Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
File: nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft (raw, json)
Hash identifier: Hu83GiI+F/+QGE9hygamkFtw+BXJPXNxyYjUxBE/CSc=
Subject key identifier: CD:1A:AD:FD:E7:CA:C2:ED:C5:1A:87:2F:AF:C8:F6:2F:9D:8E:16:BE
Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
Certificate issuer: /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Certificate serial: 019CB6CAD723B93436528F1D4C5801DB18D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
Manifest number: 044F
Signing time: Wed 04 Mar 2026 03:01:12 +0000
Manifest this update: Wed 04 Mar 2026 03:01:12 +0000
Manifest next update: Thu 05 Mar 2026 03:01:12 +0000
Files and hashes: 1: OsHD-8Mh29wev3uW0LyQcxnz7vY.roa (hash: 5qHNuzCFg0VWcxLcG9huWE23v4lgV78sUuV4jVInwd8=)
2: nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl (hash: Ohv1dL9hnAiwxVyZjrRZOAGrnY6ifXvd758XeUknKkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 22:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b6:ca:d7:23:b9:34:36:52:8f:1d:4c:58:01:db:18:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Validity
Not Before: Mar 4 03:01:12 2026 GMT
Not After : Mar 5 03:01:12 2026 GMT
Subject: CN=cd1aadfde7cac2edc51a872fafc8f62f9d8e16be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:98:0c:d8:48:6c:e4:dd:24:46:42:4f:3d:
59:b7:04:63:83:ef:36:5c:94:89:6d:42:78:e3:9f:
9f:95:0d:2c:27:8b:a2:8d:10:45:e1:67:0f:6b:d4:
d0:7a:9b:ac:ba:1a:d5:dc:87:7c:1d:b2:18:9f:96:
18:19:0a:cf:f0:dc:3c:70:a5:61:17:8d:92:9e:43:
64:74:c8:f0:f6:45:b9:51:84:03:0b:3a:2d:62:49:
0a:6c:32:1f:4c:9a:c7:13:02:03:01:8c:32:18:08:
33:bd:e6:45:0f:bb:59:71:ed:53:09:7c:7a:e6:12:
a0:ce:84:f2:79:de:4d:6c:61:c9:fe:28:ff:e9:1a:
7d:be:e3:87:0b:08:fd:26:84:a1:d0:32:fa:20:1b:
bd:78:1e:e5:c0:22:a1:ad:31:b8:c0:42:06:3b:5c:
37:6e:c4:b3:9f:65:5b:2b:06:32:12:38:50:d0:b7:
a8:1e:b9:e0:71:74:94:c3:46:12:50:21:3b:b0:6f:
49:70:9b:5c:95:89:3d:0b:26:92:86:54:b0:bc:ef:
be:46:dc:85:e2:f3:fd:db:cb:44:88:28:c0:d5:39:
3c:72:ea:57:eb:cf:bf:9a:23:14:8f:d9:cb:34:5b:
71:54:81:dc:ac:75:67:9d:b1:40:23:c8:37:60:7f:
94:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1A:AD:FD:E7:CA:C2:ED:C5:1A:87:2F:AF:C8:F6:2F:9D:8E:16:BE
X509v3 Authority Key Identifier:
keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9e:7e:d2:ee:2a:ad:8d:56:36:f7:b2:ce:89:3c:d8:cb:9d:
8e:d7:d2:84:45:7b:fa:3d:90:18:40:ba:b8:a5:8c:7a:1c:63:
80:a0:18:b8:64:3b:ae:bb:e3:7c:82:1a:39:cf:c0:1e:b6:cb:
76:52:45:5d:1c:de:ff:03:e4:cf:13:20:91:b7:98:fc:48:33:
99:17:34:24:03:f0:ac:47:be:d3:20:20:8f:dd:c3:fe:d2:90:
bf:6b:7b:77:f5:28:b2:91:55:b5:b3:15:2b:29:65:19:9d:4d:
c7:c4:56:2e:46:00:17:ba:68:a8:c0:6c:5c:85:80:2a:53:06:
f6:6e:80:13:4a:06:ca:0c:a7:68:6a:a5:84:e5:cf:fd:d0:df:
6a:12:bc:ab:43:c0:31:15:2a:ab:5c:da:ba:49:27:c2:57:22:
2b:75:f3:56:9e:d6:0b:4f:95:93:34:b7:ea:32:6e:a3:13:71:
b0:e2:ed:8d:7b:1d:8a:32:a0:6a:e7:96:bd:36:ba:c9:5a:9a:
b6:99:94:9a:5d:47:c6:7b:0b:c1:fd:1c:2a:36:73:77:a2:17:
b7:b3:10:2e:37:53:d6:7f:af:74:a9:77:a4:8b:b1:00:20:15:
ae:94:4b:1b:ff:70:fe:e1:cb:60:3c:94:ab:d9:f7:bf:81:51:
80:d8:80:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy2ytcjuTQ2Uo8dTFgB2xjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljY2UxNjAwZjUwNzM1OTYwZjg2ZDYyMWNkNGY1ZjU5Zjg3
OWEwZTgwHhcNMjYwMzA0MDMwMTEyWhcNMjYwMzA1MDMwMTEyWjAzMTEwLwYDVQQD
EyhjZDFhYWRmZGU3Y2FjMmVkYzUxYTg3MmZhZmM4ZjYyZjlkOGUxNmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/yYDNhIbOTdJEZCTz1ZtwRjg+82
XJSJbUJ445+flQ0sJ4uijRBF4WcPa9TQepusuhrV3Id8HbIYn5YYGQrP8Nw8cKVh
F42SnkNkdMjw9kW5UYQDCzotYkkKbDIfTJrHEwIDAYwyGAgzveZFD7tZce1TCXx6
5hKgzoTyed5NbGHJ/ij/6Rp9vuOHCwj9JoSh0DL6IBu9eB7lwCKhrTG4wEIGO1w3
bsSzn2VbKwYyEjhQ0LeoHrngcXSUw0YSUCE7sG9JcJtclYk9CyaShlSwvO++RtyF
4vP928tEiCjA1Tk8cupX68+/miMUj9nLNFtxVIHcrHVnnbFAI8g3YH+UmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0arf3nysLtxRqHL6/I9i+djha+MB8GA1UdIwQY
MBaAFJzOFgD1BzWWD4bWIc1PX1n4eaDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My80ZjE3ZmEtZDVlOC00MzlkLTg3YTIt
ZGYzMmEyNWM1ZjJmLzEvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My80ZjE3ZmEtZDVlOC00MzlkLTg3YTItZGYzMmEyNWM1ZjJm
LzEvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJ5+0u4q
rY1WNveyzok82MudjtfShEV7+j2QGEC6uKWMehxjgKAYuGQ7rrvjfIIaOc/AHrbL
dlJFXRze/wPkzxMgkbeY/EgzmRc0JAPwrEe+0yAgj93D/tKQv2t7d/UospFVtbMV
KyllGZ1Nx8RWLkYAF7poqMBsXIWAKlMG9m6AE0oGygynaGqlhOXP/dDfahK8q0PA
MRUqq1zaukknwlciK3XzVp7WC0+VkzS36jJuoxNxsOLtjXsdijKgaueWvTa6yVqa
tpmUml1HxnsLwf0cKjZzd6IXt7MQLjdT1n+vdKl3pIuxACAVrpRLG/9w/uHLYDyU
q9n3v4FRgNiAWg==
-----END CERTIFICATE-----
Generated at Wed Mar 4 06:12:56 2026 by rpki-client