49:c0:7a:
3e:f2:d6:3a:74:c7:1b:f2:0b:3f:4b:16:e5:c3:7e:81:47:65:
6d:da:b8:9a:c4:e3:37:f9:66:9e:71:7a:d2:88:a4:ac:49:0a:
e9:16:1d:06:7c:c7:ba:02:8f:59:24:17:ad:8d:2e:85:f8:a0:
0e:23:e8:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCO15FLioijnF/iM6zqDJrQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MDBkOTQ5MDk4M2U3ZGYzMmM3Y2YxN2NhMWVhZDRmMDVm
Nzk2NDYwHhcNMjYwOTExMDUwMTI3WhcNMjYwOTEyMDUwMTI3WjAzMTEwLwYDVQQD
Eyg3YjM2YTFmNGIyNzY1YTJjZjA2ZjI3Yjk0NTdkYmMyZGZiOGY0NWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZzTvuQtzJrJznLFWnxAKAdoXB2R
FISOeqLEdmC2C9Epy/QvBalJGs11yU1jRenvT78YgSzUQWikWj3UiagxxNJs/XQ9
P8hooQ4qTTO09jvMA4vpNuxjMJK6x0dpRsMld6W9IVNZYHnMci0pibccJZCFzOh2
vYycQqaTQ5TMF0LUi9JAHz38Fi8wsg1ZRzWqDJUtC32UFQJDEilgPf5F3eepb1JW
7Okz5u274stJ76ynJ2ESncfDr5DaWh3eZY9yvOKN+yt7+N1Bp07dGwFqTuikuAMs
49kBVGpBmfi8pR/06nocuQxTBU4e3pO+QiewoCL3WbVyTxSAe2SRQoiteQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHs2ofSydlos8G8nuUV9vC37j0WsMB8GA1UdIwQY
MBaAFDQA2UkJg+ffMsfPF8oerU8F95ZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mZWZjMTItMmZjMi00MzBkLTk2MDYt
ZjQ5NDZmMDNmNTQyLzEvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9mZWZjMTItMmZjMi00MzBkLTk2MDYtZjQ5NDZmMDNmNTQy
LzEvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASk0thOTx
uxSPaI2Qadiu43+jg2yu9MWqudHTHvUUKgyZPLzpH43ZbntrwefT+Ftiv7AnpNOU
vY//yh5BZGh0EIycSI45MFpNMalMBEScudqPAMyW2MOCWhR3uwr2+c/6VtUmuHg2
9F2ZzshS/AWVNQJ3A4CkM72J3Jy8IoO2XEbKEcOLRTrb8SoGLf6myr19303LZCYU
34urE3P6EL9V3v6EALuu+b7MXsjWsh3NnBmzFlsf+pqLEpuSHZpe0qTre24sScB6
PvLWOnTHG/ILP0sW5cN+gUdlbdq4msTjN/lmnnF60oikrEkK6RYdBnzHugKPWSQX
rY0uhfigDiPo1Q==
-----END CERTIFICATE-----
Generated at Fri Sep 11 08:27:21 2026 by rpki-client