Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
File: nv2KDm5t1Wpu-CieSxhPDKAMM90.mft (raw, json)
Hash identifier: nramLd4n8P6grbGEZdMdnDn2PJfn3nxPwW7XVfe55wY=
Subject key identifier: 1C:BD:DB:0F:82:55:0A:E8:A7:7E:B5:94:12:2D:25:A1:E6:D0:86:7B
Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
Certificate issuer: /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Certificate serial: 01A183076AA13FFBBAE14AB73D238320E95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
Manifest number: 1AC7
Signing time: Wed 28 Oct 2026 15:01:03 +0000
Manifest this update: Wed 28 Oct 2026 15:01:03 +0000
Manifest next update: Thu 29 Oct 2026 15:01:03 +0000
Files and hashes: 1: _MvPyasUtjD1bfM_e2e6VHcdY6E.roa (hash: 6Ddj/Sy82Lb5dC9KJROcjLNjMfZBu0DPKA2PcanItv8=)
2: nv2KDm5t1Wpu-CieSxhPDKAMM90.crl (hash: Xs5UuI7k6YLcUqgDLqqxfjatyv4P7aas0TEUhVlTgEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:6a:a1:3f:fb:ba:e1:4a:b7:3d:23:83:20:e9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Validity
Not Before: Oct 28 15:01:03 2026 GMT
Not After : Oct 29 15:01:03 2026 GMT
Subject: CN=1cbddb0f82550ae8a77eb594122d25a1e6d0867b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:17:b9:6f:f4:2d:87:0a:30:71:b7:f6:25:4c:
ce:96:ac:48:fb:7f:f7:7b:02:69:20:4f:8e:8d:b1:
6b:ab:f2:51:f7:af:18:68:d1:f5:cc:79:e2:81:be:
69:58:b7:0c:cb:91:94:e0:a2:cf:84:77:c2:07:d7:
c1:0c:33:17:d9:81:52:df:92:99:70:f3:35:f7:be:
50:be:57:1f:f4:92:53:52:8b:1f:f3:df:09:85:98:
bf:71:2f:13:1b:bc:42:e3:ef:7f:61:70:53:f9:a2:
29:6e:a5:91:f9:f0:10:a2:69:a0:9c:64:98:2e:d9:
02:65:85:e5:9d:25:70:d8:03:d3:4b:d8:17:66:90:
57:21:40:85:c8:1c:46:0f:f0:11:21:69:5d:10:3e:
90:d9:fe:78:cb:83:e8:26:17:14:8f:bf:80:4c:a9:
53:3f:e3:49:13:03:b4:a7:b4:08:f6:5e:0c:45:79:
b7:19:37:87:6f:34:11:6a:3a:57:7d:2a:5e:0f:f3:
52:37:90:3d:28:29:06:a6:0d:79:0f:e3:af:f8:c8:
23:01:6e:8b:e7:57:09:2b:f8:42:ca:ab:dd:2f:82:
58:7a:ce:e6:82:56:a0:44:28:53:9b:9a:04:00:55:
94:65:d4:7d:4f:67:99:23:11:5d:64:d2:1e:d6:bf:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BD:DB:0F:82:55:0A:E8:A7:7E:B5:94:12:2D:25:A1:E6:D0:86:7B
X509v3 Authority Key Identifier:
keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b1:e9:e0:1e:ab:fc:9a:7f:10:96:71:43:a8:42:44:57:f0:
ce:1e:df:93:2d:6b:db:6b:f6:47:80:6d:24:88:5d:00:ec:00:
b5:04:71:06:c1:21:70:8b:e0:f2:ef:ec:b8:07:c6:5c:fc:64:
