
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File: NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier: gsLkhNgPJuLL2kFtHTaocwvFghXYIKgTMXi1ACpgl3U=
Subject key identifier: 62:D3:18:57:27:23:02:B2:61:E1:BA:4F:63:34:B0:9C:6B:70:B7:94
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer: /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial: 01A186086C786506D64275DAE2EE68B29FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number: 07F5
Signing time: Thu 29 Oct 2026 05:01:01 +0000
Manifest this update: Thu 29 Oct 2026 05:01:01 +0000
Manifest next update: Fri 30 Oct 2026 05:01:01 +0000
Files and hashes: 1: 0oG7Wuq3ZAAXzg6P-qV_HWGeUWE.roa (hash: tl6rHSJSg3BOoepWWn4g5EPuRgVKzjqvlpZ/rZDE8k0=)
2: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: i3yY1vJVjWbuGa7yEOofVyczPGeXmS8qMYhRNfiI/aM=)
3: wC11yeUerTWiyRWDCng4spCl8qM.roa (hash: /IMrg/w5VKSBqu/JYOwX3ZqxJnQBurW+kq0gnHVnWjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:08:6c:78:65:06:d6:42:75:da:e2:ee:68:b2:9f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Validity
Not Before: Oct 29 05:01:01 2026 GMT
Not After : Oct 30 05:01:01 2026 GMT
Subject: CN=62d31857272302b261e1ba4f6334b09c6b70b794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:e5:fa:21:36:4c:67:34:df:1b:c0:bf:b2:
b8:ae:81:53:3a:90:b5:17:de:a6:ce:60:d7:9e:ba:
6e:dc:57:c6:c3:a2:4c:b5:b3:2b:91:be:d2:fc:14:
90:c8:2b:0a:02:8a:77:30:31:ea:c1:75:6a:66:dc:
6d:d8:b4:46:1f:98:a9:77:12:59:b3:3c:69:36:91:
95:da:f3:bb:11:49:92:5a:2e:dc:7d:27:83:ae:40:
97:0b:29:29:4a:b4:fe:73:6a:af:39:bc:96:72:4b:
40:36:32:82:a0:bc:18:1b:b1:88:40:a1:98:73:0b:
6e:f2:18:50:9c:1e:bb:1c:fe:eb:0f:53:cc:5f:8f:
24:12:c9:9f:72:4f:16:52:89:52:ae:ee:0f:d0:2e:
d1:51:40:91:2b:ab:02:bb:97:e3:6a:65:09:27:e2:
49:ff:16:1a:14:91:5c:ea:ff:e6:73:e1:38:27:a5:
12:4f:a5:35:03:8b:16:b6:5b:4e:19:ff:40:80:6c:
a9:28:36:03:9c:e1:3a:e8:6c:bf:b7:c5:ec:ca:fe:
6b:d4:75:77:7a:c7:bd:b6:b3:20:c6:d9:31:ab:62:
f9:b7:6e:c2:77:ff:32:7f:86:f8:26:eb:e2:8f:53:
4b:61:39:13:b0:c9:c4:95:c2:b0:ba:2c:de:44:02:
ba:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D3:18:57:27:23:02:B2:61:E1:BA:4F:63:34:B0:9C:6B:70:B7:94
X509v3 Authority Key Identifier:
keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:55:b9:d7:24:ba:bb:20:16:e2:b8:87:5e:7a:08:8d:c2:2a:
e9:be:d4:21:5b:00:ea:a9:f1:5e:4e:f5:12:83:e4:0d:fc:f5:
f9:94:58:66:6b:80:e8:3e:b5:0a:5a:e0:38:c1:f0:8b:dc:b4:
50:da:66:18:cb:2e:a5:92:b3:5e:d7:5f:0c:df:83:26:1d:10:
8c:63:32:af:29:88:e6:16:12:91:1a:21:b6:d6:23:9c:d3:ae:
74:87:af:97:52:f7:ac:5f:9e:7f:12:d2:2f:dc:63:55:0b:8e:
a9:8c:1d:2d:d2:d0:44:e1:7f:4e:74:4c:d4:dc:c9:a6:be:26:
93:da:bf:17:d3:41:22:0b:f2:c8:66:c1:66:37:60:62:f9:da:
0a:4a:64:e9:64:5d:2b:97:c8:4c:84:d7:5d:7e:13:40:3f:33:
0c:77:b3:1e:bb:dc:b4:73:ca:77:b2:00:43:67:8c:c8:d4:0d:
01:d6:85:7b:ea:7f:34:32:f3:af:dc:c6:37:0a:09:e6:80:a3:
ee:0b:88:96:46:32:ff:07:dc:b1:e1:8a:13:9c:e9:de:c8:5f:
38:66:47:52:93:de:99:42:d1:f8:f2:f3:ec:a1:4d:72:c3:7b:
95:d2:2a:11:99:e4:e7:aa:f6:81:fa:47:54:f2:29:47:eb:20:
c0:bf:a5:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGGCGx4ZQbWQnXa4u5osp/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NjE0YmFlOTZjMTMzN2Q3OTdiZDk2NmU3ZDZhODJhODhk
ZjlkMjkwHhcNMjYxMDI5MDUwMTAxWhcNMjYxMDMwMDUwMTAxWjAzMTEwLwYDVQQD
Eyg2MmQzMTg1NzI3MjMwMmIyNjFlMWJhNGY2MzM0YjA5YzZiNzBiNzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb7l+iE2TGc03xvAv7K4roFTOpC1
F96mzmDXnrpu3FfGw6JMtbMrkb7S/BSQyCsKAop3MDHqwXVqZtxt2LRGH5ipdxJZ
szxpNpGV2vO7EUmSWi7cfSeDrkCXCykpSrT+c2qvObyWcktANjKCoLwYG7GIQKGY
cwtu8hhQnB67HP7rD1PMX48kEsmfck8WUolSru4P0C7RUUCRK6sCu5fjamUJJ+JJ
/xYaFJFc6v/mc+E4J6UST6U1A4sWtltOGf9AgGypKDYDnOE66Gy/t8Xsyv5r1HV3
ese9trMgxtkxq2L5t27Cd/8yf4b4Juvij1NLYTkTsMnElcKwuizeRAK6DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLTGFcnIwKyYeG6T2M0sJxrcLeUMB8GA1UdIwQY
MBaAFDZhS66WwTN9eXvZZufWqCqI350pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jZjJjYWItZTE4Mi00ZTliLWE2ZWUt
YWYwMTRmYWJmNGJlLzEvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9jZjJjYWItZTE4Mi00ZTliLWE2ZWUtYWYwMTRmYWJmNGJl
LzEvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVW51yS6
uyAW4riHXnoIjcIq6b7UIVsA6qnxXk71EoPkDfz1+ZRYZmuA6D61ClrgOMHwi9y0
UNpmGMsupZKzXtdfDN+DJh0QjGMyrymI5hYSkRohttYjnNOudIevl1L3rF+efxLS
L9xjVQuOqYwdLdLQROF/TnRM1NzJpr4mk9q/F9NBIgvyyGbBZjdgYvnaCkpk6WRd
K5fITITXXX4TQD8zDHezHrvctHPKd7IAQ2eMyNQNAdaFe+p/NDLzr9zGNwoJ5oCj
7guIlkYy/wfcseGKE5zp3shfOGZHUpPemULR+PLz7KFNcsN7ldIqEZnk56r2gfpH
VPIpR+sgwL+lEw==
-----END CERTIFICATE-----
Generated at Thu Oct 29 08:41:29 2026 by rpki-client