Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
File: NIg6t5nxQCjltTdQbir4eESQQcU.mft (raw, json)
Hash identifier: ECDfJH0GohzkQSLy4aXEfq6vhHLUFGSZEt1oVFr89sI=
Subject key identifier: E3:E4:A2:D5:62:3F:57:00:46:EE:85:D7:FE:C7:4D:E4:3A:75:6D:4F
Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
Certificate issuer: /CN=34883ab799f14028e5b537506e2af878449041c5
Certificate serial: 01A17883919EC39A1E247B4015E6D7805C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
Manifest number: 0991
Signing time: Mon 26 Oct 2026 14:00:50 +0000
Manifest this update: Mon 26 Oct 2026 14:00:50 +0000
Manifest next update: Tue 27 Oct 2026 14:00:50 +0000
Files and hashes: 1: NIg6t5nxQCjltTdQbir4eESQQcU.crl (hash: FRXpfV3d7kczhxfO7jvM/ZDHGxQpBjLb3Ei3wMDODNs=)
2: ajWUGAq6BMTKrTNOHft42ywINnc.roa (hash: Oc0Q5MG2sAXuAr4KfyQjmkzbXtqqCBE8bhQRqqONsEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:91:9e:c3:9a:1e:24:7b:40:15:e6:d7:80:5c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34883ab799f14028e5b537506e2af878449041c5
Validity
Not Before: Oct 26 14:00:50 2026 GMT
Not After : Oct 27 14:00:50 2026 GMT
Subject: CN=e3e4a2d5623f570046ee85d7fec74de43a756d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:94:1a:d5:28:a0:0c:7a:9d:6e:a9:44:df:ea:
24:d9:2a:99:de:93:5b:f2:d7:db:5f:9b:ba:40:d8:
f4:ab:2a:96:81:e4:2a:ac:00:b7:7b:62:4c:79:5c:
3b:2a:c4:45:07:eb:17:4d:9b:f2:ef:54:25:cb:a0:
28:54:14:5e:15:1c:63:81:4c:7c:03:b5:3c:50:f7:
3c:8f:a4:04:92:8a:93:a3:c1:d2:4f:06:24:ac:ed:
7b:e1:a4:dd:f1:b5:4e:15:a8:fb:7d:1b:1f:d0:f1:
5d:11:05:49:67:1f:42:0c:e2:f7:0a:15:08:d0:29:
e4:4f:86:d0:33:e1:be:ae:ac:08:75:e9:f4:e4:9c:
4a:38:ff:80:9b:0b:97:bb:b7:39:23:a2:9b:53:b7:
c5:d4:61:51:ef:6e:a5:14:e3:f5:56:62:b9:45:0c:
b3:38:81:c8:7c:94:54:e5:b7:2d:6f:36:9d:0d:d0:
6d:23:97:c7:61:90:8d:81:cb:d0:d9:d8:fa:78:9a:
10:f0:39:18:3d:d2:a1:31:94:a5:ab:d3:ad:2c:9e:
f5:6c:55:f0:01:40:b6:d3:a9:b2:7a:04:6e:c7:a3:
da:6c:e9:c2:c1:fd:59:ae:0a:00:a8:ad:9d:22:33:
9c:09:56:e2:fe:b9:5f:7a:cf:94:90:df:c3:12:41:
99:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E4:A2:D5:62:3F:57:00:46:EE:85:D7:FE:C7:4D:E4:3A:75:6D:4F
X509v3 Authority Key Identifier:
keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:83:b9:c6:1c:c5:c3:79:8f:57:87:ec:73:2d:f8:2e:74:a7:
2d:7c:c4:86:c2:d0:f5:24:0e:9e:c2:fa:40:0c:48:b5:5b:b0:
