Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
File: nQhzWjV9MfqK2jHinxlYam_9lZI.mft (raw, json)
Hash identifier: Es5ljJ4rMM2HOWQ3wtxaI0wOcvgvu9ElZUR3nF782Ug=
Subject key identifier: 5A:92:AE:20:15:00:37:6D:F8:08:6F:80:4F:45:6E:71:99:FE:C2:1F
Authority key identifier: 9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
Certificate issuer: /CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Certificate serial: 01A08B9EB013E952CE0ADEF6AED6B87782F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
Manifest number: 0997
Signing time: Thu 10 Sep 2026 14:00:27 +0000
Manifest this update: Thu 10 Sep 2026 14:00:27 +0000
Manifest next update: Fri 11 Sep 2026 14:00:27 +0000
Files and hashes: 1: mNCgVhtdcHk_wU97-Gy3cw-WdNw.roa (hash: mTADEdCwBT4z8h+n4TsVWFX5hSFlb40/mneHRKe61U0=)
2: nQhzWjV9MfqK2jHinxlYam_9lZI.crl (hash: NL+vHwV5xiHyaRc2Gg2hcN3l0trXLFlw9NSh7UAHK7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9e:b0:13:e9:52:ce:0a:de:f6:ae:d6:b8:77:82:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d08735a357d31fa8ada31e29f19586a6ffd9592
Validity
Not Before: Sep 10 14:00:27 2026 GMT
Not After : Sep 11 14:00:27 2026 GMT
Subject: CN=5a92ae201500376df8086f804f456e7199fec21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:87:32:b2:85:43:b1:d9:63:46:94:eb:67:
a0:06:04:9b:28:86:26:05:0d:a9:b9:98:b6:c6:15:
c7:d3:60:5e:cd:b2:80:38:43:f5:03:5e:74:9e:66:
05:9d:d7:61:c6:b8:e3:46:13:b0:b9:3d:42:71:d3:
31:c0:a8:eb:10:df:d4:cf:b4:e6:83:37:ce:3c:26:
80:3b:75:e2:e8:1f:4c:8a:cc:ee:e9:63:b8:8a:3c:
dc:6c:cb:85:12:87:be:b7:bc:6f:aa:20:15:d9:e0:
b6:84:a9:f8:d4:84:60:76:26:4e:df:07:78:c8:24:
9b:b8:05:86:e2:9f:db:c4:23:c4:51:5d:78:67:b4:
81:01:c7:7b:0b:14:94:cc:75:46:26:d2:6d:b1:99:
4c:eb:01:98:45:3b:64:73:07:0e:d0:33:1c:71:9d:
3e:bc:a1:eb:ff:71:3e:4a:ab:7f:2a:2c:6b:fd:a4:
70:e0:79:cf:01:d1:dc:01:f8:04:96:a7:96:88:4a:
27:80:6c:e2:27:f3:40:3c:f8:3d:42:5d:f6:f1:1b:
53:ec:15:e3:04:74:47:00:54:3e:b1:b6:84:4e:f8:
8a:ee:10:5a:d3:af:e5:9a:2e:e5:0d:c5:10:b8:9b:
1a:be:97:f8:57:8d:a1:c3:e5:db:7d:d8:83:18:85:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:92:AE:20:15:00:37:6D:F8:08:6F:80:4F:45:6E:71:99:FE:C2:1F
X509v3 Authority Key Identifier:
keyid:9D:08:73:5A:35:7D:31:FA:8A:DA:31:E2:9F:19:58:6A:6F:FD:95:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQhzWjV9MfqK2jHinxlYam_9lZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/cf4d9e-59c9-4f9f-8f32-a348821ca1e0/1/nQhzWjV9MfqK2jHinxlYam_9lZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cc:ef:b3:08:7a:99:5d:df:26:89:9a:e7:01:9b:84:a5:45:
