Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
File: nM47EZfQz5URVAVypY_TctzAdIk.mft (raw, json)
Hash identifier: 8yVAiVXvq9jXpMSa+L4xwhHVqNwQ+YLC3a2JD+dZo/Q=
Subject key identifier: 35:D4:18:B9:22:69:CE:E5:C6:BC:34:08:D8:18:71:23:0D:A2:1C:7C
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial: 01A08C43D85B3EAD15ED50F2EC838F1ACADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
Manifest number: 1544
Signing time: Thu 10 Sep 2026 17:00:51 +0000
Manifest this update: Thu 10 Sep 2026 17:00:51 +0000
Manifest next update: Fri 11 Sep 2026 17:00:51 +0000
Files and hashes: 1: 1zyWlwCVdN8MJ6qZjzYjBqnYAnw.roa (hash: toIU7uuVTY27+ajqkukCV0TuJOjX95XqjEeyJC7634I=)
2: FWkdYZB50BZtY6MGGDmkndrWg3c.roa (hash: SQCMpUUiMycQSLKgpqFr+kJ+h1QWi8a8jp6nB7Ve8EM=)
3: GVceVduBArktwOU6Mf55EriDNYs.roa (hash: z3ZJmc8CfjiYd8eml2YwxfFrpvhkb3YDOmwe9VvElx0=)
4: P0ADEoMBwNu5ihq9oTFhh5_jFZg.roa (hash: LbJcliWjxyfMysePIZ1L8MSr6AjLJjCi6E5I0PKLL9w=)
5: TaOkTEEE00uDuFBt0oukno2-oJM.roa (hash: L5MTfRyQyNuoejsnRiY40yBhfPSdHTRkPlZoOi8bsGw=)
6: ddMnUV_QpSF7ZtnFlA-jGKGrb5c.roa (hash: FmLB19l/QiUZ+HMpkAjjIF13qdNaGpMhZk/VbgzVjic=)
7: iK4oje7PnSRo9xAmtm698XYmzcU.roa (hash: N+soR0rvwyPizipAou2vD3c8sm67wSVa/ObW3Qfle0Y=)
8: nM47EZfQz5URVAVypY_TctzAdIk.crl (hash: hkPklfAAMZTH/amGURZfSVgKN5sZ9MIv2AJ674JXODU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:d8:5b:3e:ad:15:ed:50:f2:ec:83:8f:1a:ca:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Validity
Not Before: Sep 10 17:00:51 2026 GMT
Not After : Sep 11 17:00:51 2026 GMT
Subject: CN=35d418b92269cee5c6bc3408d81871230da21c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:e3:9c:6e:6d:29:ee:42:d0:46:0f:ce:40:
55:4e:ba:08:62:df:5b:1c:5e:50:69:3c:c6:c4:37:
94:d6:70:59:45:0a:18:73:a4:9f:5a:e2:31:6b:98:
34:f8:b3:64:e6:d6:68:04:a2:bc:b8:5b:32:6e:58:
31:ba:01:6c:fc:9d:65:b9:ef:39:34:b9:c4:24:c6:
3e:65:af:2a:ad:72:0a:4e:66:c1:35:8c:48:c3:d1:
ae:ed:0c:56:52:1d:e3:f0:f5:9b:34:aa:94:93:b8:
1f:86:b5:95:d4:3d:b1:9a:ed:b2:3d:83:a7:e3:a3:
02:4e:20:8f:f4:63:88:f5:5c:a0:b2:2f:ef:6e:f9:
fa:36:23:88:17:af:62:81:29:44:5c:04:96:eb:5c:
39:e5:39:b1:6e:3f:51:e8:98:27:1f:51:34:52:16:
dd:c2:77:d5:65:dc:1c:67:89:aa:8f:2d:00:6e:bb:
c2:d4:28:6c:45:92:23:50:e4:35:5d:60:df:3c:74:
82:6f:b2:03:6d:ee:6e:03:9e:e5:02:37:bc:78:86:
c5:92:e0:de:d3:0b:ec:0c:9f:9b:fd:6c:e6:68:6b:
e8:77:ed:98:ee:ac:cb:93:cd:50:10:60:6b:d8:d0:
d1:8d:5c:69:3d:c9:a5:6c:8c:af:96:5c:d2:61:d4:
8d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D4:18:B9:22:69:CE:E5:C6:BC:34:08:D8:18:71:23:0D:A2:1C:7C
X509v3 Authority Key Identifier:
keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:11:98:97:fe:07:5a:01:cb:fa:b6:46:40:b4:88:52:3e:26:
78:0e:ad:be:fd:7e:e1:a9:e6:97:15:fb:54:bf:7e:f0:5b:3a:
00:8b:ba:52:06:04:70:48:f9:0f:07:57:50:c6:57:10:da:1e:
2a:13:65:90:27:a5:aa:89:0e:5c:ba:e9:ca:dd:3d:d5:e1:0a:
72:af:52:90:ea:75:0b:9c:9f:df:91:af:79:38:2b:26:09:84:
ac:9b:e0:27:a2:d1:48:a2:02:4f:0d:99:1b:f5:d9:90:65:10:
85:ec:ca:31:40:7b:69:e8:3c:3b:ec:cb:ee:1a:4b:c7:0b:74:
b0:a4:68:d6:7d:a4:c0:88:d6:d8:e6:5b:0f:13:55:f4:4f:19:
30:e2:ef:ce:14:d6:87:ef:b9:56:97:8a:92:41:fc:07:a5:25:
71:66:f1:74:44:e6:e1:3b:e7:69:f1:80:0d:d7:50:1e:af:ef:
07:6c:0b:7c:f9:b7:99:16:ae:72:14:99:b8:14:a7:de:40:28:
71:1a:0e:8e:f5:ee:fe:35:80:04:b5:ed:c6:d3:58:42:91:8a:
7f:85:6d:68:ee:5f:5f:a2:29:b1:f1:8e:6a:0a:51:41:0f:85:
90:75:88:27:9a:bd:52:dc:d6:f1:2d:6b:03:d3:50:61:a1:f4:
e4:81:a0:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMQ9hbPq0V7VDy7IOPGsraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljY2UzYjExOTdkMGNmOTUxMTU0MDU3MmE1OGZkMzcyZGNj
MDc0ODkwHhcNMjYwOTEwMTcwMDUxWhcNMjYwOTExMTcwMDUxWjAzMTEwLwYDVQQD
EygzNWQ0MThiOTIyNjljZWU1YzZiYzM0MDhkODE4NzEyMzBkYTIxYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/LjnG5tKe5C0EYPzkBVTroIYt9b
HF5QaTzGxDeU1nBZRQoYc6SfWuIxa5g0+LNk5tZoBKK8uFsyblgxugFs/J1lue85
NLnEJMY+Za8qrXIKTmbBNYxIw9Gu7QxWUh3j8PWbNKqUk7gfhrWV1D2xmu2yPYOn
46MCTiCP9GOI9Vygsi/vbvn6NiOIF69igSlEXASW61w55Tmxbj9R6JgnH1E0Uhbd
wnfVZdwcZ4mqjy0AbrvC1ChsRZIjUOQ1XWDfPHSCb7IDbe5uA57lAje8eIbFkuDe
0wvsDJ+b/WzmaGvod+2Y7qzLk81QEGBr2NDRjVxpPcmlbIyvllzSYdSNjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXUGLkiac7lxrw0CNgYcSMNohx8MB8GA1UdIwQY
MBaAFJzOOxGX0M+VEVQFcqWP03LcwHSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgt
YTA0NWZmOGUyYWMwLzEvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgtYTA0NWZmOGUyYWMw
LzEvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRGYl/4H
WgHL+rZGQLSIUj4meA6tvv1+4anmlxX7VL9+8Fs6AIu6UgYEcEj5DwdXUMZXENoe
KhNlkCelqokOXLrpyt091eEKcq9SkOp1C5yf35GveTgrJgmErJvgJ6LRSKICTw2Z
G/XZkGUQhezKMUB7aeg8O+zL7hpLxwt0sKRo1n2kwIjW2OZbDxNV9E8ZMOLvzhTW
h++5VpeKkkH8B6UlcWbxdETm4TvnafGADddQHq/vB2wLfPm3mRauchSZuBSn3kAo
cRoOjvXu/jWABLXtxtNYQpGKf4VtaO5fX6IpsfGOagpRQQ+FkHWIJ5q9UtzW8S1r
A9NQYaH05IGg1g==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:41:23 2026 by rpki-client