ee:dc:d5:66:68:64:8b:d0:0a:f4:2e:70:2b:99:f6:ec:04:df:
ab:eb:89:a5:b8:d0:97:f0:53:6c:52:aa:97:45:59:3c:36:d5:
94:9d:8e:67:86:8c:70:49:78:6d:52:b7:42:7a:7b:7d:2d:05:
54:44:a3:2b:7c:a7:b3:d9:51:5f:1c:8d:bb:4e:1f:60:30:0d:
fa:c4:af:a2:60:39:bc:a3:4f:8d:69:f6:71:93:a9:08:29:12:
1a:e1:60:06:83:1e:7d:fb:9a:21:e2:4e:4a:0d:f8:28:d4:6f:
58:61:fa:e8:4a:90:ad:8e:83:39:32:e9:21:f6:a0:42:b8:46:
1a:02:3a:cb:27:52:e4:37:53:7f:da:43:3c:0b:42:bf:5e:0b:
96:df:47:74:16:b3:30:d8:e9:06:c7:ee:69:04:56:44:c6:4b:
04:5a:51:8f:a0:5f:0f:51:72:ab:56:37:11:0b:ff:e5:96:87:
1a:6e:2f:a7:9c:aa:4b:c5:62:f4:9b:da:a0:ae:a9:d4:c9:72:
70:ae:57:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDB2qhP/u64Uq3PSODIOlbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZmQ4YTBlNmU2ZGQ1NmE2ZWY4Mjg5ZTRiMTg0ZjBjYTAw
YzMzZGQwHhcNMjYxMDI4MTUwMTAzWhcNMjYxMDI5MTUwMTAzWjAzMTEwLwYDVQQD
EygxY2JkZGIwZjgyNTUwYWU4YTc3ZWI1OTQxMjJkMjVhMWU2ZDA4NjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1he5b/Qthwowcbf2JUzOlqxI+3/3
ewJpIE+OjbFrq/JR968YaNH1zHnigb5pWLcMy5GU4KLPhHfCB9fBDDMX2YFS35KZ
cPM1975Qvlcf9JJTUosf898JhZi/cS8TG7xC4+9/YXBT+aIpbqWR+fAQommgnGSY
LtkCZYXlnSVw2APTS9gXZpBXIUCFyBxGD/ARIWldED6Q2f54y4PoJhcUj7+ATKlT
P+NJEwO0p7QI9l4MRXm3GTeHbzQRajpXfSpeD/NSN5A9KCkGpg15D+Ov+MgjAW6L
51cJK/hCyqvdL4JYes7mglagRChTm5oEAFWUZdR9T2eZIxFdZNIe1r8u2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBy92w+CVQrop361lBItJaHm0IZ7MB8GA1UdIwQY
MBaAFJ79ig5ubdVqbvgonksYTwygDDPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnYyS0RtNXQxV3B1LUNpZVN4aFBES0FNTTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNTNkN2MtYTgzMi00N2IzLTlmOTQt
NTljMjMwNTQ0NDJkLzEvbnYyS0RtNXQxV3B1LUNpZVN4aFBES0FNTTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9kNTNkN2MtYTgzMi00N2IzLTlmOTQtNTljMjMwNTQ0NDJk
LzEvbnYyS0RtNXQxV3B1LUNpZVN4aFBES0FNTTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLHp4B6r
/Jp/EJZxQ6hCRFfwzh7fky1r22v2R4BtJIhdAOwAtQRxBsEhcIvg8u/suAfGXPxk
7tzVZmhki9AK9C5wK5n27ATfq+uJpbjQl/BTbFKql0VZPDbVlJ2OZ4aMcEl4bVK3
Qnp7fS0FVESjK3yns9lRXxyNu04fYDAN+sSvomA5vKNPjWn2cZOpCCkSGuFgBoMe
ffuaIeJOSg34KNRvWGH66EqQrY6DOTLpIfagQrhGGgI6yydS5DdTf9pDPAtCv14L
lt9HdBazMNjpBsfuaQRWRMZLBFpRj6BfD1Fyq1Y3EQv/5ZaHGm4vp5yqS8Vi9Jva
oK6p1MlycK5XNA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:15:56 2026 by rpki-client