b7:59:f0:72:2b:68:8e:49:06:7d:69:6a:8a:0f:52:68:53:ce:
61:f2:14:3b:f3:a0:a9:02:69:35:75:30:87:6e:62:71:2b:3f:
68:1d:09:df:4a:b7:c1:ed:30:b5:87:b0:df:ce:73:d9:0c:ec:
d9:ac:35:6e:c4:83:d7:ea:6f:52:be:4f:c7:ad:db:61:53:73:
c6:8b:2f:4d:cf:4f:cd:fb:c5:7d:f1:f7:25:fe:cd:cd:47:46:
20:44:08:b9:db:fe:2e:ff:e4:13:3a:69:32:1a:20:ee:65:4f:
b7:0b:ba:40:d9:91:86:3c:82:bf:5c:51:ff:11:d4:70:25:78:
be:4b:e7:70:d1:ae:83:63:26:ef:76:1a:1e:2c:84:c4:3d:09:
bb:e8:af:14:12:9b:13:08:4b:54:9a:73:84:a8:c6:30:d6:ac:
16:a6:bf:0e:88:bd:3d:4b:a8:07:22:76:3b:95:60:49:16:3d:
c9:85:70:30:83:3e:ec:bf:3a:29:3f:5d:12:3c:e6:de:c4:23:
03:ad:6e:55:d5:46:c6:21:e9:80:a2:f8:e5:71:cb:b8:a4:2f:
d3:55:bc:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF4g5Gew5oeJHtAFebXgFxrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ODgzYWI3OTlmMTQwMjhlNWI1Mzc1MDZlMmFmODc4NDQ5
MDQxYzUwHhcNMjYxMDI2MTQwMDUwWhcNMjYxMDI3MTQwMDUwWjAzMTEwLwYDVQQD
EyhlM2U0YTJkNTYyM2Y1NzAwNDZlZTg1ZDdmZWM3NGRlNDNhNzU2ZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pQa1SigDHqdbqlE3+ok2SqZ3pNb
8tfbX5u6QNj0qyqWgeQqrAC3e2JMeVw7KsRFB+sXTZvy71Qly6AoVBReFRxjgUx8
A7U8UPc8j6QEkoqTo8HSTwYkrO174aTd8bVOFaj7fRsf0PFdEQVJZx9CDOL3ChUI
0CnkT4bQM+G+rqwIden05JxKOP+AmwuXu7c5I6KbU7fF1GFR726lFOP1VmK5RQyz
OIHIfJRU5bctbzadDdBtI5fHYZCNgcvQ2dj6eJoQ8DkYPdKhMZSlq9OtLJ71bFXw
AUC206myegRux6PabOnCwf1ZrgoAqK2dIjOcCVbi/rlfes+UkN/DEkGZ6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPkotViP1cARu6F1/7HTeQ6dW1PMB8GA1UdIwQY
MBaAFDSIOreZ8UAo5bU3UG4q+HhEkEHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTklnNnQ1bnhRQ2psdFRkUWJpcjRlRVNRUWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mNGRlMTEtNTIzOS00ZWM1LTgxZTYt
MjY0OGZlOWNjMDIwLzEvTklnNnQ1bnhRQ2psdFRkUWJpcjRlRVNRUWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mNGRlMTEtNTIzOS00ZWM1LTgxZTYtMjY0OGZlOWNjMDIw
LzEvTklnNnQ1bnhRQ2psdFRkUWJpcjRlRVNRUWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIO5xhzF
w3mPV4fscy34LnSnLXzEhsLQ9SQOnsL6QAxItVuwt1nwcitojkkGfWlqig9SaFPO
YfIUO/OgqQJpNXUwh25icSs/aB0J30q3we0wtYew385z2Qzs2aw1bsSD1+pvUr5P
x63bYVNzxosvTc9PzfvFffH3Jf7NzUdGIEQIudv+Lv/kEzppMhog7mVPtwu6QNmR
hjyCv1xR/xHUcCV4vkvncNGug2Mm73YaHiyExD0Ju+ivFBKbEwhLVJpzhKjGMNas
Fqa/Doi9PUuoByJ2O5VgSRY9yYVwMIM+7L86KT9dEjzm3sQjA61uVdVGxiHpgKL4
5XHLuKQv01W8Ew==
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:10:57 2026 by rpki-client