Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/nGEZFxgpQtNWIy3yEcJFkTIMv58.mft
File: nGEZFxgpQtNWIy3yEcJFkTIMv58.mft (raw, json)
Hash identifier: 8RVyhMhXotu6kn/40TQskufK3665lNjUTtqmmGLjIdg=
Subject key identifier: D3:FD:46:42:CE:2D:0E:EC:8A:43:F9:EB:3F:0D:DF:F2:EE:5B:EA:59
Authority key identifier: 9C:61:19:17:18:29:42:D3:56:23:2D:F2:11:C2:45:91:32:0C:BF:9F
Certificate issuer: /CN=9c611917182942d356232df211c24591320cbf9f
Certificate serial: 01A17A0413D88CC423419F2FD822BBB74840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGEZFxgpQtNWIy3yEcJFkTIMv58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/nGEZFxgpQtNWIy3yEcJFkTIMv58.mft
Manifest number: 013D
Signing time: Mon 26 Oct 2026 21:00:49 +0000
Manifest this update: Mon 26 Oct 2026 21:00:49 +0000
Manifest next update: Tue 27 Oct 2026 21:00:49 +0000
Files and hashes: 1: nGEZFxgpQtNWIy3yEcJFkTIMv58.crl (hash: QcUm30lRreHad6lWvm1ZbEg/hwLQYSUmq+TkEz9V9fU=)
2: uyGs1GkOLrkT-JQkddwbsYYvxTk.roa (hash: PUkHR7Nd7XHI9C2nmOduIoKY0480NQ99aYZtC1XI+qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/nGEZFxgpQtNWIy3yEcJFkTIMv58.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/nGEZFxgpQtNWIy3yEcJFkTIMv58.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGEZFxgpQtNWIy3yEcJFkTIMv58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:13:d8:8c:c4:23:41:9f:2f:d8:22:bb:b7:48:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c611917182942d356232df211c24591320cbf9f
Validity
Not Before: Oct 26 21:00:49 2026 GMT
Not After : Oct 27 21:00:49 2026 GMT
Subject: CN=d3fd4642ce2d0eec8a43f9eb3f0ddff2ee5bea59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:21:2c:19:c5:85:ce:db:82:32:ee:28:4a:
44:5b:78:f7:6e:a8:db:9d:09:e4:71:d5:fe:d1:c2:
f7:e9:ce:23:6a:f2:17:9d:7b:38:4c:19:34:62:09:
dc:c5:18:67:f6:a9:01:e4:53:e5:c7:f9:25:ed:b7:
d8:aa:4a:f7:2a:ae:04:f3:d1:a3:32:90:f4:c3:aa:
30:08:1c:5a:12:7c:84:e0:fb:c3:da:13:9b:9c:42:
8a:f7:92:73:fb:c6:83:f7:80:3e:47:13:7b:38:c1:
e6:d1:78:24:b6:94:a0:36:84:86:16:97:5d:3d:a8:
e7:15:4d:ae:58:ec:93:3c:92:9a:3d:fd:b2:ef:3b:
47:8c:b1:89:0e:85:fe:b4:05:7e:8f:70:41:12:67:
51:ff:3d:b0:e4:01:bd:6b:45:33:b3:9b:cf:73:11:
fd:f1:44:c5:bb:e1:ba:cf:60:6e:f9:80:2c:84:f3:
6d:29:db:ad:8e:67:79:95:ae:38:6e:fe:6e:d2:7d:
75:4b:b6:c7:e4:f4:2d:ee:2a:19:52:b1:7c:67:82:
9f:39:89:4d:7c:80:fb:91:f8:b5:41:b4:c5:2d:f4:
2b:09:0b:98:ff:65:dd:9d:e5:d8:06:67:03:7c:84:
ad:4b:73:fa:0b:0d:40:d2:23:26:77:c7:d6:d5:9e:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FD:46:42:CE:2D:0E:EC:8A:43:F9:EB:3F:0D:DF:F2:EE:5B:EA:59
X509v3 Authority Key Identifier:
keyid:9C:61:19:17:18:29:42:D3:56:23:2D:F2:11:C2:45:91:32:0C:BF:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGEZFxgpQtNWIy3yEcJFkTIMv58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/nGEZFxgpQtNWIy3yEcJFkTIMv58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/nGEZFxgpQtNWIy3yEcJFkTIMv58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:85:e4:69:0e:1a:ee:a6:43:d0:3d:3d:be:9d:39:55:f5:80:
42:2d:d9:4e:7f:ad:5b:7f:d9:71:30:4d:65:08:ad:ab:9e:61:
0b:5c:a1:a2:36:7f:03:50:ee:13:1e:af:94:90:3e:03:54:03:
f7:9d:cf:4c:4f:b7:6c:47:c3:31:ea:e8:11:73:a2:48:ec:6b:
87:ce:7a:22:c8:a8:2d:cc:9b:18:58:cf:03:2d:6f:ea:3a:7f:
b4:e4:dd:87:11:5e:0d:35:b8:af:ef:8e:27:65:78:1f:b0:02:
3b:f8:0c:db:81:10:59:11:c9:03:20:13:6b:7c:49:bd:13:ab:
53:db:0e:c1:ce:b5:48:3c:2b:f2:58:3d:f3:bb:45:24:3d:24:
36:06:51:4d:ab:d9:3d:5b:fa:bd:0d:dc:8c:fb:fc:f7:de:c9:
27:8d:a9:4d:4b:ea:f1:8d:2a:71:01:95:4a:1a:20:61:08:12:
c6:c8:fd:6f:a9:84:1c:8a:6e:6b:44:63:54:21:97:28:e0:d1:
86:e1:87:b4:30:77:a1:43:82:64:ba:c0:fc:8e:6f:06:5f:6b:
f2:ec:0c:b4:4c:3f:87:81:c8:bc:9b:27:40:88:f0:f1:23:b0:
c5:15:73:59:40:52:0b:1b:b0:cc:a1:55:21:99:21:5d:eb:cb:
f3:9e:8e:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6BBPYjMQjQZ8v2CK7t0hAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNjExOTE3MTgyOTQyZDM1NjIzMmRmMjExYzI0NTkxMzIw
Y2JmOWYwHhcNMjYxMDI2MjEwMDQ5WhcNMjYxMDI3MjEwMDQ5WjAzMTEwLwYDVQQD
EyhkM2ZkNDY0MmNlMmQwZWVjOGE0M2Y5ZWIzZjBkZGZmMmVlNWJlYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWAhLBnFhc7bgjLuKEpEW3j3bqjb
nQnkcdX+0cL36c4javIXnXs4TBk0YgncxRhn9qkB5FPlx/kl7bfYqkr3Kq4E89Gj
MpD0w6owCBxaEnyE4PvD2hObnEKK95Jz+8aD94A+RxN7OMHm0XgktpSgNoSGFpdd
PajnFU2uWOyTPJKaPf2y7ztHjLGJDoX+tAV+j3BBEmdR/z2w5AG9a0Uzs5vPcxH9
8UTFu+G6z2Bu+YAshPNtKdutjmd5la44bv5u0n11S7bH5PQt7ioZUrF8Z4KfOYlN
fID7kfi1QbTFLfQrCQuY/2XdneXYBmcDfIStS3P6Cw1A0iMmd8fW1Z67jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNP9RkLOLQ7sikP56z8N3/LuW+pZMB8GA1UdIwQY
MBaAFJxhGRcYKULTViMt8hHCRZEyDL+fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkdFWkZ4Z3BRdE5XSXkzeUVjSkZrVElNdjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYzZiMTQtN2U4Ny00OWM3LWEzYjMt
YTBhNjBiYjljZDliLzEvbkdFWkZ4Z3BRdE5XSXkzeUVjSkZrVElNdjU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yYzZiMTQtN2U4Ny00OWM3LWEzYjMtYTBhNjBiYjljZDli
LzEvbkdFWkZ4Z3BRdE5XSXkzeUVjSkZrVElNdjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIXkaQ4a
7qZD0D09vp05VfWAQi3ZTn+tW3/ZcTBNZQitq55hC1yhojZ/A1DuEx6vlJA+A1QD
953PTE+3bEfDMeroEXOiSOxrh856IsioLcybGFjPAy1v6jp/tOTdhxFeDTW4r++O
J2V4H7ACO/gM24EQWRHJAyATa3xJvROrU9sOwc61SDwr8lg987tFJD0kNgZRTavZ
PVv6vQ3cjPv8997JJ42pTUvq8Y0qcQGVShogYQgSxsj9b6mEHIpua0RjVCGXKODR
huGHtDB3oUOCZLrA/I5vBl9r8uwMtEw/h4HIvJsnQIjw8SOwxRVzWUBSCxuwzKFV
IZkhXevL856OBQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:00:22 2026 by rpki-client