Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
File: nmh1g4EMwAZO207-QFf1phpV5ws.mft (raw, json)
Hash identifier: 3dLJ3rI78BTiTtOFxPiu5ChjyGv9XRXyz7E+pi4LYR4=
Subject key identifier: 51:27:C1:41:4A:63:12:3B:0B:28:10:E6:C6:41:97:9C:DC:E1:4D:C4
Authority key identifier: 9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
Certificate issuer: /CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Certificate serial: 01A17C28EE614CB464CF4A0F9BC401077065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
Manifest number: 099A
Signing time: Tue 27 Oct 2026 07:00:19 +0000
Manifest this update: Tue 27 Oct 2026 07:00:19 +0000
Manifest next update: Wed 28 Oct 2026 07:00:19 +0000
Files and hashes: 1: nmh1g4EMwAZO207-QFf1phpV5ws.crl (hash: uuaeJ/hyKxeAmjI/lYxoFfVrOTREgw5qFbmWjpQaNQ0=)
2: wZUVkqB6E-aCMAdUL9kA2ghbJsU.roa (hash: 3wvCztUy4SNcpk1iX0gY8NL+kTpS+pWyTYrHQh19Dds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:28:ee:61:4c:b4:64:cf:4a:0f:9b:c4:01:07:70:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e687583810cc0064edb4efe4057f5a61a55e70b
Validity
Not Before: Oct 27 07:00:19 2026 GMT
Not After : Oct 28 07:00:19 2026 GMT
Subject: CN=5127c1414a63123b0b2810e6c641979cdce14dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:4f:0a:50:c1:63:4f:0a:27:e8:65:b1:13:
6b:53:d7:b4:c7:0e:76:a4:6d:e6:2b:0f:b3:a0:37:
1b:bf:6a:de:45:5a:6f:94:00:4f:19:5e:c8:54:42:
da:a5:ac:29:bb:27:6d:08:a7:3b:d5:be:9d:c5:ef:
b6:26:2d:9f:12:11:ad:d6:50:0f:2d:99:44:20:34:
ec:b2:9a:e0:6e:bd:9c:9e:e7:7f:c7:2a:ab:34:9e:
ee:1e:b3:61:65:42:8c:c4:e1:46:fb:16:a5:64:7f:
18:a0:fe:3f:d7:f4:a7:ef:36:57:6d:fc:f8:4e:8b:
01:e2:c6:d1:e4:95:17:16:cf:44:3f:89:cf:34:9f:
3c:35:ac:52:d8:ed:53:42:97:ed:ff:16:1f:0b:c2:
72:a1:82:f0:87:da:84:1c:3e:08:92:c2:da:d7:4d:
64:9e:58:b2:8e:bd:19:e9:6f:f6:1b:1b:67:63:87:
cc:ce:95:8a:da:78:f7:80:e7:9c:16:6a:25:5d:f1:
de:28:7c:a4:cf:84:bf:4e:62:a4:9b:be:5f:ba:f8:
d6:88:af:c9:09:f2:fd:80:3d:2e:d5:e8:d8:8b:06:
51:3f:36:81:37:f4:74:cf:5d:fb:89:10:6c:bf:cf:
0c:7b:53:5d:d2:80:34:b1:3f:9a:67:6e:ba:c7:a0:
2f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:27:C1:41:4A:63:12:3B:0B:28:10:E6:C6:41:97:9C:DC:E1:4D:C4
X509v3 Authority Key Identifier:
keyid:9E:68:75:83:81:0C:C0:06:4E:DB:4E:FE:40:57:F5:A6:1A:55:E7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmh1g4EMwAZO207-QFf1phpV5ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/7f78e3-0ccd-41fc-9883-69be037bf079/1/nmh1g4EMwAZO207-QFf1phpV5ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:85:c0:18:54:a5:fc:14:4f:61:b7:cd:69:5f:66:44:74:86:
cb:a7:6d:f6:04:dc:70:ef:e4:52:b0:fd:76:6b:4c:be:ba:4a:
1b:32:b0:e2:48:ec:80:be:cf:28:f3:e5:7e:ee:a7:99:ca:a5:
f1:bd:ff:3f:83:0a:3a:82:50:d1:06:9c:26:77:76:2e:ad:f0:
dd:9d:0b:6d:78:a7:16:cb:6a:75:cc:4c:65:17:88:5d:85:d7:
3d:c2:cd:13:ad:ed:4c:b4:65:a2:ab:cf:a2:57:4d:4b:08:7b:
34:c2:3e:3b:57:26:f6:de:98:ba:55:e1:18:ea:da:5c:21:ab:
bf:fb:91:07:9d:32:f7:d8:84:2d:e2:ef:34:7e:80:3a:84:62:
ba:ea:cc:52:3c:3e:90:26:75:65:b4:cc:91:04:ef:13:8f:0c:
35:8c:dc:d0:07:c1:c8:fd:f2:3e:14:cb:c5:7b:27:8d:d1:18:
3a:98:0e:8d:6e:1a:f6:4e:9c:94:3c:79:7a:bd:36:02:98:cf:
8b:85:fd:01:52:18:52:97:ea:b1:26:4e:ad:93:59:00:11:47:
75:3d:86:9e:7e:d3:3c:b3:24:62:2a:cc:d7:6b:c7:c7:ee:e3:
69:15:21:20:36:72:2b:d8:7a:5a:f6:62:a3:3d:f5:bf:55:a0:
aa:43:e9:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8KO5hTLRkz0oPm8QBB3BlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNjg3NTgzODEwY2MwMDY0ZWRiNGVmZTQwNTdmNWE2MWE1
NWU3MGIwHhcNMjYxMDI3MDcwMDE5WhcNMjYxMDI4MDcwMDE5WjAzMTEwLwYDVQQD
Eyg1MTI3YzE0MTRhNjMxMjNiMGIyODEwZTZjNjQxOTc5Y2RjZTE0ZGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyttPClDBY08KJ+hlsRNrU9e0xw52
pG3mKw+zoDcbv2reRVpvlABPGV7IVELapawpuydtCKc71b6dxe+2Ji2fEhGt1lAP
LZlEIDTssprgbr2cnud/xyqrNJ7uHrNhZUKMxOFG+xalZH8YoP4/1/Sn7zZXbfz4
TosB4sbR5JUXFs9EP4nPNJ88NaxS2O1TQpft/xYfC8JyoYLwh9qEHD4IksLa101k
nliyjr0Z6W/2GxtnY4fMzpWK2nj3gOecFmolXfHeKHykz4S/TmKkm75fuvjWiK/J
CfL9gD0u1ejYiwZRPzaBN/R0z137iRBsv88Me1Nd0oA0sT+aZ266x6AvLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEnwUFKYxI7CygQ5sZBl5zc4U3EMB8GA1UdIwQY
MBaAFJ5odYOBDMAGTttO/kBX9aYaVecLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC83Zjc4ZTMtMGNjZC00MWZjLTk4ODMt
NjliZTAzN2JmMDc5LzEvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC83Zjc4ZTMtMGNjZC00MWZjLTk4ODMtNjliZTAzN2JmMDc5
LzEvbm1oMWc0RU13QVpPMjA3LVFGZjFwaHBWNXdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYXAGFSl
/BRPYbfNaV9mRHSGy6dt9gTccO/kUrD9dmtMvrpKGzKw4kjsgL7PKPPlfu6nmcql
8b3/P4MKOoJQ0QacJnd2Lq3w3Z0LbXinFstqdcxMZReIXYXXPcLNE63tTLRloqvP
oldNSwh7NMI+O1cm9t6YulXhGOraXCGrv/uRB50y99iELeLvNH6AOoRiuurMUjw+
kCZ1ZbTMkQTvE48MNYzc0AfByP3yPhTLxXsnjdEYOpgOjW4a9k6clDx5er02ApjP
i4X9AVIYUpfqsSZOrZNZABFHdT2Gnn7TPLMkYirM12vHx+7jaRUhIDZyK9h6WvZi
oz31v1WgqkPpFg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:19:26 2026 by rpki-client