29:d8:2b:14:c6:e6:aa:ca:b6:1c:c7:51:46:66:c4:d9:36:ce:
b7:ba:ee:5b:85:7c:58:46:e5:e6:8d:2a:b4:55:57:25:59:6f:
83:61:fa:3a:52:0e:dd:6c:d4:6e:ad:e7:0f:de:a5:79:0d:b9:
0a:80:79:09:fb:9f:5c:40:d9:7d:d7:ea:a0:0c:16:7d:f4:db:
c5:96:ef:86:3a:06:5e:8f:29:ad:64:5b:e1:54:6a:3f:9e:f2:
ca:54:24:48:36:7b:a2:77:6d:a9:e9:f9:28:cb:c9:32:2d:aa:
01:7f:be:9d:30:fc:47:9e:10:00:76:e8:71:32:0e:f6:07:1a:
f9:a2:ba:70:36:59:ce:eb:c3:be:7e:b8:8b:f4:4a:c9:22:f7:
20:a9:72:e0:75:d4:74:18:16:8f:34:2d:55:ea:6c:6b:d4:28:
bc:99:dd:2f:6b:04:74:de:87:6f:07:d9:b5:2e:8d:41:08:9a:
d6:82:a2:09:a4:18:18:ac:0e:07:fa:7a:a5:49:ef:4c:13:84:
be:a7:b1:78:b7:3b:a2:04:60:52:cd:88:92:12:e0:ed:99:57:
ef:63:1a:8a:91:a8:d4:df:9f:47:80:2e:36:c2:59:6c:f7:ea:
20:b6:aa:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLnrAT6VLOCt72rta4d4L1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMDg3MzVhMzU3ZDMxZmE4YWRhMzFlMjlmMTk1ODZhNmZm
ZDk1OTIwHhcNMjYwOTEwMTQwMDI3WhcNMjYwOTExMTQwMDI3WjAzMTEwLwYDVQQD
Eyg1YTkyYWUyMDE1MDAzNzZkZjgwODZmODA0ZjQ1NmU3MTk5ZmVjMjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ayHMrKFQ7HZY0aU62egBgSbKIYm
BQ2puZi2xhXH02BezbKAOEP1A150nmYFnddhxrjjRhOwuT1CcdMxwKjrEN/Uz7Tm
gzfOPCaAO3Xi6B9Miszu6WO4ijzcbMuFEoe+t7xvqiAV2eC2hKn41IRgdiZO3wd4
yCSbuAWG4p/bxCPEUV14Z7SBAcd7CxSUzHVGJtJtsZlM6wGYRTtkcwcO0DMccZ0+
vKHr/3E+Sqt/Kixr/aRw4HnPAdHcAfgElqeWiEongGziJ/NAPPg9Ql328RtT7BXj
BHRHAFQ+sbaETviK7hBa06/lmi7lDcUQuJsavpf4V42hw+XbfdiDGIWo1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqSriAVADdt+AhvgE9FbnGZ/sIfMB8GA1UdIwQY
MBaAFJ0Ic1o1fTH6itox4p8ZWGpv/ZWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblFoeldqVjlNZnFLMmpIaW54bFlhbV85bFpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jZjRkOWUtNTljOS00ZjlmLThmMzIt
YTM0ODgyMWNhMWUwLzEvblFoeldqVjlNZnFLMmpIaW54bFlhbV85bFpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9jZjRkOWUtNTljOS00ZjlmLThmMzItYTM0ODgyMWNhMWUw
LzEvblFoeldqVjlNZnFLMmpIaW54bFlhbV85bFpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMzvswh6
mV3fJoma5wGbhKVFKdgrFMbmqsq2HMdRRmbE2TbOt7ruW4V8WEbl5o0qtFVXJVlv
g2H6OlIO3WzUbq3nD96leQ25CoB5CfufXEDZfdfqoAwWffTbxZbvhjoGXo8prWRb
4VRqP57yylQkSDZ7ondtqen5KMvJMi2qAX++nTD8R54QAHbocTIO9gca+aK6cDZZ
zuvDvn64i/RKySL3IKly4HXUdBgWjzQtVepsa9QovJndL2sEdN6HbwfZtS6NQQia
1oKiCaQYGKwOB/p6pUnvTBOEvqexeLc7ogRgUs2IkhLg7ZlX72MaipGo1N+fR4Au
NsJZbPfqILaq9Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:25:09 2026 by rpki-client